3

I have a Debian wheezy server that I use to build packages using pbuilder and git-buildpackage. I can currently build packages for Debian sid, wheezy, and squeeze.

I would like to use this same server to build packages for Ubuntu distributions. I have tried to do this by creating a trusty config file in /etc/pbuilder/trusty, but I get errors from debootstrap:

 -> Invoking pbuilder
  forking: pbuilder create --configfile /etc/pbuilder/trusty --buildplace /var/cache/pbuilder/base-trusty.cow --mirror http://debian.stanford.edu/ubuntu --distribution trusty --no-targz --extrapackages cowdancer 
W: /root/.pbuilderrc does not exist
I: Running in no-targz mode
I: Distribution is trusty.
I: Current time: Thu Oct  2 14:24:21 PDT 2014
I: pbuilder-time-stamp: 1412285061
I: Building the build environment
I: running debootstrap
/usr/sbin/debootstrap
I: Retrieving Release
I: Retrieving Release.gpg
I: Checking Release signature
E: Release signed by unknown key (key id 3B4FE6ACC0B21F32)
E: debootstrap failed
W: Aborting with an error
pbuilder create failed
  forking: rm -rf /var/cache/pbuilder/base-trusty.cow 

Here is the output of apt-key list:

/etc/apt/trusted.gpg
--------------------
pub   4096R/C0B21F32 2012-05-11
uid                  Ubuntu Archive Automatic Signing Key (2012) <[email protected]>

/etc/apt/trusted.gpg.d//debian-archive-squeeze-automatic.gpg
------------------------------------------------------------
pub   4096R/473041FA 2010-08-27 [expires: 2018-03-05]
uid                  Debian Archive Automatic Signing Key (6.0/squeeze) <[email protected]>

/etc/apt/trusted.gpg.d//debian-archive-squeeze-stable.gpg
---------------------------------------------------------
pub   4096R/B98321F9 2010-08-07 [expires: 2017-08-05]
uid                  Squeeze Stable Release Key <[email protected]>

/etc/apt/trusted.gpg.d//debian-archive-wheezy-automatic.gpg
-----------------------------------------------------------
pub   4096R/46925553 2012-04-27 [expires: 2020-04-25]
uid                  Debian Archive Automatic Signing Key (7.0/wheezy) <[email protected]>

/etc/apt/trusted.gpg.d//debian-archive-wheezy-stable.gpg
--------------------------------------------------------
pub   4096R/65FFB764 2012-05-08 [expires: 2019-05-07]
uid                  Wheezy Stable Release Key <[email protected]>

Maybe someone knows the proper configuration that will allow me to do this. Or should I just give up and build a separate build server based on Ubuntu itself?

2
  • 1
    Adding the exact error from the debootstrap might help here. Oct 2, 2014 at 21:11
  • Added error text.
    – rlandster
    Oct 2, 2014 at 21:26

1 Answer 1

1

The issue is that debootstrap doesn't use your local keyrings in /etc/apt/trusted.gpg or /etc/apt/trusted.gpg.d/, but only uses the keyrings under /usr/share/keyrings/.

From Debian 8 Jessie onwards, you can simply install the (official Debian) package ubuntu-archive-keyring and it should fix your issue.

On earlier Debian releases, you could make pbuilder pass --keyring=/etc/apt/trusted.gpg to debootstrap as you have the correct key already in that file. Adding --debootstrapopts --keyring=/etc/apt/trusted.gpg to the pbuilder call should do that according to its man page.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .