05.07.2012 16:40, Roger Leigh пишет:
On Thu, Jul 05, 2012 at 04:24:12PM +0400, Anton Gorlov wrote:05.07.2012 12:46, Roger Leigh пишет:You also need the Release file in the apt repository signing. apt-get doesn't get check per-package signatures? Individual packages aren't signed by default; just the archive as a whole via the Release/InRelease files.but apt-get update Ign file: squeeze Release.gpg Ign file:/opt/work/myrepo/ squeeze/main Translation-en Ign file:/opt/work/myrepo/ squeeze/main Translation-en_US Ign file: squeeze Release Ign file: squeeze/main amd64 Packages Ign file: squeeze/main amd64 Packages Reading package lists... Done What I doing wrong?Not sure. If you want to have a look at a working example, take a look at how sbuild does this in the sbuild sources in lib/Sbuild/ResolverBase.pm We run gpg by hand after creating the archive.
Hm. I try generate Release in top of tree /opt/work/myrepo/dists/squeeze/ stalker@deb60-builder:/opt/work/myrepo/dists/squeeze$ cat Release Codename: squeeze Date: Thu, 05 Jul 2012 12:55:11 UTC Origin: stalker@locum.ru MD5Sum:e3e2fab002699f5f8e86b9eb557314f9 754 main/binary-amd64/Packages.gz
SHA1:f8c75eb4f23a78624c1858c6335fbcfc73e12aed 754 main/binary-amd64/Packages.gz
SHA256:b9c6fafd16389d4e3bccf11a41609ec0285bd6c5393b96aaa8786278d03fcf51 754 main/binary-amd64/Packages.gz
if not sign apt-get update Ign file: squeeze Release.gpg Ign file:/opt/work/myrepo/ squeeze/main Translation-en Ign file:/opt/work/myrepo/ squeeze/main Translation-en_US Get:1 file: squeeze Release [384 B] Ign file: squeeze/main amd64 Packages Ign file: squeeze/main amd64 Packages Reading package lists... Done after sign apt-get update Ign file:/opt/work/myrepo/ squeeze/main Translation-en Ign file:/opt/work/myrepo/ squeeze/main Translation-en_US Get:1 file: squeeze Release.gpg [490 B] Get:2 file: squeeze Release [384 B]W: Failed to fetch file:/opt/work/myrepo/dists/squeeze/Release Unable to find expected entry main/binary-amd64/Packages in Meta-index file (malformed Release file?)
E: Some index files failed to download, they have been ignored, or old ones used instead.