Re: reprepro signing.

[David Kalnischkies <kalnischkies+debian@gmail.com>]

2010/9/15 Jonathan Wiltshire <debian@jwiltshire.org.uk>:
> On Tue, Sep 14, 2010 at 08:42:08PM -0700, Russ Allbery wrote:
>> The conventional way to handle this is to build a Debian package that
>> installs the keyring and runs apt-key add, based off of packages like
>> debian-archive-keyring, and then have all clients install that package.
>
> Or drops the key into /etc/apt/trusted.gpg.d, which doesn't require
> additional handling.

But remember that you will need apt >= 0.7.25.1 to use it and
even apt >= 0.8.0 (or some 0.7.26~exp) if you use it with cds.
(i hate code copies…)


So if all your clients are >= squeeze everything will be fine,
otherwise (e.g. lenny) you will need to use apt-key magic…

For a bit more background, see #558784.


Best regards

David Kalnischkies