From 4f38d60f26c6cde81e4008a942560ab6ab123f2c Mon Sep 17 00:00:00 2001 From: Attila Gombos Date: Thu, 12 Mar 2026 12:58:41 +0100 Subject: [PATCH 1/8] Further APT CI hardening --- apt-ci-hardening | 6 +++++- retry | 4 ++-- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/apt-ci-hardening b/apt-ci-hardening index f00e383..cf63b43 100644 --- a/apt-ci-hardening +++ b/apt-ci-hardening @@ -11,4 +11,8 @@ Acquire::ForceIPv4 "true"; Acquire::CompressionTypes::Order { "gz"; "xz"; }; # Be tolerant of transient mirror issues -Acquire::Check-Valid-Until "false"; \ No newline at end of file +Acquire::Check-Valid-Until "false"; +Acquire::http::Pipeline-Depth "0"; +Acquire::Queue-Mode "access"; +Acquire::http::No-Cache "true"; +Acquire::http::No-Store "true"; diff --git a/retry b/retry index cd74246..1e97d42 100755 --- a/retry +++ b/retry @@ -1,7 +1,7 @@ #!/bin/bash n=0 -max=5 -delay=2 +max=3 +delay=1 until "$@"; do ((n++)) if [ "$n" -ge "$max" ]; then From ff19a73d9dddc1025e3f7f900ea19c42fe62df57 Mon Sep 17 00:00:00 2001 From: Attila Gombos Date: Thu, 12 Mar 2026 15:09:52 +0100 Subject: [PATCH 2/8] Fix test --- test/build_complex_test/deps.json | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/test/build_complex_test/deps.json b/test/build_complex_test/deps.json index b03823d..a406f94 100644 --- a/test/build_complex_test/deps.json +++ b/test/build_complex_test/deps.json @@ -18,6 +18,11 @@ "libprotobuf32" ] }, + "trixie":{ + "deps":[ + "libprotobuf32t64" + ] + }, "build_deps": [ "libc6-dev", { From 0c9293e8638aab5f46fee4c2b953531a44027f02 Mon Sep 17 00:00:00 2001 From: Attila Gombos Date: Thu, 12 Mar 2026 16:50:08 +0100 Subject: [PATCH 3/8] revert --- apt-ci-hardening | 4 ---- scripts/build_steps_armhf/04-schroot_setup | 4 ++-- scripts/build_steps_armhf/06-erapt_setup | 4 ++-- scripts/build_steps_cross/11-raspberrysetup | 4 ++-- 4 files changed, 6 insertions(+), 10 deletions(-) diff --git a/apt-ci-hardening b/apt-ci-hardening index cf63b43..6a26638 100644 --- a/apt-ci-hardening +++ b/apt-ci-hardening @@ -12,7 +12,3 @@ Acquire::CompressionTypes::Order { "gz"; "xz"; }; # Be tolerant of transient mirror issues Acquire::Check-Valid-Until "false"; -Acquire::http::Pipeline-Depth "0"; -Acquire::Queue-Mode "access"; -Acquire::http::No-Cache "true"; -Acquire::http::No-Store "true"; diff --git a/scripts/build_steps_armhf/04-schroot_setup b/scripts/build_steps_armhf/04-schroot_setup index 5362df1..1512d04 100755 --- a/scripts/build_steps_armhf/04-schroot_setup +++ b/scripts/build_steps_armhf/04-schroot_setup @@ -28,9 +28,9 @@ EOF # Fetch the latest raspberrypi-archive-keyring .deb and install it in the chroot RPI_KEYRING_URL="https://archive.raspberrypi.com/debian/pool/main/r/raspberrypi-archive-keyring" -RPI_KEYRING_DEB=$(retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 8 --retry-all-errors --retry-delay 1 "${RPI_KEYRING_URL}/" \ +RPI_KEYRING_DEB=$(retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 "${RPI_KEYRING_URL}/" \ | grep -oP 'raspberrypi-archive-keyring_[^"]+_all\.deb' | sort -V | tail -1) -retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 8 --retry-all-errors --retry-delay 1 "${RPI_KEYRING_URL}/${RPI_KEYRING_DEB}" -o "/tmp/${RPI_KEYRING_DEB}" +retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 "${RPI_KEYRING_URL}/${RPI_KEYRING_DEB}" -o "/tmp/${RPI_KEYRING_DEB}" cp "/tmp/${RPI_KEYRING_DEB}" "/var/chroot/buildroot/tmp/${RPI_KEYRING_DEB}" chroot /var/chroot/buildroot dpkg -i "/tmp/${RPI_KEYRING_DEB}" diff --git a/scripts/build_steps_armhf/06-erapt_setup b/scripts/build_steps_armhf/06-erapt_setup index 9859c42..6d4a37c 100755 --- a/scripts/build_steps_armhf/06-erapt_setup +++ b/scripts/build_steps_armhf/06-erapt_setup @@ -12,7 +12,7 @@ source /etc/os-release install -d /usr/share/keyrings rm -f /usr/share/keyrings/debian-archive-keys-latest.gpg -retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 8 --retry-all-errors --retry-delay 1 https://ftp-master.debian.org/keys/archive-key-$VERSION_ID.asc -o /tmp/archive-key-$VERSION_ID.asc +retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 https://ftp-master.debian.org/keys/archive-key-$VERSION_ID.asc -o /tmp/archive-key-$VERSION_ID.asc cat /tmp/archive-key-$VERSION_ID.asc | gpg --dearmor -o /usr/share/keyrings/debian-archive-keys-latest.gpg # sanity check the keys received @@ -36,7 +36,7 @@ Components: main Signed-By: /usr/share/keyrings/er-keyring.pgp EOF -retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 8 --retry-all-errors --retry-delay 1 http://aptrepo.effective-range.com/effectiverange.gpg.key -o /usr/share/keyrings/er-keyring.pgp +retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 http://aptrepo.effective-range.com/effectiverange.gpg.key -o /usr/share/keyrings/er-keyring.pgp # sanity check the keys received gpg --show-keys /usr/share/keyrings/er-keyring.pgp diff --git a/scripts/build_steps_cross/11-raspberrysetup b/scripts/build_steps_cross/11-raspberrysetup index 16b7472..7740c6b 100755 --- a/scripts/build_steps_cross/11-raspberrysetup +++ b/scripts/build_steps_cross/11-raspberrysetup @@ -20,9 +20,9 @@ EOF # Fetch the latest raspberrypi-archive-keyring .deb and install it RPI_KEYRING_URL="https://archive.raspberrypi.com/debian/pool/main/r/raspberrypi-archive-keyring" -RPI_KEYRING_DEB=$(retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 8 --retry-all-errors --retry-delay 1 "${RPI_KEYRING_URL}/" \ +RPI_KEYRING_DEB=$(retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 "${RPI_KEYRING_URL}/" \ | grep -oP 'raspberrypi-archive-keyring_[^"]+_all\.deb' | sort -V | tail -1) -retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 8 --retry-all-errors --retry-delay 1 "${RPI_KEYRING_URL}/${RPI_KEYRING_DEB}" -o "/tmp/${RPI_KEYRING_DEB}" +retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 "${RPI_KEYRING_URL}/${RPI_KEYRING_DEB}" -o "/tmp/${RPI_KEYRING_DEB}" dpkg -i "/tmp/${RPI_KEYRING_DEB}" # sanity check the keys received From 20070c335b65ae369722307488092d03de7242e4 Mon Sep 17 00:00:00 2001 From: Attila Gombos Date: Sat, 21 Mar 2026 08:18:14 +0100 Subject: [PATCH 4/8] test --- scripts/build_steps_armhf/06-erapt_setup | 3 +++ 1 file changed, 3 insertions(+) diff --git a/scripts/build_steps_armhf/06-erapt_setup b/scripts/build_steps_armhf/06-erapt_setup index 6d4a37c..adb5e3e 100755 --- a/scripts/build_steps_armhf/06-erapt_setup +++ b/scripts/build_steps_armhf/06-erapt_setup @@ -27,6 +27,9 @@ Components: main Signed-By: /usr/share/keyrings/debian-archive-keys-latest.gpg EOF +apt install -y mtr +mtr -rw aptrepo.effective-range.com + # Setup in host container cat > /etc/apt/sources.list.d/er.sources << EOF Types: deb From 769e7ec53f8f3aa444ce3a682f3d10fbdab280ae Mon Sep 17 00:00:00 2001 From: Attila Gombos Date: Sat, 21 Mar 2026 09:38:18 +0100 Subject: [PATCH 5/8] test --- apt_check.sh | 49 +++++++++++++++++++++ scripts/build_all | 2 + scripts/build_steps_armhf/04-schroot_setup | 4 +- scripts/build_steps_armhf/06-erapt_setup | 7 +-- scripts/build_steps_cross/11-raspberrysetup | 4 +- 5 files changed, 57 insertions(+), 9 deletions(-) create mode 100755 apt_check.sh diff --git a/apt_check.sh b/apt_check.sh new file mode 100755 index 0000000..6e5ebca --- /dev/null +++ b/apt_check.sh @@ -0,0 +1,49 @@ +#!/bin/bash + +REPO_HOST="aptrepo.effective-range.com" + +DNS_RESULT=$(getent hosts "$REPO_HOST") +if [ -z "$DNS_RESULT" ]; then + echo "[ERROR] DNS resolution failed for $REPO_HOST" >&2 + exit 1 +else + echo "[INFO] DNS resolution for $REPO_HOST: $DNS_RESULT" + REPO_IP=$(echo "$DNS_RESULT" | awk '{print $1}') +fi + +ROUTE_RESULT=$(ip route get "$REPO_IP" 2>&1) +if [ $? -ne 0 ]; then + echo "[ERROR] No route to host $REPO_HOST ($REPO_IP)" >&2 + echo "$ROUTE_RESULT" + exit 2 +else + echo "[INFO] Route to $REPO_HOST ($REPO_IP):" + echo "$ROUTE_RESULT" +fi + +apt install -y mtr traceroute + +echo "[INFO] Running mtr to $REPO_HOST..." +mtr -rwzc 5 "$REPO_HOST" +MTR_STATUS=$? +if [ $MTR_STATUS -ne 0 ]; then + echo "[ERROR] mtr failed to reach $REPO_HOST" >&2 + exit 3 +fi + +echo "[INFO] Running traceroute to $REPO_HOST..." +traceroute "$REPO_HOST" +TR_STATUS=$? +if [ $TR_STATUS -ne 0 ]; then + echo "[ERROR] traceroute failed to reach $REPO_HOST" >&2 + exit 4 +fi +echo "[INFO] Running ping to $REPO_HOST..." +ping -c 4 "$REPO_HOST" +if [ $? -ne 0 ]; then + echo "[ERROR] ping failed to reach $REPO_HOST" >&2 + exit 5 +fi + +echo "[INFO] All connectivity checks passed for $REPO_HOST" +exit 0 diff --git a/scripts/build_all b/scripts/build_all index d2b3a0d..7987a57 100755 --- a/scripts/build_all +++ b/scripts/build_all @@ -20,6 +20,8 @@ then . "$ROOT_DIR/packages_$BUILD_ARCH" fi +apt_check + apt_update apt_install -y --no-install-recommends $PACKAGES_TO_INSTALL diff --git a/scripts/build_steps_armhf/04-schroot_setup b/scripts/build_steps_armhf/04-schroot_setup index 1512d04..ee21dd2 100755 --- a/scripts/build_steps_armhf/04-schroot_setup +++ b/scripts/build_steps_armhf/04-schroot_setup @@ -28,9 +28,9 @@ EOF # Fetch the latest raspberrypi-archive-keyring .deb and install it in the chroot RPI_KEYRING_URL="https://archive.raspberrypi.com/debian/pool/main/r/raspberrypi-archive-keyring" -RPI_KEYRING_DEB=$(retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 "${RPI_KEYRING_URL}/" \ +RPI_KEYRING_DEB=$(curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 "${RPI_KEYRING_URL}/" \ | grep -oP 'raspberrypi-archive-keyring_[^"]+_all\.deb' | sort -V | tail -1) -retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 "${RPI_KEYRING_URL}/${RPI_KEYRING_DEB}" -o "/tmp/${RPI_KEYRING_DEB}" +curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 "${RPI_KEYRING_URL}/${RPI_KEYRING_DEB}" -o "/tmp/${RPI_KEYRING_DEB}" cp "/tmp/${RPI_KEYRING_DEB}" "/var/chroot/buildroot/tmp/${RPI_KEYRING_DEB}" chroot /var/chroot/buildroot dpkg -i "/tmp/${RPI_KEYRING_DEB}" diff --git a/scripts/build_steps_armhf/06-erapt_setup b/scripts/build_steps_armhf/06-erapt_setup index adb5e3e..54f54fa 100755 --- a/scripts/build_steps_armhf/06-erapt_setup +++ b/scripts/build_steps_armhf/06-erapt_setup @@ -12,7 +12,7 @@ source /etc/os-release install -d /usr/share/keyrings rm -f /usr/share/keyrings/debian-archive-keys-latest.gpg -retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 https://ftp-master.debian.org/keys/archive-key-$VERSION_ID.asc -o /tmp/archive-key-$VERSION_ID.asc +curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 https://ftp-master.debian.org/keys/archive-key-$VERSION_ID.asc -o /tmp/archive-key-$VERSION_ID.asc cat /tmp/archive-key-$VERSION_ID.asc | gpg --dearmor -o /usr/share/keyrings/debian-archive-keys-latest.gpg # sanity check the keys received @@ -27,9 +27,6 @@ Components: main Signed-By: /usr/share/keyrings/debian-archive-keys-latest.gpg EOF -apt install -y mtr -mtr -rw aptrepo.effective-range.com - # Setup in host container cat > /etc/apt/sources.list.d/er.sources << EOF Types: deb @@ -39,7 +36,7 @@ Components: main Signed-By: /usr/share/keyrings/er-keyring.pgp EOF -retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 http://aptrepo.effective-range.com/effectiverange.gpg.key -o /usr/share/keyrings/er-keyring.pgp +curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 http://aptrepo.effective-range.com/effectiverange.gpg.key -o /usr/share/keyrings/er-keyring.pgp # sanity check the keys received gpg --show-keys /usr/share/keyrings/er-keyring.pgp diff --git a/scripts/build_steps_cross/11-raspberrysetup b/scripts/build_steps_cross/11-raspberrysetup index 7740c6b..05c0bf4 100755 --- a/scripts/build_steps_cross/11-raspberrysetup +++ b/scripts/build_steps_cross/11-raspberrysetup @@ -20,9 +20,9 @@ EOF # Fetch the latest raspberrypi-archive-keyring .deb and install it RPI_KEYRING_URL="https://archive.raspberrypi.com/debian/pool/main/r/raspberrypi-archive-keyring" -RPI_KEYRING_DEB=$(retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 "${RPI_KEYRING_URL}/" \ +RPI_KEYRING_DEB=$(curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 "${RPI_KEYRING_URL}/" \ | grep -oP 'raspberrypi-archive-keyring_[^"]+_all\.deb' | sort -V | tail -1) -retry curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 "${RPI_KEYRING_URL}/${RPI_KEYRING_DEB}" -o "/tmp/${RPI_KEYRING_DEB}" +curl -4 -fSL --connect-timeout 5 --max-time 20 --retry 5 --retry-all-errors --retry-delay 1 "${RPI_KEYRING_URL}/${RPI_KEYRING_DEB}" -o "/tmp/${RPI_KEYRING_DEB}" dpkg -i "/tmp/${RPI_KEYRING_DEB}" # sanity check the keys received From b99dca6c0c7fc07716ea45af74448d75c7cd5526 Mon Sep 17 00:00:00 2001 From: Attila Gombos Date: Sat, 21 Mar 2026 10:41:14 +0100 Subject: [PATCH 6/8] test --- Dockerfile | 1 + Dockerfile-cross | 3 ++- apt_check.sh => apt_check | 0 3 files changed, 3 insertions(+), 1 deletion(-) rename apt_check.sh => apt_check (100%) diff --git a/Dockerfile b/Dockerfile index a1d2c81..b2a7377 100644 --- a/Dockerfile +++ b/Dockerfile @@ -11,6 +11,7 @@ ARG BUILD_ARCH=armhf COPY apt-ci-hardening /etc/apt/apt.conf.d/99-ci-hardening COPY --chmod=0755 retry /usr/local/bin/retry +COPY --chmod=0755 apt_check /usr/local/bin/apt_check COPY --chmod=0755 apt_update /usr/local/bin/apt_update COPY --chmod=0755 apt_install /usr/local/bin/apt_install RUN apt_update && apt_install -y wget diff --git a/Dockerfile-cross b/Dockerfile-cross index b1b6744..ad0389d 100644 --- a/Dockerfile-cross +++ b/Dockerfile-cross @@ -8,10 +8,11 @@ ARG BUILD_GID=499 ARG KEEP_BUILD_ARTIFACTS=FALSE ARG TARGET_DIR=NON_EXISTENT_FILE ARG BUILD_ARCH=armhf -ARG EARLY_EXIT_STEP= +ARG EARLY_EXIT_STEP="" COPY apt-ci-hardening /etc/apt/apt.conf.d/99-ci-hardening COPY --chmod=0755 retry /usr/local/bin/retry +COPY --chmod=0755 apt_check /usr/local/bin/apt_check COPY --chmod=0755 apt_update /usr/local/bin/apt_update COPY --chmod=0755 apt_install /usr/local/bin/apt_install RUN apt_update && apt_install -y wget diff --git a/apt_check.sh b/apt_check similarity index 100% rename from apt_check.sh rename to apt_check From 268f68abf6a69fcb2b1ee62793edd3737b464d9e Mon Sep 17 00:00:00 2001 From: Attila Gombos Date: Sat, 21 Mar 2026 11:18:51 +0100 Subject: [PATCH 7/8] test --- apt_check | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/apt_check b/apt_check index 6e5ebca..df4d335 100755 --- a/apt_check +++ b/apt_check @@ -1,5 +1,7 @@ #!/bin/bash +set -e + REPO_HOST="aptrepo.effective-range.com" DNS_RESULT=$(getent hosts "$REPO_HOST") @@ -11,6 +13,10 @@ else REPO_IP=$(echo "$DNS_RESULT" | awk '{print $1}') fi +apt update -y + +apt install -y iproute2 + ROUTE_RESULT=$(ip route get "$REPO_IP" 2>&1) if [ $? -ne 0 ]; then echo "[ERROR] No route to host $REPO_HOST ($REPO_IP)" >&2 @@ -21,7 +27,7 @@ else echo "$ROUTE_RESULT" fi -apt install -y mtr traceroute +apt install -y mtr echo "[INFO] Running mtr to $REPO_HOST..." mtr -rwzc 5 "$REPO_HOST" @@ -31,6 +37,8 @@ if [ $MTR_STATUS -ne 0 ]; then exit 3 fi +apt install -y traceroute iputils-ping + echo "[INFO] Running traceroute to $REPO_HOST..." traceroute "$REPO_HOST" TR_STATUS=$? From f9355cae639cb7ee17fff5985d7317d83804b6bf