Re: Compatibility of security mirror
Lee Winter <lee.j.i.winter@gmail.com> writes:
> On Wed, Sep 16, 2009 at 3:54 PM, Russ Allbery <rra@debian.org> wrote:
>> There's a one-to-one correspondance between an entry in sources.list
>> and the metadata that apt expects to find in the repository, which in
>> turn is signed. You would have to combine the metadata in order to
>> combine the sources.list lines, which would then require resigning the
>> metadata.
> OK, this is where it starts to get interesting. I didn't see much more
> than passing references to this in the apt doc. Did I miss it or are
> there other docs that describe the repository structure? Should I be
> looking at the doc about creating packages or for creating releases?
I'm afraid I have no idea where it might be documented. The above
statement is from experience dealing with apt and various local
repositories rather than taken from documentation. :/
Back when I made a foray into writing tools to generate a local repository
and then patching debarchiver, I found it rather difficult to find
coherent documentation of all of the features of the Debian archive layout
and mostly resorted to looking at the Debian archives and reading source
code.
--
Russ Allbery (rra@debian.org) <http://www.eyrie.org/~eagle/>
Reply to: