[Merge] ~philroche/ubuntu-seeds/+git/ubuntu:feature/mantic-cloud-minimal-cloud-init-gpgconf into ~ubuntu-core-dev/ubuntu-seeds/+git/ubuntu:mantic
Chad Smith
mp+450569 at code.launchpad.net
Tue Sep 5 19:14:26 UTC 2023
We may want to shift this dependency in ubuntu-minimal to 'gpg' for both short and long-term needs.
1. Adding 'gpg' has the immediate benefit of depending on 'gpgconf' package anyway which cloud-init 23.3 calls directly to kill GG-related daemons after initial APT repo key setup. Until bug LP: #2034273 is fix released to mantic
2. Cloud-init upstream will still attempt to run 'gpg ... --recv-keys E4D304DF' for any optional apt/repo user-data requesting keyid imports like the following:
#cloud-config
apt:
sources:
cloudinit:
source: 'deb [arch=amd64] http://ppa.launchpad.net/cloud-init-dev/daily/ubuntu focal main'
keyserver: keyserver.ubuntu.com
keyid: E4D304DF
If we want minimal images to support apt config with keys/keyservers, it's probably best to keep that hard requirement on gpg package.
Diff comments:
> diff --git a/cloud-minimal b/cloud-minimal
> index e714782..37703f6 100644
> --- a/cloud-minimal
> +++ b/cloud-minimal
> @@ -28,6 +28,7 @@ and will be used/installed without any recommended packages.
> * cloud-guest-utils
> * dmsetup
> * fdisk
> + * gpgconf
I'd suggest we actually use gpg package as cloud-init really shouldn't be calling gpgconf directly as we can use python's os.kill or kill utility. Also depending on gnupg will pull in gpgconf package anyway by default so you get the short-term benefit of coping with cloud-init 23.3 and direct calls to gpgconf, and the long-term need of a strict dependency on gnupg which is required anyway if we want minimal images to support anyone launching with #cloud-config userdata containing 'apt: .. keyid:' directives as cloud-init will call `gpg .... --recv-keys <your_key_id_from_userdata>` and expect things to work.
> * parted
> * util-linux
>
--
https://code.launchpad.net/~philroche/ubuntu-seeds/+git/ubuntu/+merge/450569
Your team Ubuntu Core Development Team is requested to review the proposed merge of ~philroche/ubuntu-seeds/+git/ubuntu:feature/mantic-cloud-minimal-cloud-init-gpgconf into ~ubuntu-core-dev/ubuntu-seeds/+git/ubuntu:mantic.
More information about the Ubuntu-reviews
mailing list