[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: How to create"official" off-line repository



Hi,

On Thu, Jul 23, 2009 at 10:18:01AM +0300, Hai Zaar wrote:
> Good day dear list!
> 
> I work for organisation that has its development network off-line and
> I want to setup a Debian with current Lenny release.
> Creating on-line mirror and bringing it in on USB disk is not an
> option due to security measures.

I see. So they do not want files from Internet.
 
> What do you suggest?
> I can download binary DVDs, merge them into single file tree, rebuild
> Packages/Release files with reprepro or similar, but... the repository
> will not be signed and I guess net-install CD will complain. 

So the security policy prohibits USB disk but allow DVD/CD use.  Your
intent is to work around security policy's intent by using this loop
hole.  I suggest you to talk to security people before installing files
this way as common sense ....

By the way, technically what is the problem of "complain"?  You can
install it, I think.  As long as you checked DVD contents in advance,
you do not need to check it any more.

> Even if I sign it myself, I will need to remaster installer CD to
> include the correct key.
> 
> So, Is there any way to reconstruct officially signed repository from
> DVDs, or am I just on a really wrong way on achieving my goal?

There is always a way but it is not so simple.  Your goal is to install 
system, isn't it?

(But please check network policy before doing so.  I do ot want you to
get into trouble with "security policy").

Osamu


Reply to: