[Merge] ~philroche/ubuntu-seeds/+git/ubuntu:feature/mantic-cloud-minimal-cloud-init-gpgconf into ~ubuntu-core-dev/ubuntu-seeds/+git/ubuntu:mantic

Chad Smith mp+450569 at code.launchpad.net
Tue Sep 5 19:14:26 UTC 2023


We may want to shift this dependency in ubuntu-minimal to 'gpg' for both short and long-term needs.

1.  Adding 'gpg' has the immediate benefit of depending on 'gpgconf' package anyway which cloud-init 23.3 calls directly to kill GG-related daemons after initial APT repo key setup. Until bug LP: #2034273 is fix released to mantic

2. Cloud-init upstream will still attempt to run 'gpg ... --recv-keys E4D304DF' for any optional apt/repo user-data requesting keyid imports like the following:

#cloud-config
apt:
  sources:
    cloudinit:
      source: 'deb [arch=amd64] http://ppa.launchpad.net/cloud-init-dev/daily/ubuntu focal main'
      keyserver: keyserver.ubuntu.com
      keyid: E4D304DF



If we want minimal images to support apt config with keys/keyservers, it's probably best to keep that hard requirement on gpg package.


Diff comments:

> diff --git a/cloud-minimal b/cloud-minimal
> index e714782..37703f6 100644
> --- a/cloud-minimal
> +++ b/cloud-minimal
> @@ -28,6 +28,7 @@ and will be used/installed without any recommended packages.
>   * cloud-guest-utils
>   * dmsetup
>   * fdisk
> + * gpgconf

I'd suggest we actually use gpg package as cloud-init really shouldn't be calling gpgconf directly as we can use python's os.kill or kill utility. Also depending on gnupg will pull in gpgconf package anyway by default so you get the short-term benefit of coping with cloud-init 23.3 and direct calls to gpgconf, and the long-term need of a strict dependency on gnupg which is required anyway if we want minimal images to support anyone launching with #cloud-config userdata containing 'apt: .. keyid:' directives as cloud-init will call `gpg .... --recv-keys <your_key_id_from_userdata>` and expect things to work.

>   * parted
>   * util-linux
>  


-- 
https://code.launchpad.net/~philroche/ubuntu-seeds/+git/ubuntu/+merge/450569
Your team Ubuntu Core Development Team is requested to review the proposed merge of ~philroche/ubuntu-seeds/+git/ubuntu:feature/mantic-cloud-minimal-cloud-init-gpgconf into ~ubuntu-core-dev/ubuntu-seeds/+git/ubuntu:mantic.




More information about the Ubuntu-reviews mailing list