[Libguestfs] [PATCH] customize: remove zypper's gpg keys auto-import

Cédric Bosdonnat cbosdonnat at suse.com
Fri Oct 2 16:16:48 UTC 2015


This option was considered unsecure, found a fix on the generated
opensuse images instead.
---
 customize/customize_run.ml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/customize/customize_run.ml b/customize/customize_run.ml
index ad0ab7f..6cb2328 100644
--- a/customize/customize_run.ml
+++ b/customize/customize_run.ml
@@ -116,7 +116,7 @@ exec >>%s 2>&1
     | "yum" ->
       sprintf "yum -y install %s" quoted_args
     | "zypper" ->
-      sprintf "zypper -n --gpg-auto-import-keys in -l %s" quoted_args
+      sprintf "zypper -n in -l %s" quoted_args
     | "unknown" ->
       error (f_"--install is not supported for this guest operating system")
     | pm ->
@@ -143,7 +143,7 @@ exec >>%s 2>&1
     | "yum" ->
       sprintf "yum -y update"
     | "zypper" ->
-      sprintf "zypper -n --gpg-auto-import-keys update -l"
+      sprintf "zypper -n update -l"
     | "unknown" ->
       error (f_"--update is not supported for this guest operating system")
     | pm ->
-- 
2.1.4




More information about the Libguestfs mailing list