Mon Sep 17 00:00:00 2001 From: Attila Gombos Date: Sat, 21 Mar 2026 11:40:22 +0100 Subject: [PATCH 8/8] test --- Dockerfile | 2 +- Dockerfile-cross | 2 +- apt_check | 33 ++++++--------------------------- scripts/build_all | 2 -- 4 files changed, 8 insertions(+), 31 deletions(-) diff --git a/Dockerfile b/Dockerfile index b2a7377..77a2f00 100644 --- a/Dockerfile +++ b/Dockerfile @@ -14,7 +14,7 @@ COPY --chmod=0755 retry /usr/local/bin/retry COPY --chmod=0755 apt_check /usr/local/bin/apt_check COPY --chmod=0755 apt_update /usr/local/bin/apt_update COPY --chmod=0755 apt_install /usr/local/bin/apt_install -RUN apt_update && apt_install -y wget +RUN apt_update && apt_install -y wget iproute2 && apt_check # Checks if the 'crossbuilder' user exists. RUN if ! id crossbuilder 2>/dev/null;then \ diff --git a/Dockerfile-cross b/Dockerfile-cross index ad0389d..8713140 100644 --- a/Dockerfile-cross +++ b/Dockerfile-cross @@ -15,7 +15,7 @@ COPY --chmod=0755 retry /usr/local/bin/retry COPY --chmod=0755 apt_check /usr/local/bin/apt_check COPY --chmod=0755 apt_update /usr/local/bin/apt_update COPY --chmod=0755 apt_install /usr/local/bin/apt_install -RUN apt_update && apt_install -y wget +RUN apt_update && apt_install -y wget iproute2 && apt_check RUN groupadd -g $BUILD_GID crossbuilder RUN useradd -d /home/crossbuilder -m -g $BUILD_GID -u $BUILD_UID -s /bin/bash crossbuilder diff --git a/apt_check b/apt_check index df4d335..f20d7ba 100755 --- a/apt_check +++ b/apt_check @@ -13,10 +13,6 @@ else REPO_IP=$(echo "$DNS_RESULT" | awk '{print $1}') fi -apt update -y - -apt install -y iproute2 - ROUTE_RESULT=$(ip route get "$REPO_IP" 2>&1) if [ $? -ne 0 ]; then echo "[ERROR] No route to host $REPO_HOST ($REPO_IP)" >&2 @@ -27,30 +23,13 @@ else echo "$ROUTE_RESULT" fi -apt install -y mtr - -echo "[INFO] Running mtr to $REPO_HOST..." -mtr -rwzc 5 "$REPO_HOST" -MTR_STATUS=$? -if [ $MTR_STATUS -ne 0 ]; then - echo "[ERROR] mtr failed to reach $REPO_HOST" >&2 +KEY_URL="http://$REPO_HOST/effectiverange.gpg.key" +echo "[INFO] Checking HTTP connectivity to $KEY_URL..." +if ! wget --spider --timeout=10 --tries=2 "$KEY_URL"; then + echo "[ERROR] Failed to fetch $KEY_URL" >&2 exit 3 -fi - -apt install -y traceroute iputils-ping - -echo "[INFO] Running traceroute to $REPO_HOST..." -traceroute "$REPO_HOST" -TR_STATUS=$? -if [ $TR_STATUS -ne 0 ]; then - echo "[ERROR] traceroute failed to reach $REPO_HOST" >&2 - exit 4 -fi -echo "[INFO] Running ping to $REPO_HOST..." -ping -c 4 "$REPO_HOST" -if [ $? -ne 0 ]; then - echo "[ERROR] ping failed to reach $REPO_HOST" >&2 - exit 5 +else + echo "[INFO] Successfully fetched $KEY_URL" fi echo "[INFO] All connectivity checks passed for $REPO_HOST" diff --git a/scripts/build_all b/scripts/build_all index 7987a57..d2b3a0d 100755 --- a/scripts/build_all +++ b/scripts/build_all @@ -20,8 +20,6 @@ then . "$ROOT_DIR/packages_$BUILD_ARCH" fi -apt_check - apt_update apt_install -y --no-install-recommends $PACKAGES_TO_INSTALL