summaryrefslogtreecommitdiffstats
path: root/debootstrap
diff options
context:
space:
mode:
authorCyril Brulebois <kibi@debian.org>2015-05-15 02:32:07 (GMT)
committerCyril Brulebois <kibi@debian.org>2015-05-15 02:38:31 (GMT)
commitbe99f7b4c1fc622f9c4d4f93d96aec649ff7c543 (patch)
tree286ebcbb9d544a3693cbb338701df561e38a9ff4 /debootstrap
parenteec4c44fc78efa492d4eea5ff69089b6b86979e1 (diff)
downloaddebootstrap-be99f7b4c1fc622f9c4d4f93d96aec649ff7c543.zip
debootstrap-be99f7b4c1fc622f9c4d4f93d96aec649ff7c543.tar.gz
debootstrap-be99f7b4c1fc622f9c4d4f93d96aec649ff7c543.tar.bz2
Add support for --force-check-gpg (Closes: #661501, #733179, #775454).
With this option, one can programmatically make sure keyring checks are used and that no fallback to an https mirror happens.
Diffstat (limited to 'debootstrap')
-rwxr-xr-xdebootstrap8
1 files changed, 8 insertions, 0 deletions
diff --git a/debootstrap b/debootstrap
index 3d45c9c..e987112 100755
--- a/debootstrap
+++ b/debootstrap
@@ -27,6 +27,7 @@ LANG=C
USE_COMPONENTS=main
KEYRING=""
DISABLE_KEYRING=""
+FORCE_KEYRING=""
VARIANT=""
ARCH=""
HOST_ARCH=""
@@ -104,6 +105,9 @@ usage()
scratchbox, minbase)
--keyring=K check Release files against keyring K
--no-check-gpg avoid checking Release file signatures
+ --force-check-gpg force checking Release file signatures
+ (also disables automatic fallback to HTTPS in case
+ of a missing keyring), aborting otherwise
--no-resolve-deps don't try to resolve dependencies automatically
--unpack-tarball=T acquire .debs from a tarball instead of http
@@ -319,6 +323,10 @@ if [ $# != 0 ] ; then
shift 1
DISABLE_KEYRING=1
;;
+ --force-check-gpg)
+ shift 1
+ FORCE_KEYRING=1
+ ;;
--certificate|--certificate=?*)
if [ "$1" = "--certificate" -a -n "$2" ]; then
CERTIFICATE="--certificate=$2"