Re: [OT] Need old Packages.gz and Release Files
On Fri, Apr 25, 2008 at 04:07:51PM +0800, Stefano Zacchiroli wrote:
> You are asking generically Packages without specifying a mirror. Are
> they granted to be identically replicated among all mirrors? Of course
> they *probably* are due to how mirroring works, but is it *granted* that
> there are no differences among mirrors?
>
> Would such difference inhibit proper installation due to the apt-secure
> stuff?
The Release file contains strong checksums of the Packages files, and
it is signed with the Debian Archive key. Both of these are checked
when apt does updates and installs. So as long as there are no keys
from rogue repositories in apt's keyring, it should be fine.
--
Eric Cooper e c c @ c m u . e d u
Reply to: