[arch-projects] [PATCH] [devtools] Have signature checking work in chroots

[Pierre Schmitz]

Am 27.10.2011 13:57, schrieb Allan McRae:
> On 15/10/11 20:56, Allan McRae wrote:
>> Adjust the mount options for /dev/pts to allow signature checking
>> with gpgme to work.
>>
>> Adjust the various pacman.confs to use "SigLevel = Optional TrustAll"
>> which is the best that can be done automatically with Arch repos at
>> the moment.
> So this broke the gcc testsuite (and probably the binutils one
> too...).   Instead, mounting /dev/pts with:
> 
> mount --bind /dev/pts "${working_dir}/dev/pts"
> 
> allows both the signature checking with pacman to work and the gcc
> testsuite to run.

I don' like this at first sight. In general I would avoid binding
anything from the host into the chroot. Especially since we want to
support having several build process run in parallel. On the other side
I am no export on the pts device; so my concerns might be just invalid.

-- 
Pierre Schmitz, https://users.archlinux.de/~pierre