debootstrap failing to GPG-verify mips core packages

[pctammela]

Hey.

This is a very specific problem I'm having so I provide a lot of details.

I'm cross building debian for MIPS in a x86 machine. Thanks to debootstrap the process is practically autonomous.
I took a look in the unstable and testing branch and found some pretty interesting packages I would like to try out in my MIPS embedded Linux.
The process for the stable branch I'm using is the following

I download my packets list with

Code: Select all

debootstrap --download-only --include "${PACKAGE_LIST}" --arch ${ARCH} \
        sid "${PACKAGE_PATH}" http://http.debian.net/debian 1>&2

Now I start to bootstrap the system

Code: Select all

debootstrap --foreign --include "${PACKAGES}" --arch ${ARCH} sid ${FAKEROOT}

And then I run --second-stage to finish the process.

Code: Select all

chroot ${FAKEROOT} /debootstrap/debootstrap --second-stage

That's when debootstrap fails.
Here is the log.

Code: Select all

I: Keyring file not available at /usr/share/keyrings/debian-archive-keyring.gpg; switching to https mirror https://mirrors.kernel.org/debian
I: Installing core packages...
[.....]
W: Failure while installing base packages.  This will be re-attempted up to five times.
W: See //debootstrap/debootstrap.log for details (possibly the package archive is at fault)
W: Failure while installing base packages.  This will be re-attempted up to five times.
W: See //debootstrap/debootstrap.log for details (possibly the package archive is at fault)
W: Failure while installing base packages.  This will be re-attempted up to five times.
W: See //debootstrap/debootstrap.log for details (possibly the package archive is at fault)
W: Failure while installing base packages.  This will be re-attempted up to five times.
W: See //debootstrap/debootstrap.log for details (possibly the package archive is at fault)
W: Failure while installing base packages.  This will be re-attempted up to five times.
W: See //debootstrap/debootstrap.log for details (possibly the package archive is at fault)

The log message says

Code: Select all

gpgv: Signature made Thu May 11 20:42:20 2017 UTC using RSA key ID 46925553
gpgv: Good signature from "Debian Archive Automatic Signing Key (7.0/wheezy) <ftpmaster@debian.org>"
gpgv: Signature made Thu May 11 20:42:20 2017 UTC using RSA key ID 2B90D010
gpgv: Can't check signature: public key not found

While cross building jessie, everything works fine, I'm only having this issue while trying either testing or unstable.
What am I missing?

[pylkko]

You say that you need a few packages that are "interesting". Would it not be more efficient and all to just compile those few packages against the working stable debootstrap? (http://forums.debian.net/viewtopic.php?t=38976)

OR do something like this:

http://forums.debian.net/viewtopic.php?f=16&t=129390

are you restricted on space?

And before you do any of this here, be sure to check if there are not already ready-made backports of the packages (in the repo) you are interested in.

https://wiki.debian.org/Backports

[pctammela]

You say that you need a few packages that are "interesting". Would it not be more efficient and all to just compile those few packages against the working stable debootstrap? (http://forums.debian.net/viewtopic.php?t=38976)

OR do something like this:

http://forums.debian.net/viewtopic.php?f=16&t=129390

are you restricted on space?

And before you do any of this here, be sure to check if there are not already ready-made backports of the packages (in the repo) you are interested in.

https://wiki.debian.org/Backports

Hey pylkko,
Thanks for answering! I will take a look into the Backports.

I was able to reproduce the same GPG problem while bootstraping jessie today.
I'm messing around with the kernel and needed kdump-tools to debug the kernel panics.
Right after adding it and starting the bootstrap process I got the same error on the same step.
Here's the log

Code: Select all

gpgv: Signature made Sat May  6 12:15:04 2017 UTC using RSA key ID 46925553
gpgv: Good signature from "Debian Archive Automatic Signing Key (7.0/wheezy) <ftpmaster@debian.org>"
gpgv: Signature made Sat May  6 12:15:04 2017 UTC using RSA key ID 2B90D010
gpgv: Can't check signature: public key not found
gpgv: Signature made Sat May  6 12:28:49 2017 UTC using RSA key ID 518E17E1
gpgv: Can't check signature: public key not found

Any ideas what might be?

[pctammela]

I realized my mistake.
I was looking the logs outside the chroot jail.

/Thread