lp:~smoser/maas-images/trunk.keyring

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp:maas-images at revision 348

Lee Trager (community): Approve on 2016-11-08

Diff: 16 lines (+4/-0)

1 file modified

meph2/netinst.py (+4/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

348. By Scott Moser on 2016-11-08

Add and use local keyring for verification of d-i data.

Debian installer data published to archive.ubuntu.com
(and ports.ubuntu.com) is "scraped" as described in README.di-scraping.
The download data was verified using the gpg keyring installed from the
archive' ubuntu-keyring (/usr/share/keyrings/ubuntu-archive-keyring.gpg).

A transition is being made from signing with the dsa1024 'Archive'
signing key below to the newer rsa4096 Archive key.
In zesty, the package installed keyring no longer contains the
older key. Thus 2 things would break:
 a.) attempting to published data of an older release while running
     on zesty
 b.) attempting to verify older zesty data as the transition occurred
     during the zesty release cycle.

The solution here is to check in the gpg keyring that was provided
by the Ubuntu 16.04 (xenial) package ubuntu-keyring, and to use that
for verification.

$ gpg keyring.gpg

pub dsa1024 2004-09-12 [SC]
      630239CC130E1A7FD81A27B140976EAF437D05B5
uid Ubuntu Archive Automatic Signing Key <email address hidden>
sub elg2048 2004-09-12 [E]
pub dsa1024 2004-12-30 [SC]
      C5986B4F1257FFA86632CBA746181433FBB75451
uid Ubuntu CD Image Automatic Signing Key <email address hidden>
pub rsa4096 2012-05-11 [SC]
      790BC7277767219C42C86F933B4FE6ACC0B21F32
uid Ubuntu Archive Automatic Signing Key (2012) <email address hidden>
pub rsa4096 2012-05-11 [SC]
      843938DF228D22F7B3742BC0D94AA3F0EFE21092
uid Ubuntu CD Image Automatic Signing Key (2012) <email address hidden>

347. By Scott Moser on 2016-11-08

Remove linux-keystone kernels.

Under bug 1623090 linux-keystone was removed from the archive.
14.04 builds are currently failing as a result. The only option at this
point is to remove the builds here also.

346. By Lee Trager on 2016-11-01

Fix zesty subarch in the v3 stream

345. By Andres Rodriguez on 2016-10-27

conf/meph-v2.yaml: Enable Zesty. conf/meph-v3.yaml: Add missing subarches for Zesty

344. By Andres Rodriguez on 2016-10-27

conf/meph-v3.yaml: Enable Zesty.

343. By dann frazier on 2016-10-17

xgene-uboot: support compressed images

Starting in 16.10, Ubuntu/arm64 kernels are compressed, and we need to
mark them as such in the u-boot header.

(Code cargo-culted from flash-kernel)

342. By Lee Trager on 2016-10-07

Fix ensure_product_entry

ensure_product_entry is checking for the existance of 'products' in the tree,
instead of checking if tree['products'] is False.

341. By Lee Trager on 2016-10-06

cloudimg-sync: Store default target in config.

The default target was still using the v2 stream on images.maas.io which caused the outputted v3 stream to contain both v2 and v3 products. Moving the default target into the config ensures only products from that version are added.

340. By LaMont Jones on 2016-10-06

If proposed is enabled, create a new squashfs image from the upgraded filesystem.

See https://code.launchpad.net/~smoser/maas-images/trunk.proposed-squashfs/+merge/307759

339. By Lee Trager on 2016-09-30

do not use preserve_empty_products products_prune

products_prune's preseve_empty_products argument is not available
in simplestreams version in trusty.

The fix here is just to add the products entry back if the tree
had it removed.