Differences between revisions 64 and 78 (spanning 14 versions)
Revision 64 as of 2020-06-05 16:04:13
Size: 5572
Editor: coringao
Comment:
Revision 78 as of 2021-04-14 09:25:37
Size: 6265
Editor: GuillemJover
Comment: Use OpenPGP instead of GPG when referring to keys or the standard
Deletions are marked like this. Additions are marked like this.
Line 18: Line 18:
== Starting prison for packages == == Preparing environment for your caged Debian packages ==
Line 58: Line 58:
=== Entering the cage ===

{{{
# chroot /srv/chroot/unstable
=== Preparing caging ===

{{{
# chroot /srv/chroot/unstable-amd64
Line 68: Line 68:
{{{
# echo mount /proc >> /etc/bash.bashrc
}}}
Line 74: Line 70:
== Confirming that the configured prison is correct == === Checking caging ===
Line 81: Line 77:
=== Entering prison as a user: === === Accessing caged public user ===
Line 87: Line 83:
=== Entering private prison: (root) === === Accessing private caged (root) ===
Line 95: Line 91:
||<#EAE5DA -4 style="border: medium none ;-moz-border-radius-bottomleft: 30px ;"> ''Thanks to [[https://wiki.debian.org/Eriberto | Eriberto]] and I recommend everyone to access this link https://debianet.com.br (Portuguese - Brazil) for more details on how to package your software in Debian.''|| ||<#EAE5DA -4 style="border: medium none ;-moz-border-radius-bottomleft: 30px ;"> ''Thanks to [[https://wiki.debian.org/Eriberto | Eriberto]] and I recommend everyone to access this link http://debianet.com.br (Portuguese - Brazil) for more details on how to package your software in Debian.''||
Line 113: Line 109:
||<#EAE5DA -4 style="border: medium none ;-moz-border-radius-bottomleft: 30px ;"> alias ls="ls --color=auto"<<BR>> alias tree="tree -aC"<<BR>> alias debuildsa="dpkg-buildpackage -sa -k'''0987654321ABC1234567890DFG0987654321HIJL'''" # --> your GPG key.<<BR>> alias uscan="uscan --verbose --report"<<BR>> alias apt-cache="LANG=C apt-cache"<<BR>> alias man="LANG=C man"<<BR>> export DEBFULLNAME="'''put-your-full-name'''"<<BR>> export DEBEMAIL="'''put-your-email'''"<<BR>> export EDITOR="'''put-your-favorite-text-editor'''"<<BR>> export QUILT_PATCHES="debian/patches"<<BR>> export QUILT_DIFF_ARGS="--no-timestamps --no-index -pab"<<BR>> export QUILT_REFRESH_ARGS="--no-timestamps --no-index -pab"<<BR>> mount /proc<<BR>>|| ||<#EAE5DA -4 style="border: medium none ;-moz-border-radius-bottomleft: 30px ;"> alias ls="ls --color=auto"<<BR>> alias tree="tree -aC"<<BR>> alias debuildsa="dpkg-buildpackage -sa -k'''0987654321ABC1234567890DFG0987654321HIJL'''" # --> your OpenPGP key.<<BR>> alias uscan="uscan --verbose --report"<<BR>> alias apt-cache="LANG=C apt-cache"<<BR>> alias man="LANG=C man"<<BR>> export DEBFULLNAME="'''put-your-full-name'''"<<BR>> export DEBEMAIL="'''put-your-email'''"<<BR>> export EDITOR="'''put-your-favorite-text-editor'''"<<BR>> export QUILT_PATCHES="debian/patches"<<BR>> export QUILT_DIFF_ARGS="--no-timestamps --no-index -pab"<<BR>> export QUILT_REFRESH_ARGS="--no-timestamps --no-index -pab"<<BR>> mount /proc<<BR>>||
Line 145: Line 141:

{{attachment:locales.png}}

''It is recommended that resetting '''locales''' leave "'''C.UTF-8'''" as the default.''
Line 165: Line 165:
=== Enabling the GPG key to sign packages ===

Edit the '''/etc/devscripts.conf''' file and enter your GPG key on the '''DEBSIGN_KEYID''' line and activate.
=== Enabling the OpenPGP key to sign packages ===

Edit the '''/etc/devscripts.conf''' file and enter your OpenPGP key on the '''DEBSIGN_KEYID''' line and activate.
Line 180: Line 180:
'''NOTE:''' If an error message occurs when you are doing an "update/dist-upgrade" mentioning:

{{{
dpkg: unrecoverable fatal error, aborting:
 unknown system group 'Debian-exim' in statoverride file; the system group got removed
 before the override, which is most probably a packaging bug, to recover you
 can remove the override manually with dpkg-statoverride
}}}

To resolve, you might need to remove the statoverride entry.

{{{
(unstable-amd64)root@debian:~# dpkg-statoverride --list | grep Debian-exim
(unstable-amd64)root@debian:~# dpkg-statoverride --remove /etc/exim4/passwd.client
}}}

ToDo: merge this with Schroot

debian-cage.png

PACKAGES STUCK WITH SCHROOT

Allows you to configure chroots without requiring root credentials.

