[linux-fai-commit] [faiproject/fai] 7d5d32: update standards version, no changes needed

[Thomas Lange]

  Branch: refs/heads/master
  Home:   https://github.com/faiproject/fai
  Commit: 7d5d32d57fef1e4c01d770bb06e3b6bb08894bf9
      https://github.com/faiproject/fai/commit/7d5d32d57fef1e4c01d770bb06e3b6bb08894bf9
  Author: Thomas Lange <lange at informatik.uni-koeln.de>
  Date:   2018-05-21 (Mon, 21 May 2018)

  Changed paths:
    M debian/control

  Log Message:
  -----------
  update standards version, no changes needed


  Commit: 6c99dc58ab4fcc9c2b668564ed9a3e5ee8c2a968
      https://github.com/faiproject/fai/commit/6c99dc58ab4fcc9c2b668564ed9a3e5ee8c2a968
  Author: Thomas Lange <lange at informatik.uni-koeln.de>
  Date:   2018-05-23 (Wed, 23 May 2018)

  Changed paths:
    M bin/fai-cd

  Log Message:
  -----------
  use trusted=yes instead of allow-insecure


  Commit: 81d8c2ede7cf2c2d3af656600df281efdbf657e6
      https://github.com/faiproject/fai/commit/81d8c2ede7cf2c2d3af656600df281efdbf657e6
  Author: Thomas Lange <lange at informatik.uni-koeln.de>
  Date:   2018-05-25 (Fri, 25 May 2018)

  Changed paths:
    M lib/subroutines

  Log Message:
  -----------
  Run gpg in FAI to convert .asc files to .gpg files.

Thanks to Derek Poon for the great analysis and patch.

FAI 5.5.3 changed the task_repository() function in /usr/lib/fai/subroutines, such that it copies *.asc files into the
target OS's /etc/apt/trusted.gpg.d instead of calling `apt-key add`.

This broke APT keys for target OSes that have apt < 1.4~beta1, which only look for /etc/apt/trusted.gpg.d/*.gpg files.
Since 1.4~beta1, APT will also look for /etc/apt/trusted.gpg.d/*.asc.

FAI 5.6.1 introduces a workaround: for each relevant class, it copies a $class.gpg file if it exists, and falls back to
copying a $class.asc file.  However, the FAI 5.6.1 behaviour still imposes an unreasonable burden of maintaining
redundant files in the package_config directory: .asc files for FAI clients older than 5.5.3, and .gpg files for FAI clients
since 5.6.1.

To summarize, FAI has traditionally supported ASCII-armored .asc key files, and APT has traditionally supported dearmored
.gpg key files.  I see two possible good solutions:


Compare: https://github.com/faiproject/fai/compare/d0f39b9a7519...81d8c2ede7cf
      **NOTE:** This service been marked for deprecation: https://developer.github.com/changes/2018-04-25-github-services-deprecation/

      Functionality will be removed from GitHub.com on January 31st, 2019.