[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#432309: should check Release signature by default?



Christoph Anton Mitterer wrote:
> I don't see why this should cause a problem... AFAIU, right now it must
> have already hardcoded the default keyring for the distro it was built
> for, right? i.e. on
> Debian /usr/share/keyrings/debian-archive-keyring.gpg
> 
> So if such keyring was specified during build... it should strictly
> require it as I've mentioned before... (unless another --keyring or
> --no-check-gpg is given)
> 
> If it's built for *buntu it should strictly ... the same just perhaps
> with:

I'm not talking about building debootstrap to bootstrap some other linux
distribution. I'm talking about the common practice of using it to
bootstrap debian from other linux distributions.

-- 
see shy jo

Attachment: signature.asc
Description: Digital signature


Reply to: