3dc0ca0bc2
mkosi's apt-get (inside the mkosi workspace) couldn't verify Debian's InRelease signatures because the act_runner's Ubuntu base image ships Ubuntu's keyring, not Debian's. Adding `debian-archive-keyring` to the apt install list exposes /usr/share/keyrings/debian-archive-keyring.gpg which debootstrap and apt need for the bookworm repos. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>