From 3dc0ca0bc2cbacc77fa86dff502c4ed05525fa01 Mon Sep 17 00:00:00 2001 From: josh Date: Sat, 18 Apr 2026 02:54:04 -0400 Subject: [PATCH] ci: install debian-archive-keyring for mkosi bootstrap mkosi's apt-get (inside the mkosi workspace) couldn't verify Debian's InRelease signatures because the act_runner's Ubuntu base image ships Ubuntu's keyring, not Debian's. Adding `debian-archive-keyring` to the apt install list exposes /usr/share/keyrings/debian-archive-keyring.gpg which debootstrap and apt need for the bookworm repos. Co-Authored-By: Claude Opus 4.7 --- .gitea/workflows/e2e.yml | 1 + .gitea/workflows/release.yml | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/.gitea/workflows/e2e.yml b/.gitea/workflows/e2e.yml index fa59195..a644231 100644 --- a/.gitea/workflows/e2e.yml +++ b/.gitea/workflows/e2e.yml @@ -37,6 +37,7 @@ jobs: sudo apt-get update sudo apt-get install -y --no-install-recommends \ mkosi debootstrap squashfs-tools systemd-ukify \ + debian-archive-keyring \ qemu-system-x86 qemu-utils \ dnsmasq iperf3 ipxe-qemu diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml index e7ca2ae..a82c0ca 100644 --- a/.gitea/workflows/release.yml +++ b/.gitea/workflows/release.yml @@ -33,7 +33,8 @@ jobs: run: | sudo apt-get update sudo apt-get install -y --no-install-recommends \ - mkosi debootstrap squashfs-tools dosfstools systemd-ukify + mkosi debootstrap squashfs-tools dosfstools systemd-ukify \ + debian-archive-keyring - name: Install templ run: go install github.com/a-h/templ/cmd/templ@v0.3.1001