add --keyring option as default parameter to DEBOOTSTRAPOPTS (closes: 579028)

This is first step into allowing 'trusted packages only' mode in
pbuilder.

This only enables signature checking for debootstrap when creating
Debian chroot.

Further changes are required if you want to check for signature in apt
/ aptitude invocations.

1 files changed, 4 insertions, 1 deletions

diff --git a/pbuilderrc b/pbuilderrc
index cb00f5e..d05a3ff 100644
--- a/pbuilderrc
+++ b/pbuilderrc
@@ -69,7 +69,10 @@ BUILDUSERNAME=pbuilder
 BINDMOUNTS=""
 
 # Set the debootstrap variant to 'buildd' type.
-DEBOOTSTRAPOPTS[0]='--variant=buildd'
+DEBOOTSTRAPOPTS=(
+    '--variant=buildd'
+    '--keyring' '/usr/share/keyrings/debian-archive-keyring.gpg'
+    )
 # or unset it to make it not a buildd type.
 # unset DEBOOTSTRAPOPTS