[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: self signed repository



05.07.2012 12:46, Roger Leigh пишет:
You also need the Release file in the apt repository signing.
apt-get doesn't get check per-package signatures?  Individual
packages aren't signed by default; just the archive as a whole
via the Release/InRelease files.

Hmm.
Ok. I try generate it file and sign it

#!/bin/bash
base='/opt/work/myrepo/dists/squeeze/main'

cd $base
apt-ftparchive release . \
-o APT::FTPArchive::Release::Origin="stalker@locum.ru" \
-o APT::FTPArchive::Release::Codename="squeeze" > $base/Release

and sign it by run
gpg -abs -o Release.gpg Release

but
apt-get update
Ign file: squeeze Release.gpg
Ign file:/opt/work/myrepo/ squeeze/main Translation-en
Ign file:/opt/work/myrepo/ squeeze/main Translation-en_US
Ign file: squeeze Release
Ign file: squeeze/main amd64 Packages
Ign file: squeeze/main amd64 Packages
Reading package lists... Done

What I doing wrong?


Reply to: