Old keyring makes deboostrap Debian stable not possible in Bionic

[Lucas Kanashiro]

debian-archive-keyring/2017.7ubuntu1 does not allow one to debootstrap Debian stable in Bionic:

sudo debootstrap --variant=minbase stable /tmp/bla http://httpredir.debian.org/debian
I: Retrieving InRelease
I: Checking Release signature
E: Release signed by unknown key (key id 605C66F00D6C9793)

I found this out through the docker.io regression I got here:

https://autopkgtest.ubuntu.com/results/autopkgtest-bionic/bionic/amd64/d/docker.io/20221021_090029_9eab9@/log.gz

In a Bionic VM, after installing debian-archive-keyring from Focal (2019.1ubuntu2), I was able to deboostrap Debian stable again.

[Andreas Hasenack (ahasenack)]

https://bugs.launchpad.net/ubuntu/+source/debian-archive-keyring/+bug/1752656 contains a similar request, with an interesting consideration for the xenial and older cases.

[Andreas Hasenack (ahasenack)]

oldstable also doesn't work:

# debootstrap --variant=minbase oldstable /oldstable http://httpredir.debian.org/debian
I: Retrieving InRelease
I: Checking Release signature
E: Release signed by unknown key (key id DCC9EFBF77E11517)

But oldoldstable does:

# debootstrap --variant=minbase oldoldstable /oldoldstable http://httpredir.debian.org/debian
I: Retrieving InRelease
I: Retrieving Release
I: Retrieving Release.gpg
I: Checking Release signature
I: Valid Release signature (key id 067E3C456BAE240ACEE88F6FEF0F382A1A7B6500)
I: Retrieving Packages
I: Validating Packages