fix(image): non-interactive conffile handling for secubox-full install
Some checks are pending
License Headers / check (push) Waiting to run

secubox-mesh's mesh.toml is an auto-detected conffile that triggers an
interactive dpkg prompt (*** mesh.toml [Y/I/N/O/D/Z]) during configure,
failing the headless chroot install in build-live-usb.sh (amd64 USB build).
Install secubox-full with DEBIAN_FRONTEND=noninteractive + --force-confold/
--force-confdef + a follow-up dpkg --configure -a, in build-live-usb.sh and
build-image.sh.
This commit is contained in:
CyberMind-FR 2026-06-28 09:15:35 +02:00
parent 4398ebe654
commit f3fc9a3a92
2 changed files with 14 additions and 2 deletions

View File

@ -658,7 +658,13 @@ fi
if [[ $SECUBOX_REPO_OK -eq 1 ]]; then
chroot "${ROOTFS}" apt-get update -q
chroot "${ROOTFS}" apt-get install -y -q secubox-full || warn "secubox-full non disponible"
# Non-interactive conffile handling: secubox-mesh's mesh.toml triggers a dpkg
# conffile prompt that fails the headless chroot install (#USB-build). Keep
# the packaged conffile, never prompt.
chroot "${ROOTFS}" bash -c 'DEBIAN_FRONTEND=noninteractive apt-get install -y -q \
-o Dpkg::Options::=--force-confold -o Dpkg::Options::=--force-confdef secubox-full' \
|| warn "secubox-full non disponible"
chroot "${ROOTFS}" dpkg --configure -a --force-confold 2>/dev/null || true
else
warn "APT repo SecuBox non disponible — skip (Phase 4)"
fi

View File

@ -1438,7 +1438,13 @@ else
deb [trusted=yes] ${APT_SECUBOX} ${SUITE} main
EOF
chroot "${ROOTFS}" apt-get update -q
chroot "${ROOTFS}" apt-get install -y -q secubox-full 2>/dev/null || true
# Non-interactive conffile handling: secubox-mesh ships mesh.toml as a
# conffile and triggers a dpkg prompt (*** mesh.toml [Y/I/N/O/D/Z]) during
# configure, which fails the whole install in the headless chroot. Keep the
# packaged conffile and never prompt.
chroot "${ROOTFS}" bash -c 'DEBIAN_FRONTEND=noninteractive apt-get install -y -q \
-o Dpkg::Options::=--force-confold -o Dpkg::Options::=--force-confdef secubox-full' 2>/dev/null || true
chroot "${ROOTFS}" dpkg --configure -a --force-confold 2>/dev/null || true
# Verify secubox-core installed (dependency of secubox-full)
if ! chroot "${ROOTFS}" dpkg -l secubox-core 2>/dev/null | grep -q "^ii"; then