Imagebuilder and building from source

I have been using Imagebuilder for my build process but I want to try out some alternative Kernel configs.

kernel_configuration_optional outlines:

Also you won't be able to install kernel packages from the official repositories when you make changes here.

So I have setup an internal repository with create-major-releases outlines that I can update VERSION_REPO to point to a host that can serve the built content.

But when I use Imagebuilder I get the following signature errors:

Package list missing or not up-to-date, generating it.

Building package index...
Downloading https://my.domain.com/openwrt/bin/targets/bcm27xx/bcm2711/packages/Packages.gz
Updated list of available packages in /tank2/openwrt/imagebuilder/openwrt-imagebuilder-22.03.3-bcm27xx-bcm2711.Linux-x86_64/build_dir/target-aarch64_cortex-a72_musl/root-bcm27xx/../../../../../../../tank2/openwrt/imagebuilder/openwrt-imagebuilder-22.03.3-bcm27xx-bcm2711.Linux-x86_64/dl/openwrt_core
Downloading https://my.domain.com/openwrt/bin/targets/bcm27xx/bcm2711/packages/Packages.sig
Signature check failed.
Remove wrong Signature file.
Downloading https://my.domain.com/openwrt/bin/packages/aarch64_cortex-a72/base/Packages.gz
Updated list of available packages in /tank2/openwrt/imagebuilder/openwrt-imagebuilder-22.03.3-bcm27xx-bcm2711.Linux-x86_64/build_dir/target-aarch64_cortex-a72_musl/root-bcm27xx/../../../../../../../tank2/openwrt/imagebuilder/openwrt-imagebuilder-22.03.3-bcm27xx-bcm2711.Linux-x86_64/dl/openwrt_base
Downloading https://my.domain.com/openwrt/bin/packages/aarch64_cortex-a72/base/Packages.sig
Signature check failed.
Remove wrong Signature file.

Which results in make errors:

Installing packages...
Unknown package 'libc'.
Collected errors:
 * pkg_hash_check_unresolved: cannot find dependency libgcc1 for libc
 * pkg_hash_fetch_best_installation_candidate: Packages for libc found, but incompatible with the architectures configured
 * opkg_install_cmd: Cannot install package libc.
make[2]: *** [Makefile:167: package_install] Error 255
make[1]: *** [Makefile:124: _call_image] Error 2
make: *** [Makefile:242: image] Error 2

Inspecting the .sig files I have:

untrusted comment: signed by key bacadaf4f9bb6649
RWS6ytr0+btmSTnIREs45aD8veKLywRNKxV0M/e6UgCMUhcl1r1euHLdqt0G0T1IJpt1E5djn+FndW2MIuIHWjwsut0UaNQ1nAY=

Which is different to the official repo:

untrusted comment: verify with usign.pub
RWRNAX5vHtXWFgV/B3OdZGTu/hm4+CdIcYCIC5fMcbacEfaZEbKFVYHs8cLaQWYiylZMY2GOPF2vksG9r0XvSck9kT130hmtyg0=

So I assume that imagebuilder is using the offical public key and not the one that was used to build my content.

Is there any documentation which outlines how to do what I am wanting to do?

If you build from source, forget about imagebuilder and built the image exactly how you want it, with everything that should go in built by yourself.

3 Likes