Debian Bug report logs - #509603
installer: debootstrap unable to authenticate Grip repository

Package:; Maintainer for is Debian Embedded Team <>;

Reported by: Neil Williams <>

Date: Tue, 23 Dec 2008 18:18:04 UTC

Severity: important

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to, Debian Embedded Team <>:
Bug#509603; Package (Tue, 23 Dec 2008 18:18:06 GMT) Full text and rfc822 format available.

Acknowledgement sent to Neil Williams <>:
New Bug report received and forwarded. Copy sent to Debian Embedded Team <>. (Tue, 23 Dec 2008 18:18:06 GMT) Full text and rfc822 format available.

Message #5 received at (full text, mbox):

From: Neil Williams <>
To: Debian Bug Tracking System <>
Subject: installer: debootstrap unable to authenticate Grip repository
Date: Tue, 23 Dec 2008 18:16:37 +0000
Severity: important

Emdebian Grip: emdebian-archive-keyring - if the Emdebian Archive
public key is not integrated into the Debian Installer, then
debootstrap fails to authenticate any of the packages after booting the

The only keyring that debootstrap allows (inside D-I) is 
/usr/share/keyrings/archive.gpg which is normally a symlink
to /usr/share/keyrings/debian-archive-keyring.gpg. Our Emdebian key is
not part of that keyring - principally because DSA do not maintain the server and it is not an "official" Debian release

Instead of rebuilding 21 ISO's (3 per architecture),  I've asked 
Jelle to research how the debian-eeepc team manage to hack their 
keys into the image. Anyone able to help, please do so - we really 
need a method that can be used independently of the architecture 
of the ISO itself - i.e. without actually having to *run* any of 
the code in the ISO. 

In emdebian-tools 1.4.14, there will be a new package: 
emdebian-archive-keyring-udeb which conflicts with and provides 
debian-archive-keyring-udeb which is the package that provides 
/usr/share/keyrings/debian-archive-keyring.gpg and the 
/usr/share/keyrings/archive.gpg symlink for D-I. Our package can
replace that symlink with one to a keyring that includes the current
debian keyring plus our Emdebian one. I'm not sure if that is going to
help but it might. 

What we do need is a script that can run on the 
server to rsync the relevant ISO's, process them to add the key 
and only then make them available for download. Again, emdebian-grip 
1.4.14 will include a short preseeding file that can be used to set the
Emdebian Grip repository but it's just as easy to set it yourself
during install.

If there is a way of wrapping the installer so that a
simple script can be called instead of manually typing the entire
preseeding command, that would be handy too. The D-I team are
hard-pressed right now with Lenny so please, don't pester them with
this - I've already asked and the above is the best we can devise
right now. You do need experience (or the time to gain experience) of
D-I to fix this one.

-- System Information:
Debian Release: 5.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Send a report that this bug log contains spam.

Debian bug tracking system administrator <>. Last modified: Sat Apr 19 15:15:18 2014; Machine Name:

Debian Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.