Skip to content

Mount keyrings on container #1658

Open
Open
@jardon

Description

Please, before opening a bug:

Describe the bug
Containers don't mount /usr/share/keyrings , but will share a repository configuration leaving manual intervention or building images with the required gpg keys.

To Reproduce

  1. Start with a debian-based host
  2. Add a repo to the apt config that requires a gpg key
  3. Create a debian-based container
  4. Enter the container
  5. sudo apt update

Expected behavior
apt should be able to read the repositories from the apt config and fetch the info from the repos

Logs

./distrobox create --image ghcr.io/vanilla-os/vso:main --name vso-nvidia-test-11 --nvidia
Creating 'vso-nvidia-test-11' using image ghcr.io/vanilla-os/vso:main	 [ OK ]
Distrobox 'vso-nvidia-test-11' successfully created.
To enter, run:

distrobox enter vso-nvidia-test-11
./distrobox enter vso-nvidia-test-11
Starting container...                   	 [ OK ]
Installing basic packages...            	 [ OK ]
Setting up devpts mounts...             	 [ OK ]
Setting up read-only mounts...          	 [ OK ]
Setting up read-write mounts...         	 [ OK ]
Setting up host's sockets integration...	 [ OK ]
Setting up host's nvidia integration... 	 [ OK ]
Integrating host's themes, icons, fonts...	 [ OK ]
Setting up distrobox profile...         	 [ OK ]
Setting up sudo...                      	 [ OK ]
Setting up user's group list...         	 [ OK ]
Setting up existing user...             	 [ OK ]
Ensuring user's access...               	 [ OK ]

Container Setup Complete!
jardon@vso-nvidia-test-11:~/Projects/distrobox$ sudo apt update
Get:1 http://deb.debian.org/debian sid InRelease [205 kB]
Get:2 https://developer.download.nvidia.com/compute/cuda/repos/debian12/x86_64  InRelease [1,581 B]
Err:2 https://developer.download.nvidia.com/compute/cuda/repos/debian12/x86_64  InRelease
  Sub-process /usr/bin/sqv returned an error code (1), error message is: Error: Failed to parse keyring "/usr/share/keyrings/nvidia-drivers.gpg"  Caused by:     0: Reading "/usr/share/keyrings/nvidia-drivers.gpg": No such file or directory (os error 2)     1: No such file or directory (os error 2)
Get:3 http://deb.debian.org/debian sid/main amd64 Packages.diff/Index [63.6 kB]
Get:4 http://deb.debian.org/debian sid/main amd64 Packages T-2025-01-16-2014.22-F-2025-01-11-1411.03.pdiff [680 kB]
Get:4 http://deb.debian.org/debian sid/main amd64 Packages T-2025-01-16-2014.22-F-2025-01-11-1411.03.pdiff [680 kB]
Warning: GPG error: https://developer.download.nvidia.com/compute/cuda/repos/debian12/x86_64  InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Error: Failed to parse keyring "/usr/share/keyrings/nvidia-drivers.gpg"  Caused by:     0: Reading "/usr/share/keyrings/nvidia-drivers.gpg": No such file or directory (os error 2)     1: No such file or directory (os error 2)
Error: The repository 'https://developer.download.nvidia.com/compute/cuda/repos/debian12/x86_64  InRelease' is not signed.
Notice: Updating from such a repository can't be done securely, and is therefore disabled by default.
Notice: See apt-secure(8) manpage for repository creation and user configuration details.

Desktop (please complete the following information):

  • Are you using podman, docker or lilipod? podman
  • Which version or podman, docker or lilipod? 5.2.5
  • Which version of distrobox? 18053c254a83750c49c08e58df2e48a0f04aef48
  • Which host distribution? vanilla
  • How did you install distrobox? git

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions