debootstrap does not verify stuff by default. How broken is that

diff --git a/input/howto/install-kvm.creole b/input/howto/install-kvm.creole
index 1d87b2a..7f1bbb8 100644 (file)
--- a/input/howto/install-kvm.creole
+++ b/input/howto/install-kvm.creole
@@ -68,7 +68,7 @@ trivial.
 #######
 # install base
 
- apt-get install debootstrap kpartx &&
+ apt-get install debootstrap debian-archive-keyring kpartx &&
  if [ "$use_lvm" = "y" ]; then
    if [ "$use_boot" != "n" ] ; then
      lvcreate -L 128m -n "$guest"-boot /dev/"$vg"
@@ -93,7 +93,7 @@ trivial.
  fi &&
 
  cd "$target" &&
- debootstrap --variant=minbase lenny . "$mirror"
+ debootstrap --variant=minbase --keyring=/usr/share/keyrings/debian-archive-keyring.gpg lenny . "$mirror"
 }}}
 
 And finalize the setup: