Fix: use --debootstrap-options to include ca-certificates in bootstrap

--bootstrap-packages is not a valid lb config option (20230502). Use --debootstrap-options "--include=ca-certificates" instead to ensure ca-certificates is present when lb chroot_archives runs apt-get update against the NVIDIA CUDA HTTPS source. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Bootstrap ca-certificates so NVIDIA CUDA HTTPS source is trusted
2026-04-15 17:26:01 +03:00 · 2026-04-15 17:24:20 +03:00 · 2026-04-15 17:19:53 +03:00 · 2026-04-15 17:10:23 +03:00
1 changed files with 1 additions and 0 deletions
--- a/iso/builder/auto/config
+++ b/iso/builder/auto/config
@@ -33,6 +33,7 @@ lb config noauto \
    --iso-volume "EASY_BEE_${BEE_GPU_VENDOR_UPPER:-NVIDIA}" \
    --iso-application "EASY-BEE-${BEE_GPU_VENDOR_UPPER:-NVIDIA}" \
    --bootappend-live "boot=live components video=1920x1080 console=tty0 console=ttyS0,115200n8 loglevel=3 systemd.show_status=1 username=bee user-fullname=Bee modprobe.blacklist=nouveau,snd_hda_intel,snd_hda_codec_realtek,snd_hda_codec_generic,soundcore" \
+    --debootstrap-options "--include=ca-certificates" \
    --apt-recommends false \
    --chroot-squashfs-compression-type zstd \
    "${@}"
Author	SHA1	Message	Date
Mikhail Chusavitin	b65ef2ea1d	Fix: use --debootstrap-options to include ca-certificates in bootstrap --bootstrap-packages is not a valid lb config option (20230502). Use --debootstrap-options "--include=ca-certificates" instead to ensure ca-certificates is present when lb chroot_archives runs apt-get update against the NVIDIA CUDA HTTPS source. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-15 17:26:01 +03:00
Mikhail Chusavitin	533d703c97	Bootstrap ca-certificates so NVIDIA CUDA HTTPS source is trusted debootstrap creates a minimal chroot without ca-certificates, causing apt-get update to fail TLS verification for the NVIDIA CUDA apt source: "No system certificates available. Try installing ca-certificates." Add ca-certificates to --bootstrap-packages so it is present before lb chroot_archives configures the NVIDIA HTTPS source and runs apt-get update. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-15 17:24:20 +03:00
Mikhail Chusavitin	04eb4b5a6d	Revert "Pre-download DCGM/fabricmanager debs on host to bypass chroot apt" This reverts commit `4110dbf8a6`.	2026-04-15 17:19:53 +03:00
Mikhail Chusavitin	4110dbf8a6	Pre-download DCGM/fabricmanager debs on host to bypass chroot apt The NVIDIA CUDA HTTPS apt source (developer.download.nvidia.com) may be unreachable from inside the live-build container chroot, causing 'E: Unable to locate package datacenter-gpu-manager-4-cuda13'. Add build-dcgm.sh that downloads DCGM and nvidia-fabricmanager .deb packages on the build host (verifying SHA256 against Packages.gz) and caches them in BEE_CACHE_DIR. build.sh (step 25-dcgm, nvidia only) copies them into LB_DIR/config/packages.chroot/ before lb build, so live-build creates a local apt repo from them. The chroot installs the packages from the local repo without ever contacting the NVIDIA CUDA HTTPS source. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-15 17:10:23 +03:00