#!/bin/sh

for file in /root/config/*; do [ -r $file ] && . $file; done

echo "Info: mirror is ${LB_MIRROR_CHROOT} or ${LB_PARENT_MIRROR_CHROOT}"

# end up with deb.debian.org in final iso since stretch
case "${LB_DISTRIBUTION}" in
    wheezy|jessie) exit ;;
esac

sed -i -e "s#${LB_MIRROR_CHROOT}#http://deb.debian.org/debian#"g /etc/apt/sources.list

# update apt index debpool
# live is already signed-by
cp -f /etc/apt/sources.list /etc/apt/sources.list.bak
sed -i '/live/!d' /etc/apt/sources.list
apt-get update -y
cp -f /etc/apt/sources.list.bak /etc/apt/sources.list
rm -f /etc/apt/sources.list.bak

case "${LB_DISTRIBUTION}" in
    stretch|buster|bullseye) exit ;;
esac

# Provide LB_DISTRIBUTION-updates Repo
# Fix as lb build with updates

cat <<EOF >>/etc/apt/sources.list
# Debian ${LB_DISTRIBUTION}-proposed-updates
deb [signed-by=/usr/share/keyrings/debian-archive-keyring.gpg] http://deb.debian.org/debian ${LB_DISTRIBUTION}-updates main contrib non-free non-free-firmware
deb-src [signed-by=/usr/share/keyrings/debian-archive-keyring.gpg] http://deb.debian.org/debian ${LB_DISTRIBUTION}-updates main contrib non-free non-free-firmware
EOF

# TODO dep822

# key.asc is kanotix spec
# debian keys needed by live-build ? no
rm -f /etc/apt/trusted.gpg.d/*.key.asc
rm -f /etc/apt/trusted.gpg.d/*