我可以使用Debian包构建环境来构建Ubuntu包吗？

Question

我有一个Debian服务器，我用它来构建使用pbuilder和git-buildpackage的包。我目前可以为Debian sid、wheezy和squeeze构建包。

我想使用这台服务器为Ubuntu发行版构建包。我试图通过在/etc/pbuilder/trusty中创建一个可靠的配置文件来做到这一点，但是我从debootstrap中获得了错误：

 -> Invoking pbuilder
  forking: pbuilder create --configfile /etc/pbuilder/trusty --buildplace /var/cache/pbuilder/base-trusty.cow --mirror http://debian.stanford.edu/ubuntu --distribution trusty --no-targz --extrapackages cowdancer 
W: /root/.pbuilderrc does not exist
I: Running in no-targz mode
I: Distribution is trusty.
I: Current time: Thu Oct  2 14:24:21 PDT 2014
I: pbuilder-time-stamp: 1412285061
I: Building the build environment
I: running debootstrap
/usr/sbin/debootstrap
I: Retrieving Release
I: Retrieving Release.gpg
I: Checking Release signature
E: Release signed by unknown key (key id 3B4FE6ACC0B21F32)
E: debootstrap failed
W: Aborting with an error
pbuilder create failed
  forking: rm -rf /var/cache/pbuilder/base-trusty.cow 

下面是apt-key list的输出：

/etc/apt/trusted.gpg
--------------------
pub   4096R/C0B21F32 2012-05-11
uid                  Ubuntu Archive Automatic Signing Key (2012) <ftpmaster@ubuntu.com>

/etc/apt/trusted.gpg.d//debian-archive-squeeze-automatic.gpg
------------------------------------------------------------
pub   4096R/473041FA 2010-08-27 [expires: 2018-03-05]
uid                  Debian Archive Automatic Signing Key (6.0/squeeze) <ftpmaster@debian.org>

/etc/apt/trusted.gpg.d//debian-archive-squeeze-stable.gpg
---------------------------------------------------------
pub   4096R/B98321F9 2010-08-07 [expires: 2017-08-05]
uid                  Squeeze Stable Release Key <debian-release@lists.debian.org>

/etc/apt/trusted.gpg.d//debian-archive-wheezy-automatic.gpg
-----------------------------------------------------------
pub   4096R/46925553 2012-04-27 [expires: 2020-04-25]
uid                  Debian Archive Automatic Signing Key (7.0/wheezy) <ftpmaster@debian.org>

/etc/apt/trusted.gpg.d//debian-archive-wheezy-stable.gpg
--------------------------------------------------------
pub   4096R/65FFB764 2012-05-08 [expires: 2019-05-07]
uid                  Wheezy Stable Release Key <debian-release@lists.debian.org>

也许有人知道适当的配置，这将允许我这样做。或者我应该放弃构建一个基于Ubuntu本身的独立构建服务器吗？

Answer 1

问题是，debootstrap不使用/etc/apt/trusted.gpg或/etc/apt/trusted.gpg.d/中的本地密钥环，而只使用/usr/share/keyrings/下的密钥环。

从Debian8Jessie开始，您可以简单地安装(官方Debian)包ubuntu-存档-键环，它应该可以解决您的问题。

在早期的Debian版本中，您可以让pbuilder将--keyring=/etc/apt/trusted.gpg传递给Debian，因为该文件中已经有正确的密钥。将--debootstrapopts --keyring=/etc/apt/trusted.gpg添加到pbuilder调用应该根据其手册页来完成。