proxmox-mirrors/mirror_lxc
1
0
Fork 0
mirror of https://git.proxmox.com/git/mirror_lxc synced 2025-07-24 22:56:47 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

archlinux: Create per-container pacman host key

Browse Source 
Do not copy the pacman master key from the host, as this opens it to
attacks; generate a new secret hostkey.

Signed-off-by: Leonid Isaev <lisaev@umail.iu.edu>
Acked-by: Stéphane Graber <stgraber@ubuntu.com>
This commit is contained in:
Leonid Isaev 2014-03-31 17:11:58 -04:00 committed by Stéphane Graber
parent b7b7d3884e
commit 44b036309b
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
templates/lxc-archlinux.in
View File

@ -107,6 +107,9 @@ ln -s /dev/null /etc/systemd/system/systemd-udevd-kernel.socket
ln -s /dev/null /etc/systemd/system/proc-sys-fs-binfmt_misc.automount
# set default systemd target
ln -s /lib/systemd/system/multi-user.target /etc/systemd/system/default.target
# initialize pacman keyring
pacman-key --init
pacman-key --populate archlinux
EOF
return 0
}
@ -172,7 +175,8 @@ install_arch() {
pacman_config="${container_pacman_config}"
fi
if ! pacstrap -dcC "${pacman_config}" "${rootfs_path}" ${base_packages[@]}; then
if ! pacstrap -dcGC "${pacman_config}" "${rootfs_path}" \
${base_packages[@]}; then
echo "Failed to install container packages"
return 1
fi