mirror key problem
I have a partial Debian mirror "across the room" so I can quickly do a netinstall or grab a package. Wheezy's already there; this morning, I went to add Jessie and oldstable (I'm on a T1, and Ethernet is significantly faster :-).
mkdebmirror says, among other things:
> [GNUPG:] SIG_ID F3t9wlFdv+WlOKgQFBRTyLgnYsU 2015-09-05 1441446236
> [GNUPG:] GOODSIG 8B48AD6246925553 Debian Archive Automatic Signing Key (7.0/wheezy) <ftpmaster@debian.org>
> [GNUPG:] VALIDSIG A1BD8E9D78F7FE5C3E65D8AF8B48AD6246925553 2015-09-05 1441446236 0 4 0 1 8 00 A1BD8E9D78F7FE5C3E65D8AF8B48AD6246925553
> [GNUPG:] ERRSIG 7638D0442B90D010 1 8 00 1441446236 9
> [GNUPG:] NO_PUBKEY 7638D0442B90D010
> [GNUPG:] ERRSIG CBF8D6FD518E17E1 1 8 00 1441446733 9
> [GNUPG:] NO_PUBKEY CBF8D6FD518E17E1
> gpgv: Signature made Sat 05 Sep 2015 03:43:56 AM MDT using RSA key ID 46925553
> gpgv: Good signature from "Debian Archive Automatic Signing Key (7.0/wheezy) <ftpmaster@debian.org>"
> gpgv: Signature made Sat 05 Sep 2015 03:43:56 AM MDT using RSA key ID 2B90D010
> gpgv: Can't check signature: public key not found
> gpgv: Signature made Sat 05 Sep 2015 03:52:13 AM MDT using RSA key ID 518E17E1
> gpgv: Can't check signature: public key not found
> Release gpg signature does not verify.
Looks to me like I have a valid Wheezy key, but not Jessie or oldstable.
I've looked on the 'Net and in Martin Krafft's book. And I tried (from the mkdebmirror source):
> gpg --keyring /usr/share/keyrings/debian-archive-keyring.gpg --export \
> | gpg --no-default-keyring --keyring trustedkeys.gpg --import
it's output:
> gpg: key 11F63C51: "Jamie Cameron <jcameron@webmin.com>" not changed
> gpg: key 46925553: "Debian Archive Automatic Signing Key (7.0/wheezy) <ftpmaster@debian.org>" not changed
> gpg: key B98321F9: "Squeeze Stable Release Key <debian-release@lists.debian.org>" not changed
> gpg: key 473041FA: "Debian Archive Automatic Signing Key (6.0/squeeze) <ftpmaster@debian.org>" not changed
> gpg: key 65FFB764: "Wheezy Stable Release Key <debian-release@lists.debian.org>" not changed
> gpg: key 46925553: "Debian Archive Automatic Signing Key (7.0/wheezy) <ftpmaster@debian.org>" not changed
> gpg: key 518E17E1: public key "Jessie Stable Release Key <debian-release@lists.debian.org>" imported
> gpg: key 2B90D010: public key "Debian Archive Automatic Signing Key (8/jessie) <ftpmaster@debian.org>" imported
> gpg: key C857C906: public key "Debian Security Archive Automatic Signing Key (8/jessie) <ftpmaster@debian.org>" imported
> gpg: Total number processed: 9
> gpg: imported: 3 (RSA: 3)
> gpg: unchanged: 6
> gpg: no ultimately trusted keys found
Looks good, but mkdebmirror said:
> ./mkdebmirror: 76: ./mkdebmirror: --rsync-extra=: not found
>
> ------- creating/updating a mirror of arch(s) amd64 -------
> ------- repository at mirror.picosecond.org/debian -------
> ------- dist: wheezy,jessie,oldstable, sections: main,contrib -------
> Mirroring to /var/www/debian from http://mirror.picosecond.org/debian/
> Arches: amd64
> Dists: wheezy,jessie,oldstable
> Sections: main,contrib
> Pdiff mode: use
> Passive mode on.
> Will clean up after mirroring.
> Attempting to get lock ...
> Updating remote trace files (using rsync) ...
> receiving incremental file list
> ./
> project/trace/debian.gtisc.gatech.edu
> 294 100% 287.11kB/s 0:00:00 (xfer#1, to-check=3/7)
> project/trace/ftp-master.debian.org
> 104 100% 7.81kB/s 0:00:00 (xfer#2, to-check=2/7)
> project/trace/mirror.picosecond.org
> 290 100% 20.23kB/s 0:00:00 (xfer#3, to-check=1/7)
> project/trace/syncproxy.wna.debian.org
> 270 100% 18.83kB/s 0:00:00 (xfer#4, to-check=0/7)
>
> sent 234 bytes received 414 bytes 432.00 bytes/sec
> total size is 958 speedup is 1.48
> Getting meta files ...
> [ 0%] Getting: dists/wheezy/Release... #** GET http://mirror.picosecond.org/debian/dists/wheezy/Release ==> 200 OK (2s)
> ok
> [ 0%] Getting: dists/wheezy/Release.gpg... #** GET http://mirror.picosecond.org/debian/dists/wheezy/Release.gpg ==> 200 OK
> ok
> [ 0%] Getting: dists/jessie/Release... #** GET http://mirror.picosecond.org/debian/dists/jessie/Release ==> 200 OK (1s)
> ok
> [ 0%] Getting: dists/jessie/Release.gpg... #** GET http://mirror.picosecond.org/debian/dists/jessie/Release.gpg ==> 200 OK
> ok
> [ 0%] Getting: dists/oldstable/Release... #** GET http://mirror.picosecond.org/debian/dists/oldstable/Release ==> 200 OK (1s)
> ok
> [ 0%] Getting: dists/oldstable/Release.gpg... #** GET http://mirror.picosecond.org/debian/dists/oldstable/Release.gpg ==> 200 OK
> ok
> Duplicate dist wheezy.
> WARNING: releasing 1 pending lock...
>
> Sat Oct 10 15:56:23 MDT 2015
An improvement, I think. It looks to me like it should work, but mkdebmirror didn't download anything but metadata.
picosecond.org is a mirror just up the road from me. I've successfully used it as a source for Squeeze and Wheezy.
df tells me that there is 174G of available space on my disk.
My mirror is in /var/www/debian (don't ask why -- I don't remember).
Analysis, instructions, and suggestions would be appreciated.
--
Glenn English
Reply to: