12 Commits

Include renames

Author	SHA1	Message	Date
vhaudiquet	bb719e7c80	apt/keyring: keep the keyring cache readable ... A fresh chroot download failed with mmdebstrap unable to copy the keyrings: its unshare-mode hooks run under an identity that cannot read the invoking user's private directories, so the 0700 cache directory the module created broke the trusted.gpg.d setup hook with 'Permission denied' (builds reusing an already-cached tarball never hit the path). Create the cache 0755 and chmod the keyrings 0644 instead. The planting guard does not weaken: cached keyrings are trusted as-is, and validate_keyring_dir keeps refusing directories that are not owned by the current user or are writable by group or others — read access for the bootstrap tool is not a planting vector. Legacy 0700 cache directories are validated as before, then widened.	2026-09-20 18:14:28 +02:00
vhaudiquet	7601524b7c	apt: move the keyserver lookup URL to data/keyserver.yml	2026-09-18 13:28:05 +02:00
vhaudiquet	c106ebe315	apt: query the Launchpad PPA API through the shared HTTP client	2026-09-18 13:09:46 +02:00
vhaudiquet	4af8dbddb0	fmt: fix clippy warnings on all targets ... Drop an unused test fixture constant, move download_trust_ppa_key above the test module that precedes it, and simplify two test borrows.	2026-09-16 09:15:52 +02:00
vhaudiquet	ea70ddc10d	apt: keep the keyring cache private to the invoking user ... The shared world-writable /tmp/pkh-keyrings directory, combined with the skip-if-exists logic, let any local user pre-plant keyrings that pkh then trusts into the chroot's trusted.gpg.d. Use a per-uid 0700 directory instead, refuse to reuse a pre-existing directory that is not owned by the current user or is group/other-writable, and drop the now unnecessary world-accessibility chmods (mmdebstrap in unshare mode runs with the same real uid).	2026-09-15 23:47:21 +02:00
vhaudiquet	d06e091121	apt/keyring: download 3 keyrings for sid	2026-03-18 15:23:57 +01:00
vhaudiquet	3e9ec95886	apt/keyring: always download in binary format	2026-02-19 14:33:59 +01:00
vhaudiquet	b508dd3d82	deb: download keyring in cache directory for mmdebstrap ... also avoid sudo if we are root	2026-02-19 11:30:33 +01:00
vhaudiquet	8345f51d2f	Multiple changes: ... - deb: can use ppa as dependency - deb: cross and regular are using parallel nocheck builds - deb: ephemeral will not pull keyring if no root powers	2026-02-06 12:04:25 +01:00
vhaudiquet	1db1048a2e	apt/keyring: use original keyring file name	2026-01-26 16:27:18 +01:00
vhaudiquet	dd9cc07285	deb: make sure to have the right apt keyrings	2026-01-20 19:31:07 +01:00
vhaudiquet	464e25de24	apt: refactor into multiple modules	2026-01-09 18:02:22 +01:00