[RFC Patch 1/1] Enable customization of apt-get configuration in rootfs_install_pkgs_download of rootfs.bbclass

[Ulrich Teichert]

Hi,

this one character patch enables the configuration of apt-get in rootfs_install_pkgs_download of rootfs.bbclass. One use case would

be switching off HTTPS-verification during package download with setting

ROOTFS_APT_ARGS += "-o 'Acquire::https::Verify-Peer=false'" in e.g. local.conf.

While this could be achieved by prepending rootfs_install_pkgs_download as well,

the proposed patch is the only missing part to support this use case in Isar out

of the box.

Signed-off-by: Ulrich Teichert <ulrich....@kumkeo.de>
---

diff --git a/meta/classes-recipe/rootfs.bbclass b/meta/classes-recipe/rootfs.bbclass
index 8b502a50..ca1a4a88 100644
--- a/meta/classes-recipe/rootfs.bbclass
+++ b/meta/classes-recipe/rootfs.bbclass
@@ -40,7 +40,7 @@ ROOTFS_FEATURES:remove:bullseye = "generate-sbom"
 ROOTFS_FEATURES:remove:jammy = "generate-sbom"
 ROOTFS_FEATURES:remove:focal = "generate-sbom"
 
-ROOTFS_APT_ARGS="install --yes -o Debug::pkgProblemResolver=yes"
+ROOTFS_APT_ARGS+="install --yes -o Debug::pkgProblemResolver=yes"
 
 ROOTFS_CLEAN_FILES="/etc/hostname /etc/resolv.conf"
 

[Ulrich Teichert]

Hi,

On Monday, May 11, 2026 at 3:07:09 PM UTC+2 Ulrich Teichert wrote:

Hi,

this one character patch enables the configuration of apt-get in rootfs_install_pkgs_download of rootfs.bbclass. One use case would

be switching off HTTPS-verification during package download with setting

ROOTFS_APT_ARGS += "-o 'Acquire::https::Verify-Peer=false'" in e.g. local.conf.

While this could be achieved by prepending rootfs_install_pkgs_download as well,

the proposed patch is the only missing part to support this use case in Isar out

of the box.

Sorry, of course the same can be done by just adding

ROOTFS_APT_ARGS:append = " -o 'Acquire::https::Verify-Peer=false'"

in a local.conf. No patching necessary, sorry for the noise,

CU,

Uli