Use upstream bullseye-security mirror for openssl

truenas · Mar 16, 2022 · 2c0af1f · 2c0af1f
1 parent c12e68b
commit 2c0af1f
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/conf/build.manifest b/conf/build.manifest
@@ -148,7 +148,7 @@ apt_preferences:
   Pin: "origin \"\""
   Pin-Priority: 1000
 - Package: "*ssl*"
-  Pin: "release n=bullseye-security"
+  Pin: "origin \"deb.debian.org\""
   Pin-Priority: 1000
 - Package: "*policykit*"
   Pin: "release n=bullseye-security"

diff --git a/scale_build/bootstrap/bootstrapdir.py b/scale_build/bootstrap/bootstrapdir.py
@@ -52,6 +52,14 @@ def setup_impl(self):
         with open(os.path.join(apt_path, 'preferences'), 'w') as f:
             f.write(get_apt_preferences())
 
+        self.logger.debug('Adding debian-security to sources')
+        deb_security = '\n'.join([
+            'deb http://deb.debian.org/debian-security/ bullseye-security main',
+            'deb-src http://deb.debian.org/debian-security/ bullseye-security main',
+        ])
+        with open(apt_sources_path, 'a+') as f:
+            f.write(f'\n{deb_security}\n')
+
         run(['chroot', self.chroot_basedir, 'apt', 'update'])
 
         if self.extra_packages_to_install: