Bug#872543: apt does not honor trusted=yes from sources.list
On 4/6/19 3:58 PM, Julian Andres Klode wrote:
> It works just fine, both check-valid-until and check-date work fine:
>
> deb [trusted=yes check-valid-until=no] http://snapshot.debian.org/archive/debian/20130507T220417Z/ unstable main
> deb [trusted=yes check-date=no] http://snapshot.debian.org/archive/debian/20130507T220417Z/ unstable main
>
> maybe you separated the options by comma instead of space?
Indeed, I did. Using [trusted=yes check-date=no] does the trick!
Although it does not work with the sources.list.udeb:
get-packages udeb
make[9]: 'sources.list.udeb' is up to date.
Ign:1 copy:/<<PKGBUILDDIR>>/build localudebs/ InRelease
Ign:2 copy:/<<PKGBUILDDIR>>/build localudebs/ Release
Ign:3 copy:/<<PKGBUILDDIR>>/build localudebs/ Packages
Ign:3 copy:/<<PKGBUILDDIR>>/build localudebs/ Packages
Ign:3 copy:/<<PKGBUILDDIR>>/build localudebs/ Packages
Get:3 copy:/<<PKGBUILDDIR>>/build localudebs/ Packages [20 B]
Hit:4 http://ftp.ports.debian.org/debian-ports unstable InRelease
Hit:5 http://ftp.ports.debian.org/debian-ports unreleased InRelease
Get:6 http://snapshot.debian.org/archive/debian/20130507T220417Z unstable InRelease [204 kB]
Hit:7 http://incoming.ports.debian.org/buildd unstable InRelease
Err:6 http://snapshot.debian.org/archive/debian/20130507T220417Z unstable InRelease
The following signatures couldn't be verified because the public key is not available: NO_PUBKEY AED4B06F473041FA
Reading package lists...
W: GPG error: http://snapshot.debian.org/archive/debian/20130507T220417Z unstable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY AED4B06F473041FA
E: The repository 'http://snapshot.debian.org/archive/debian/20130507T220417Z unstable InRelease' is not signed.
Failed to update the Packages file. This usually means either of:
That's because the generated sources.list.udeb strips the addtional options:
Using generated sources.list.udeb:
deb [trusted=yes] copy:/<<PKGBUILDDIR>>/build/ localudebs/
deb http://ftp.ports.debian.org/debian-ports unstable main/debian-installer
deb http://incoming.ports.debian.org/buildd unstable main/debian-installer
deb http://snapshot.debian.org/archive/debian/20130507T220417Z unstable main/debian-installer
deb http://ftp.ports.debian.org/debian-ports unreleased main/debian-installer
make[8]: 'sources.list.udeb' is up to date.
But I guess that's a problem with debian-installer.
> Whether trusted=yes should imply check-date=no, I'm uncertain. Probably useful,
> as it restricts number of possible combinations.
I would say so, yes.
Thanks,
Adrian
--
.''`. John Paul Adrian Glaubitz
: :' : Debian Developer - glaubitz@debian.org
`. `' Freie Universitaet Berlin - glaubitz@physik.fu-berlin.de
`- GPG: 62FF 8A75 84E0 2956 9546 0006 7426 3B37 F5B5 F913
Reply to: