null31
/
aab
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
38 Commits 1 Branch 0 Tags 68 KiB
Perl 92.1%
Makefile 5.6%
Shell 2.3%
Go to file
Thomas Lamprecht f29113a862 caching: cache signatures but ignore outer verify errors 
new pacman (6.0) doesn't downloads the <pkg>.sig files if SigLevel is
set to `Never`, an understandable optimization in general but for our
use case an issue.

We cache packages on the host, where we have internet but do not have
an archlinux trusted keyring setup, we then verify the non-bootstrap
packages (i.e., all but pacman and the keyring) in the bootstrapping
container itself

This is somewhat ugly, but one of the simpler options, an possible
alternative on the long run could be to package archlinux-keyring for
debian and have that as dependency for aab, then we could populate a
local directory (pacman gas a `--gpgdir` option) and fully verify all
that..

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
 		2021-12-02 16:43:01 +01:00
PVE caching: cache signatures but ignore outer verify errors 2021-12-02 16:43:01 +01:00
scripts initial import 2015-08-21 09:08:11 +02:00
.gitignore initial import 2015-08-21 09:08:11 +02:00
COPYING update copyright years 2021-12-01 19:46:45 +01:00
Makefile followup: fix indentation and missing single quote 2019-09-23 10:28:13 +02:00
README added README and COPYING files 2015-08-24 08:01:14 +02:00
aab finalize: allow to choose gzip or zstd and default to latter 2021-12-01 19:47:41 +01:00

README 

Usage example:

1) Create an aab.conf file describing your template.

--- Example aab.conf:
Name: base
Version: 2015-08-21-1
Section: optional
Maintainer: Your Name
Headline: ArchLinux base image.
Architecture: x86_64
Source: http://archlinux.cu.be/$repo/os/$arch
--- End of example

2) Run as root:

  # ./aab init
  # ./aab bootstrap

3) Maybe install additional packages

  # ./aab install base-devel

4) Create the archive and clean up:

  # ./aab finalize
  # ./aab cleanup