Accessing external https repo during install

[Diego Zuccato]

That wouldn't work, since salt.list is copied too early, before the 
first update, so the update fails (well, in ignores the repo but logs an 
error in error.log) because it can't authenticate the external repo (it 
misses ca-certificates, but to install ca-certificates it needs to 
update the repositories... circular dependency).

Diego

Il 18/01/2024 11:50, Andrew Ruthven ha scritto:
> On Wed, 2024-01-17 at 17:10 +0100, Markus Köberl wrote:
>> FAI_DEBOOTSTRAP_OPTS="--include=ca-certificates,apt-transport-https"
> 
> Hey,
> 
> My approach for this kind of thing is to have a hook that install ca-
> certificates. Probably updatebase.SALT - or better,
> updatebase.CACERTIFICATES and have SALT set CACERTIFICATES
> 
> Cheers,
> Andrew
> 

-- 
Diego Zuccato
DIFA - Dip. di Fisica e Astronomia
Servizi Informatici
Alma Mater Studiorum - Università di Bologna
V.le Berti-Pichat 6/2 - 40127 Bologna - Italy
tel.: +39 051 20 95786