Installation of package_config/CLASS.gpg

[Andrew Ruthven]

Hey,

This is almost what I did. We already have a postinst for all our
files/etc/apt/sources.list.d/X directories to substitute in distro names and
URLs, so I added:

# See if we need to fcopy a signing key in
key=$(grep signed-by= $2 | sed -E 's/.*signed-by=(.+?asc)( |\]).*/\1/')
if [ "$key" != "" ];
then
    fcopy -M $key
fi

Cheers,
Andrew

On Tue, 2023-08-22 at 09:46 +0200, Thomas Lange wrote:
> I would suggest you are using a hook with an fcopy command to put
> those files to some other locations.
> 
> > > > > > On Tue, 18 Jul 2023 21:36:04 +1200, Andrew Ruthven
> > > > > > <andrew at etc.gen.nz> said:
> 
>     > Hey,
>     > I see that FAI since 5.8.7 will install package_config/CLASS.gpg
>     > into /etc/apt/trusted.gpg.d/ . Apt will then trust all the keyrings
> in
>     > /etc/apt/trusted.gpg.d . This isn't really ideal, and I'd prefer to
> use
>     > Signed-By to specify which GPG keyring to trust for our various
> additional
>     > repositories.
> 
>     > How about having task_repository check for another file, say
>     > package_config/CLASS.gpg_dest that'd allow us to specify where to
> copy
>     > package_config/CLASS.gpg to?
> 

-- 
Andrew Ruthven, Wellington, New Zealand
andrew at etc.gen.nz         |
Catalyst Cloud:           | This space intentionally left blank
 https://catalystcloud.nz |