openstack-ansible-nspawn_hosts/templates
Jesse Pretorius f3fe949711 Simplify inserting apt keys into nspawn image
Bionic requires a functioning gpg-agent to run apt-key add. This means
that gpg-agent must be working properly in the chroot when the nspawn
image preparation script runs.

Previous changes [1] have enabled apt-key to communicate with gpg-agent
during the nspawn_hosts role checks, however the cache prep fails almost
every time when nspawn_hosts is used within other role checks.

This is not a new issue, debian-installer is affected too [2].

This change adopts the same route as d-i, and simply copies the host
/etc/apt/trusted.gpg.d directory to the nspawn image, removing the
need for apt-key and in turn gpg-agent.

This is a re-implementation of https://review.openstack.org/588962
for nspawn.

[1] https://review.openstack.org/590431
[2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851774

Change-Id: I3c56da445377d7ba27a623fb7ebe95c20d28a327
2018-08-25 21:12:51 +01:00
..
prep-scripts Simplify inserting apt keys into nspawn image 2018-08-25 21:12:51 +01:00
dnsmasq-config.conf.j2 add network ops 2018-02-16 21:25:39 -06:00
systemd-journald-nspawn_host.conf.j2 Enable less noisy journaling 2018-02-13 17:07:48 -06:00
systemd-nspawn@.service.j2 Add the private-network flag to the nspawn ExecStart 2018-08-09 11:15:10 -05:00
systemd-proxy-unit.conf.j2 First commit 2018-02-08 11:39:40 -06:00