GPG fixes, crontab fixes, additional packages and permissions script for container startup.

CHANGELOG.md

@@ -4,6 +4,28 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) but do not follows semantic versioning as it is useless in this type of project.
 
+## [2.7.4-7] - 2026-08-10
+
+### Added
+
+* GPG configuration for news user to skip keyboxd.
+* Permission set script for /inn2.
+* busybox-suid and nano packages installing.
+
+### Changed
+
+* norotate added to news.daily for proper statistics generation.
+
+## [2.7.4-6] - 2026-08-09
+
+### Added
+
+* gpg configuration to skip keyboxd, so importing nocem gpg keys will work.
+
+### Changed
+
+* nocem keyring will be removed and re-imported every container launch.
+
 ## [2.7.4-5] - 2026-08-02
 
 ### Added
@@ -54,6 +76,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)
 
 Initial container release with inn 2.7.4 built with perl/python/sqlite support.
 
+[2.7.4-7]: https://code.pztrn.name/containers/inn2/compare/2.7.4-6...2.7.4-7
+[2.7.4-6]: https://code.pztrn.name/containers/inn2/compare/2.7.4-5...2.7.4-6
 [2.7.4-5]: https://code.pztrn.name/containers/inn2/compare/2.7.4-4...2.7.4-5
 [2.7.4-4]: https://code.pztrn.name/containers/inn2/compare/2.7.4-3...2.7.4-4
 [2.7.4-3]: https://code.pztrn.name/containers/inn2/compare/2.7.4-2...2.7.4-3

Dockerfile

@@ -4,6 +4,7 @@ ENV PERL_MM_USE_DEFAULT=1
 RUN apk add --no-cache \
     bison \
     build-base \
+    busybox-suid \
     bzip2 \
     curl \
     diffutils \
@@ -13,6 +14,7 @@ RUN apk add --no-cache \
     gnupg \
     libgd \
     krb5-dev \
+    nano \
     openssl \
     openssl-dev \
     perl \

etc/cont-init.d/01-permissions.sh

@@ -0,0 +1,3 @@
+#!/bin/sh
+
+chown -R news:news /inn2

etc/cont-init.d/15-gpg.sh

@@ -0,0 +1,22 @@
+#!/bin/sh
+
+if [ -f "/etc/gpg/gpg.conf" ]; then
+    exit 0
+fi
+
+rm -rf /etc/gpg || exit 0
+mkdir -p /etc/gpg
+echo "#use-keyboxd" > /etc/gpg/gpg.conf
+
+rm -rf /inn2/.gnupg
+mkdir -p /inn2/.gnupg
+echo "#use-keyboxd" > /inn2/.gnupg/common.conf
+chown -R news:news /inn2/.gnupg
+chmod 0700 /inn2/.gnupg
+chmod 0600 /inn2/.gnupg/common.conf
+
+rm -rf /root/.gnupg
+mkdir -p /root/.gnupg
+echo "#use-keyboxd" > /root/.gnupg/common.conf
+chmod 0700 /root/.gnupg
+chmod 0600 /root/.gnupg/common.conf

etc/cont-init.d/30-nocem-keyring.sh

@@ -1,16 +1,14 @@
 #!/bin/sh
 
-if [ -f "/inn2/etc/pgp/ncmring.gpg" ]; then
-    exit 0
-fi
-
 if [ ! -d "/inn2/etc/pgp" ]; then
     mkdir -p "/inn2/etc/pgp"
 fi
 
 echo "* Downloading NoCeM gpg keys and ctl file..."
 
-curl -o /inn2/etc/pgp/ncmring.gpg https://rosalind.home.xs4all.nl/nocemreg/ncmring.asc
+rm /inn2/etc/pgp/ncmring.gpg
+curl -o /inn2/etc/pgp/ncmring.gpg.source https://rosalind.home.xs4all.nl/nocemreg/ncmring.asc
+gpg --no-default-keyring --keyring /inn2/etc/pgp/ncmring.gpg --import /inn2/etc/pgp/ncmring.gpg.source
 chown -R news:news /inn2/etc/nocem.ctl /inn2/etc/pgp
 
 echo "* Enabling NoCeM processing..."

etc/crontabs/news

@@ -1,5 +1,5 @@
 # min	hour	day	month	weekday	command
-0       5       *   *       *       cd /inn2; /inn2/bin/news.daily expireover lowmark delayrm
+0       5       *   *       *       cd /inn2; /inn2/bin/news.daily expireover lowmark delayrm norotate
 15      *       *   *       *       cd /inn2; /inn2/bin/rnews -U
 0       4       *   *       *       cd /inn2; /inn2/bin/ctlinnd -t 120 -s reload incoming.conf 'flush cache'
 */10    *       *   *       *       cd /inn2; /inn2/bin/nntpsend