From: Peter Palfrader <peter@palfrader.org>
Date: Wed, 9 Dec 2009 13:44:21 +0000 (+0100)
Subject: debootstrap does not verify stuff by default.  How broken is that
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=390fbf5b61c9e09d93c0bd2f8d379b914e5ac66f;p=mirror%2Fdsa-wiki.git

debootstrap does not verify stuff by default.  How broken is that
---

diff --git a/input/howto/install-kvm.creole b/input/howto/install-kvm.creole
index 1d87b2a..7f1bbb8 100644
--- a/input/howto/install-kvm.creole
+++ b/input/howto/install-kvm.creole
@@ -68,7 +68,7 @@ trivial.
 #######
 # install base
 
- apt-get install debootstrap kpartx &&
+ apt-get install debootstrap debian-archive-keyring kpartx &&
  if [ "$use_lvm" = "y" ]; then
    if [ "$use_boot" != "n" ] ; then
      lvcreate -L 128m -n "$guest"-boot /dev/"$vg"
@@ -93,7 +93,7 @@ trivial.
  fi &&
 
  cd "$target" &&
- debootstrap --variant=minbase lenny . "$mirror"
+ debootstrap --variant=minbase --keyring=/usr/share/keyrings/debian-archive-keyring.gpg lenny . "$mirror"
 }}}
 
 And finalize the setup: