From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id 267501FF15E for ; Mon, 10 Nov 2025 09:50:40 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 4AF18FE5B; Mon, 10 Nov 2025 09:51:25 +0100 (CET) Message-ID: <0be31f06-6607-4d7d-a8bf-32bde38118fb@proxmox.com> Date: Mon, 10 Nov 2025 09:51:22 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: pve-devel@lists.proxmox.com References: <20251030132844.188242-1-n.frey@proxmox.com> <20251030132844.188242-3-n.frey@proxmox.com> <1762506335.tfowgpy18e.astroid@yuna.none> Content-Language: en-US From: Nicolas Frey In-Reply-To: <1762506335.tfowgpy18e.astroid@yuna.none> X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1762764660236 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.392 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_ASCII_DIVIDERS 0.8 Email that uses ascii formatting dividers and possible spam tricks KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Subject: Re: [pve-devel] [PATCH v6 2/4] fix #5207: apt: check signature of repos with proxmox-pgp X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Proxmox VE development discussion Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: pve-devel-bounces@lists.proxmox.com Sender: "pve-devel" T24gMTEvNy8yNSAxMToxMSBBTSwgRmFiaWFuIEdyw7xuYmljaGxlciB3cm90ZToKPiBPbiBPY3Rv YmVyIDMwLCAyMDI1IDI6MjggcG0sIE5pY29sYXMgRnJleSB3cm90ZToKPj4gSWYgUE9NIGlzIHNl dCB1cCB0byBtaXJyb3IgdGhlIFBWRSByZXBvc2l0b3J5IGFuZCBvbmx5IHRoaXMgcmVwb3NpdG9y eQo+PiBpcyBhZGRlZCBvbiBhIFBWRSBob3N0LCB0aGUgYFJlcG9zaXRvcmllc2AgcGFuZWwgd2ls bCBzaG93IGFuIGBFcnJvcmAKPj4gc3RhdHVzIHdpdGggdGhlIG1lc3NhZ2U6Cj4+Cj4+IGBObyBQ cm94bW94IFZFIHJlcG9zaXRvcnkgaXMgZW5hYmxlZCwgeW91IGRvIG5vdCBnZXQgYW55IHVwZGF0 ZXMhYAo+Pgo+PiBUaGlzIGlzIGJlY2F1c2UgdGhlIGN1cnJlbnQgaW1wbGVtZW50YXRpb24gb25s eSBjaGVja3MgaWYgdGhlIHVyaSBvZgo+PiB0aGUgcmVwbyBtYXRjaGVzIHRoYXQgb2Ygb25lIG9m IHRoZSBzdGFuZGFyZCByZXBvcy4KPj4KPj4gVGhpcyBjb21taXQgYWltcyB0byBmaXggdGhpcyBp c3N1ZSBieSB2ZXJpZnlpbmcgaXQgdGhyb3VnaCBzaWduYXR1cmUKPj4gaW5mbyB2aWEgYHByb3ht b3gtcGdwYC4gVGhlIEluUmVsZWFzZSBmaWxlIGNhY2hlZCBhdAo+PiBgL3Zhci9saWIvYXB0L2xp c3RzL2AgaXMgdXNlZCB0byBjaGVjayB3aGV0aGVyIHRoZSBwYWNrYWdlIGlzIG9mCj4+IFByb3ht b3ggT3JpZ2luLgo+Pgo+PiBGaXhlczogaHR0cHM6Ly9idWd6aWxsYS5wcm94bW94LmNvbS9zaG93 X2J1Zy5jZ2k/aWQ9NTIwNwo+PiBTaWduZWQtb2ZmLWJ5OiBOaWNvbGFzIEZyZXkgPG4uZnJleUBw cm94bW94LmNvbT4KPj4gLS0tCj4+ICBwcm94bW94LWFwdC9DYXJnby50b21sICAgICAgICAgICAg ICAgICAgICAgfCAgMSArCj4+ICBwcm94bW94LWFwdC9zcmMvcmVwb3NpdG9yaWVzL3JlcG9zaXRv cnkucnMgfCA1NiArKysrKysrKysrKysrKysrKystLS0tCj4+ICAyIGZpbGVzIGNoYW5nZWQsIDQ3 IGluc2VydGlvbnMoKyksIDEwIGRlbGV0aW9ucygtKQo+Pgo+PiBkaWZmIC0tZ2l0IGEvcHJveG1v eC1hcHQvQ2FyZ28udG9tbCBiL3Byb3htb3gtYXB0L0NhcmdvLnRvbWwKPj4gaW5kZXggZTViZWI0 ZTYuLjVhOGUyNWViIDEwMDY0NAo+PiAtLS0gYS9wcm94bW94LWFwdC9DYXJnby50b21sCj4+ICsr KyBiL3Byb3htb3gtYXB0L0NhcmdvLnRvbWwKPj4gQEAgLTIzLDYgKzIzLDcgQEAgcmZjODIyLWxp a2UgPSAiMC4yLjEiCj4+ICBwcm94bW94LWFwdC1hcGktdHlwZXMud29ya3NwYWNlID0gdHJ1ZQo+ PiAgcHJveG1veC1jb25maWctZGlnZXN0ID0geyB3b3Jrc3BhY2UgPSB0cnVlLCBmZWF0dXJlcyA9 IFsib3BlbnNzbCJdIH0KPj4gIHByb3htb3gtc3lzLndvcmtzcGFjZSA9IHRydWUKPj4gK3Byb3ht b3gtcGdwLndvcmtzcGFjZSA9IHRydWUKPj4gIAo+PiAgYXB0LXBrZy1uYXRpdmUgPSB7IHZlcnNp b24gPSAiMC4zLjIiLCBvcHRpb25hbCA9IHRydWUgfQo+PiAgcmVnZXggPSB7IHdvcmtzcGFjZSA9 IHRydWUsIG9wdGlvbmFsID0gdHJ1ZSB9Cj4+IGRpZmYgLS1naXQgYS9wcm94bW94LWFwdC9zcmMv cmVwb3NpdG9yaWVzL3JlcG9zaXRvcnkucnMgYi9wcm94bW94LWFwdC9zcmMvcmVwb3NpdG9yaWVz L3JlcG9zaXRvcnkucnMKPj4gaW5kZXggMjRlNzk0M2IuLjVlMzg2NjY1IDEwMDY0NAo+PiAtLS0g YS9wcm94bW94LWFwdC9zcmMvcmVwb3NpdG9yaWVzL3JlcG9zaXRvcnkucnMKPj4gKysrIGIvcHJv eG1veC1hcHQvc3JjL3JlcG9zaXRvcmllcy9yZXBvc2l0b3J5LnJzCj4+IEBAIC0yLDYgKzIsNyBA QCB1c2Ugc3RkOjppbzo6e0J1ZlJlYWQsIEJ1ZlJlYWRlciwgV3JpdGV9Owo+PiAgdXNlIHN0ZDo6 cGF0aDo6e1BhdGgsIFBhdGhCdWZ9Owo+PiAgCj4+ICB1c2UgYW55aG93Ojp7YmFpbCwgZm9ybWF0 X2VyciwgRXJyb3J9Owo+PiArdXNlIHByb3htb3hfcGdwOjp7dmVyaWZ5X3NpZ25hdHVyZSwgV2Vh a0NyeXB0b0NvbmZpZ307Cj4+ICAKPj4gIHVzZSBjcmF0ZTo6cmVwb3NpdG9yaWVzOjpzdGFuZGFy ZDo6QVBUUmVwb3NpdG9yeUhhbmRsZUltcGw7Cj4+ICB1c2UgcHJveG1veF9hcHRfYXBpX3R5cGVz Ojp7Cj4+IEBAIC0xMjIsMjEgKzEyMywyNCBAQCBpbXBsIEFQVFJlcG9zaXRvcnlJbXBsIGZvciBB UFRSZXBvc2l0b3J5IHsKPj4gICAgICAgICAgcHJvZHVjdDogJnN0ciwKPj4gICAgICAgICAgc3Vp dGU6ICZzdHIsCj4+ICAgICAgKSAtPiBib29sIHsKPj4gLSAgICAgICAgbGV0IChwYWNrYWdlX3R5 cGUsIGhhbmRsZV91cmlzLCBjb21wb25lbnQsIF9rZXkpID0gaGFuZGxlLmluZm8ocHJvZHVjdCk7 Cj4+IC0KPj4gLSAgICAgICAgbGV0IG11dCBmb3VuZF91cmkgPSBmYWxzZTsKPj4gLQo+PiAtICAg ICAgICBmb3IgdXJpIGluIHNlbGYudXJpcy5pdGVyKCkgewo+PiAtICAgICAgICAgICAgbGV0IHVy aSA9IHVyaS50cmltX2VuZF9tYXRjaGVzKCcvJyk7Cj4+IC0KPj4gLSAgICAgICAgICAgIGZvdW5k X3VyaSA9IGZvdW5kX3VyaSB8fCBoYW5kbGVfdXJpcy5pdGVyKCkuYW55KHxoYW5kbGVfdXJpfCBo YW5kbGVfdXJpID09IHVyaSk7Cj4+IC0gICAgICAgIH0KPj4gKyAgICAgICAgbGV0IChwYWNrYWdl X3R5cGUsIGhhbmRsZV91cmlzLCBjb21wb25lbnQsIGtleSkgPSBoYW5kbGUuaW5mbyhwcm9kdWN0 KTsKPj4gKwo+PiArICAgICAgICBsZXQgZm91bmRfdXJpX29yX3NpZ25lZCA9IHx8IHsKPj4gKyAg ICAgICAgICAgIGxldCBtdXQgZm91bmQgPSBmYWxzZTsKPj4gKyAgICAgICAgICAgIGZvciB1cmkg aW4gc2VsZi51cmlzLml0ZXIoKSB7Cj4+ICsgICAgICAgICAgICAgICAgbGV0IHVyaSA9IHVyaS50 cmltX2VuZF9tYXRjaGVzKCcvJyk7Cj4+ICsgICAgICAgICAgICAgICAgZm91bmQgPSBmb3VuZAo+ PiArICAgICAgICAgICAgICAgICAgICB8fCBoYW5kbGVfdXJpcy5pdGVyKCkuYW55KHxoYW5kbGVf dXJpfCBoYW5kbGVfdXJpID09IHVyaSkKPj4gKyAgICAgICAgICAgICAgICAgICAgfHwgaXNfc2ln bmVkX2J5X2tleSh1cmksIHN1aXRlLCBrZXkpOwo+PiArICAgICAgICAgICAgfQo+PiArICAgICAg ICAgICAgZm91bmQKPj4gKyAgICAgICAgfTsKPj4gIAo+PiAgICAgICAgICBzZWxmLnR5cGVzLmNv bnRhaW5zKCZwYWNrYWdlX3R5cGUpCj4+IC0gICAgICAgICAgICAmJiBmb3VuZF91cmkKPj4gICAg ICAgICAgICAgIC8vIHVzaW5nIGNvbnRhaW5zIHdvdWxkIHJlcXVpcmUgYSAmU3RyaW5nCj4+ICAg ICAgICAgICAgICAmJiBzZWxmLnN1aXRlcy5pdGVyKCkuYW55KHxzZWxmX3N1aXRlfCBzZWxmX3N1 aXRlID09IHN1aXRlKQo+PiAgICAgICAgICAgICAgJiYgc2VsZi5jb21wb25lbnRzLmNvbnRhaW5z KCZjb21wb25lbnQpCj4+ICsgICAgICAgICAgICAmJiBmb3VuZF91cmlfb3Jfc2lnbmVkKCkKPj4g ICAgICB9Cj4+ICAKPj4gICAgICBmbiBvcmlnaW5fZnJvbV91cmlzKCZzZWxmKSAtPiBPcHRpb248 U3RyaW5nPiB7Cj4+IEBAIC0zODksNiArMzkzLDM4IEBAIGZuIHdyaXRlX3N0YW56YShyZXBvOiAm QVBUUmVwb3NpdG9yeSwgdzogJm11dCBkeW4gV3JpdGUpIC0+IFJlc3VsdDwoKSwgRXJyb3I+IHsK Pj4gICAgICBPaygoKSkKPj4gIH0KPj4gIAo+PiArLy8vIFJlYWRzIGZpbGUgY29udGVudHMgb2Yg Y2FjaGVkL2xvY2FsIFBPTSBJblJlbGVhc2UgZmlsZSBmcm9tIHVyaQo+PiArLy8vIGFuZCBrZXkg dG8gdmVyaWZ5IHBncCBzaWduYXR1cmUKPj4gK2ZuIGlzX3NpZ25lZF9ieV9rZXkodXJpOiAmc3Ry LCBzdWl0ZTogJnN0ciwga2V5X3BhdGg6ICZzdHIpIC0+IGJvb2wgewo+PiArICAgIGxldCBkYXRh ID0gbWF0Y2ggc3RkOjpmczo6cmVhZCgmcmVsZWFzZV9maWxlbmFtZSgKPj4gKyAgICAgICAgUGF0 aDo6bmV3KCIvdmFyL2xpYi9hcHQvbGlzdHMiKSwKPj4gKyAgICAgICAgdXJpLAo+PiArICAgICAg ICBzdWl0ZSwKPj4gKyAgICAgICAgZmFsc2UsCj4+ICsgICAgKSkgewo+PiArICAgICAgICBPayhk KSA9PiBkLAo+PiArICAgICAgICBFcnIoZXJyKSA9PiB7Cj4+ICsgICAgICAgICAgICBsb2c6Ondh cm4hKCJjb3VsZCBub3QgcmVhZCBJblJlbGVhc2UgZmlsZToge2Vycn0iKTsKPiAKPiBsb2cgaXMg YW4gb3B0aW9uYWwgZGVwZW5kZW5jeSBoZXJlLCBidXQgdGhpcyBjb2RlIHBhdGggaXMgcmVhY2hh YmxlCj4gd2l0aG91dCBlbmFibGluZyBpdC4gdGhpcyBmbiBpcyBhbHNvIHJhdGhlciBsb3cgbGV2 ZWwgZm9yIHN1Y2ggYSBoaWdoCj4gKHdhcm5pbmcpIGxldmVsIG1lc3NhZ2UuCj4gCj4gaWYgd2Ug a2VlcCBpdCwgSSdkIHJhdGhlciBkb3duZ3JhZGUgaXQgdG8gZGVidWcgb3IgdGhlIGxpa2UsIGFu ZCBwbGVhc2UKPiBhZGQgdGhlIHBhdGgsIGJlY2F1c2Uge2Vycn0gd2lsbCBtb3N0IGxpa2VseSBv bmx5IGNvbnRhaW4gc29tZXRoaW5nIGxpa2UKPiAiZG9lcyBub3QgZXhpc3QiIG9yICJtaXNzaW5n IHBlcm1pc3Npb25zIiwgd2hpY2ggaXMgbm90IGhlbHBmdWwgOykKPiAKPj4gKyAgICAgICAgICAg IHJldHVybiBmYWxzZTsKPj4gKyAgICAgICAgfQo+PiArICAgIH07Cj4+ICsKPj4gKyAgICBsZXQg a2V5ID0gbWF0Y2ggc3RkOjpmczo6cmVhZChrZXlfcGF0aCkgewo+PiArICAgICAgICBPayhrKSA9 PiBrLAo+PiArICAgICAgICBFcnIoZXJyKSA9PiB7Cj4+ICsgICAgICAgICAgICBsb2c6Ondhcm4h KCJjb3VsZCBub3QgcmVhZCBrZXkgZmlsZSAne2tleV9wYXRofSc6IHtlcnJ9Iik7Cj4gCj4gc2Ft ZSBoZXJlCj4gCj4+ICsgICAgICAgICAgICByZXR1cm4gZmFsc2U7Cj4+ICsgICAgICAgIH0KPj4g KyAgICB9Owo+PiArCj4+ICsgICAgaWYgbGV0IEVycihlKSA9IHZlcmlmeV9zaWduYXR1cmUoJmRh dGEsICZrZXksIE5vbmUsICZXZWFrQ3J5cHRvQ29uZmlnOjpkZWZhdWx0KCkpIHsKPj4gKyAgICAg ICAgbG9nOjplcnJvciEoIlBHUCBzaWduYXR1cmUgdmVyaWZpY2F0aW9uIGZhaWxlZDoge2U6P30i KTsKPiAKPiBhbmQgaGVyZQo+IAo+IGZvciBleGFtcGxlIHJpZ2h0IG5vdywgaWYgSSBjb25maWd1 cmUgYSByZXBvc2l0b3J5IHdpdGggc29tZSBrZXkgaXNzdWUgSQo+IGdldCB0aGUgZm9sbG93aW5n IGluIGpvdXJuYWwgd2l0aCBubyBjb250ZXh0Ogo+IAo+IE5vdiAwNyAxMToxMDozNCB5dW5hIHBy b3htb3gtYmFja3VwLXByb3h5WzQzMTcwNF06IFBHUCBzaWduYXR1cmUgdmVyaWZpY2F0aW9uIGZh aWxlZDogTm8ga2V5IGluIGtleXJpbmcgY291bGQgdmVyaWZ5IHRoZSBtZXNzYWdlIQo+IAo+IHdo aWNoIHNvdW5kcyBzdXBlciBzY2FyeS4uCj4gCgpNYWtlcyBhIGxvdCBvZiBzZW5zZSwgd2lsbCBj aGFuZ2UgaW4gdjcsIHRoYW5rcyEKCj4+ICsgICAgICAgIHJldHVybiBmYWxzZTsKPj4gKyAgICB9 Cj4+ICsKPj4gKyAgICB0cnVlCj4+ICt9Cj4+ICsKPj4gICNbdGVzdF0KPj4gIGZuIHRlc3RfdXJp X3RvX2ZpbGVuYW1lKCkgewo+PiAgICAgIGxldCBmaWxlbmFtZSA9IHVyaV90b19maWxlbmFtZSgi aHR0cHM6Ly9zb21lX2hvc3Qvc29tZS9wYXRoIik7Cj4+IC0tIAo+PiAyLjQ3LjMKPj4KPj4KPj4g X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KPj4gcHZlLWRl dmVsIG1haWxpbmcgbGlzdAo+PiBwdmUtZGV2ZWxAbGlzdHMucHJveG1veC5jb20KPj4gaHR0cHM6 Ly9saXN0cy5wcm94bW94LmNvbS9jZ2ktYmluL21haWxtYW4vbGlzdGluZm8vcHZlLWRldmVsCj4+ Cj4+Cj4+Cj4gCj4gCj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18KPiBwdmUtZGV2ZWwgbWFpbGluZyBsaXN0Cj4gcHZlLWRldmVsQGxpc3RzLnByb3htb3gu Y29tCj4gaHR0cHM6Ly9saXN0cy5wcm94bW94LmNvbS9jZ2ktYmluL21haWxtYW4vbGlzdGluZm8v cHZlLWRldmVsCj4gCj4gCgoKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fCnB2ZS1kZXZlbCBtYWlsaW5nIGxpc3QKcHZlLWRldmVsQGxpc3RzLnByb3htb3gu Y29tCmh0dHBzOi8vbGlzdHMucHJveG1veC5jb20vY2dpLWJpbi9tYWlsbWFuL2xpc3RpbmZvL3B2 ZS1kZXZlbAo=