From 2e574b397d372e1871b9d0c72b1e32ff6fdc6ba6 Mon Sep 17 00:00:00 2001
From: Junichi Uekawa <dancer@netfort.gr.jp>
Date: Thu, 24 Jun 2010 19:40:41 +0900
Subject: add --keyring option as default parameter to DEBOOTSTRAPOPTS (closes:
 579028)

This is first step into allowing 'trusted packages only' mode in
pbuilder.

This only enables signature checking for debootstrap when creating
Debian chroot.

Further changes are required if you want to check for signature in apt
/ aptitude invocations.
---
 pbuilderrc | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'pbuilderrc')

diff --git a/pbuilderrc b/pbuilderrc
index cb00f5e..d05a3ff 100644
--- a/pbuilderrc
+++ b/pbuilderrc
@@ -69,7 +69,10 @@ BUILDUSERNAME=pbuilder
 BINDMOUNTS=""
 
 # Set the debootstrap variant to 'buildd' type.
-DEBOOTSTRAPOPTS[0]='--variant=buildd'
+DEBOOTSTRAPOPTS=(
+    '--variant=buildd'
+    '--keyring' '/usr/share/keyrings/debian-archive-keyring.gpg'
+    )
 # or unset it to make it not a buildd type.
 # unset DEBOOTSTRAPOPTS
 
-- 
cgit v1.2.3