For a better knowledge on the subject:

wiki.debian.org/Schroot

wiki.debian.org/Debootstrap

Preparing environment for your caged Debian packages

jail.png

To start the installations, we will download the following packages:

# apt install debootstrap schroot

Once installed, we will edit the /etc/schroot/schroot.conf file.

# cp /etc/schroot/schroot.conf /etc/schroot/schroot.conf.old

# editor /etc/schroot/schroot.conf

{*} editor = your favorite text editor: nano, vim, mcedit, etc...

In this model, we will do this in the amd64 architecture, but you can change or create it in the i386 architecture.

Copy and paste into the file.

[unstable-amd64]
description=debian unstable amd64
type=directory
directory=/srv/chroot/unstable-amd64
users=your-username
root-groups=root
preserve-environment=true

Installing the caged Debian base

schroot.png

# mkdir -p /srv/chroot/unstable-amd64

# debootstrap --arch amd64 unstable /srv/chroot/unstable-amd64 https://deb.debian.org/debian

Preparing caging

# chroot /srv/chroot/unstable-amd64

# echo proc /proc proc defaults 0 0 >> /etc/fstab

After these settings, type "exit" or press "Ctrl+D" to close everything.

Checking caging

user@debian: ~$ schroot -l
chroot:unstable-amd64

Accessing caged public user

user@debian:~$ schroot -c unstable-amd64

Accessing private caged (root)

user@debian:~$ schroot -c unstable-amd64 -u root

Basic Debian packaging configurations

Thanks to Eriberto and I recommend everyone to access this link http://debianet.com.br (Portuguese - Brazil) for more details on how to package your software in Debian.

We will do root access in the schroot configured to install some important packages for Debian packaging.

user@debian:~$ schroot -c unstable-amd64 -u root

{*} editor = your favorite text editor: nano, vim, mcedit, etc...

Adjusting the "/etc/bash.bashrc" file

(unstable-amd64)root@debian:~# editor /etc/bash.bashrc

Insert at the end of the file /etc/bash.bashrc

alias ls="ls --color=auto"
alias tree="tree -aC"
alias debuildsa="dpkg-buildpackage -sa -k0987654321ABC1234567890DFG0987654321HIJL" # --> your OpenPGP key.
alias uscan="uscan --verbose --report"
alias apt-cache="LANG=C apt-cache"
alias man="LANG=C man"
export DEBFULLNAME="put-your-full-name"
export DEBEMAIL="put-your-email"
export EDITOR="put-your-favorite-text-editor"
export QUILT_PATCHES="debian/patches"
export QUILT_DIFF_ARGS="--no-timestamps --no-index -pab"
export QUILT_REFRESH_ARGS="--no-timestamps --no-index -pab"
mount /proc

Save and close.

Adjusting the "/etc/apt/sources.list" file

(unstable-amd64)root@debian:~# editor /etc/apt/sources.list

Edit the file, duplicate the existing line and change the beginning of the second line from "deb" to "deb-src". The end result will be:

deb https://deb.debian.org/debian unstable main
deb-src https://deb.debian.org/debian unstable main

Save, close and update:

(unstable-amd64)root@debian:~# apt update && apt upgrade

We can now install additional procedures for Debian packaging.

(unstable-amd64)root@debian:~# apt install autopkgtest blhc devscripts dh-make dput-ng how-can-i-help locales quilt renameutils spell splitpatch tree

(unstable-amd64)root@debian:~# dpkg-reconfigure locales tzdata

locales.png

It is recommended that resetting locales leave "C.UTF-8" as the default.

(unstable-amd64)root@debian:~# apt autoremove && apt autoclean

Adjusting the "/etc/lintianrc" file

(unstable-amd64)root@debian:~# editor /etc/lintianrc

Enable the following lines:

display-info = yes
pedantic = yes
display-experimental = yes
color = auto

Enabling the OpenPGP key to sign packages

Edit the /etc/devscripts.conf file and enter your OpenPGP key on the DEBSIGN_KEYID line and activate.

(unstable-amd64)root@debian:~# editor /etc/devscripts.conf

DEBSIGN_KEYID=0987654321ABC1234567890DFG0987654321HIJL

Save and close. With that, schroot is ready for Debian packaging and you don't need to be root to get the job done.

NOTE: If an error message occurs when you are doing an "update/dist-upgrade" mentioning:

dpkg: unrecoverable fatal error, aborting:
 unknown system group 'Debian-exim' in statoverride file; the system group got removed
 before the override, which is most probably a packaging bug, to recover you
 can remove the override manually with dpkg-statoverride

To resolve, you might need to remove the statoverride entry.

(unstable-amd64)root@debian:~# dpkg-statoverride --list | grep Debian-exim
(unstable-amd64)root@debian:~# dpkg-statoverride --remove /etc/exim4/passwd.client


This wiki is a support and documentation resource for the Debian project. You are free to make improvements and corrections to this published content.


CategorySystemAdministration | CategoryVirtualization