[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: unsigned repositories



On 2019-07-14 21:23:57 +0200 (+0200), Eduard Bloch wrote:
[...]
> I am looking at this from the POV of a regular/lazy user. The next best
> tool here is apt-ftparchive. Does it help you with signing? No. Does its
> manpage even mention InRelease signing in any way? Not really.
[...]

On that note, I just do:

apt-ftparchive release . | gpg2 --clear-sign --output InRelease

Works great. Would simply adding that to the EXAMPLES section of
apt-ftparchive(1) suffice? It's right in line with the existing
example of a compressed Packages.gz file.
-- 
Jeremy Stanley

Attachment: signature.asc
Description: PGP signature


Reply to: