[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#596498: marked as done (sources.list: add option to mark unsigned (local) repository as trusted)



Your message dated Fri, 15 Jul 2011 08:47:22 +0000
with message-id <E1Qhe3O-0003IC-Kz@franck.debian.org>
and subject line Bug#596498: fixed in apt 0.8.16~exp3
has caused the Debian Bug report #596498,
regarding sources.list: add option to mark unsigned (local) repository as trusted
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
596498: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=596498
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: apt
Version: 0.8.0
Severity: wishlist

It would be nice if a repository could be marked as trusted in the
sources.list.  This would make it easier to use local repositories with,
for example, pbuilder without having to generate a PGP key, signing the
repository and finally importing the key into apt, see also [1].

I suggest to add something like this:

  deb [trusted] file:/foo/bar unstable main

or

  deb [trusted=1] file:/foo/bar unstable main

APT should then handle the repository just like one signed with a
trusted key.

Regards,
Ansgar

[1] <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=579028#99>



--- End Message ---
--- Begin Message ---
Source: apt
Source-Version: 0.8.16~exp3

We believe that the bug you reported is fixed in the latest version of
apt, which is due to be installed in the Debian FTP archive:

apt-doc_0.8.16~exp3_all.deb
  to main/a/apt/apt-doc_0.8.16~exp3_all.deb
apt-transport-https_0.8.16~exp3_amd64.deb
  to main/a/apt/apt-transport-https_0.8.16~exp3_amd64.deb
apt-utils_0.8.16~exp3_amd64.deb
  to main/a/apt/apt-utils_0.8.16~exp3_amd64.deb
apt_0.8.16~exp3.dsc
  to main/a/apt/apt_0.8.16~exp3.dsc
apt_0.8.16~exp3.tar.gz
  to main/a/apt/apt_0.8.16~exp3.tar.gz
apt_0.8.16~exp3_amd64.deb
  to main/a/apt/apt_0.8.16~exp3_amd64.deb
libapt-inst1.3_0.8.16~exp3_amd64.deb
  to main/a/apt/libapt-inst1.3_0.8.16~exp3_amd64.deb
libapt-pkg-dev_0.8.16~exp3_amd64.deb
  to main/a/apt/libapt-pkg-dev_0.8.16~exp3_amd64.deb
libapt-pkg-doc_0.8.16~exp3_all.deb
  to main/a/apt/libapt-pkg-doc_0.8.16~exp3_all.deb
libapt-pkg4.11_0.8.16~exp3_amd64.deb
  to main/a/apt/libapt-pkg4.11_0.8.16~exp3_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 596498@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michael Vogt <mvo@debian.org> (supplier of updated apt package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Fri, 15 Jul 2011 09:56:17 +0200
Source: apt
Binary: apt libapt-pkg4.11 libapt-inst1.3 apt-doc libapt-pkg-dev libapt-pkg-doc apt-utils apt-transport-https
Architecture: source all amd64
Version: 0.8.16~exp3
Distribution: experimental
Urgency: low
Maintainer: APT Development Team <deity@lists.debian.org>
Changed-By: Michael Vogt <mvo@debian.org>
Description: 
 apt        - APT's commandline package manager
 apt-doc    - Documentation for APT
 apt-transport-https - https download transport for APT
 apt-utils  - APT utility programs
 libapt-inst1.3 - APT's deb package format runtime library
 libapt-pkg-dev - Development files for APT's libapt-pkg and libapt-inst
 libapt-pkg-doc - Documentation for APT development
 libapt-pkg4.11 - APT's package managment runtime library
Closes: 596498 632271 632520
Changes: 
 apt (0.8.16~exp3) experimental; urgency=low
 .
   [ David Kalnischkies ]
   * apt-pkg/pkgcache.h:
     - readd All{Foreign,Allowed} as suggested by Julian to
       remain strictly API compatible
   * apt-pkg/acquire*.{cc,h}:
     - try even harder to support really big files in the fetcher by
       converting (hopefully) everything to 'long long' (Closes: #632271)
   * ftparchive/writer.cc:
     - generate all checksums in one run over the file for Release
   * cmdline/apt-get.cc:
     - add an --assume-no option for testing to say 'no' to everything
   * apt-pkg/deb/debmetaindex.cc:
     - add trusted=yes option to mark unsigned (local) repository as trusted
       based on a patch from Ansgar Burchardt, thanks a lot! (Closes: #596498)
 .
   [ Michael Vogt ]
   * merge fixes from the debian/unstable upload
   * merge lp:~mvo/apt/sha512-template to get fixes for the
     sha1/md5 verifiation (closes: #632520)
Checksums-Sha1: 
 48f6fa39fe1ae599777ff06f8e1bd889edfc2721 1402 apt_0.8.16~exp3.dsc
 f55cfeebfdc12478d20ff2f6da8e1fbf051b3228 3466665 apt_0.8.16~exp3.tar.gz
 0076bef7059f98cbffa416fb83047cc1e5904aff 246198 apt-doc_0.8.16~exp3_all.deb
 571fc6734f2e406969f9129debb50df6ad1d8a24 777704 libapt-pkg-doc_0.8.16~exp3_all.deb
 d9832d73602d6fe7570fb81b8c7129507dfb8446 994384 libapt-pkg4.11_0.8.16~exp3_amd64.deb
 3c638b72abf4543a8975463ff9e64e7c72ccfc12 179982 libapt-inst1.3_0.8.16~exp3_amd64.deb
 91eef1725c35377f83bd8fab1bd9d269a2cc59b4 1130402 apt_0.8.16~exp3_amd64.deb
 63c033087e8c28120ddbcfab34e6bbbdb3277586 166978 libapt-pkg-dev_0.8.16~exp3_amd64.deb
 274c465a1e5c378be49fe8b082bf0016b390c842 263480 apt-utils_0.8.16~exp3_amd64.deb
 77c305a3eb626adf6a570c9edb62de68dac88eea 91994 apt-transport-https_0.8.16~exp3_amd64.deb
Checksums-Sha256: 
 8be5a926f4c163b59e8a9fac509bc0addd5cc119354be86165cbfbbf2d1f75c5 1402 apt_0.8.16~exp3.dsc
 100f449a0843ee557f7f1a16db9df7c6b4c5636ce86ce303547e9d6aaf082ef1 3466665 apt_0.8.16~exp3.tar.gz
 e36b78ec95d91868b0a876eea6cd06c3acdf3be799b345f1cd9f8591a1e03922 246198 apt-doc_0.8.16~exp3_all.deb
 55e08fff724566a327129189e9b83af352b038b0c09198827168385be1060c70 777704 libapt-pkg-doc_0.8.16~exp3_all.deb
 3bb0dc4c190600b4d9106001447757b5e3fdf4328185792d807a65e0ef180acb 994384 libapt-pkg4.11_0.8.16~exp3_amd64.deb
 cea4eb8f41ed29e19d27d69acbf5256030baf6a9b063fec8d86825cc2b87af48 179982 libapt-inst1.3_0.8.16~exp3_amd64.deb
 e7fc241b9dcf67901f26f40191c8bfd2be20207317879f7a447ff0462d6e99fb 1130402 apt_0.8.16~exp3_amd64.deb
 d03a81bd11f54072466eb4fc2385a5ba557e36f7e7838b32e113950fae0e0275 166978 libapt-pkg-dev_0.8.16~exp3_amd64.deb
 ff0c2bade637fac62775ef9053ac778ae4bd2f38e036b12c67619ba29da0d8f7 263480 apt-utils_0.8.16~exp3_amd64.deb
 b83932e9a641acea34233b25598e39628e6da265de88bc32c037af3b286e165d 91994 apt-transport-https_0.8.16~exp3_amd64.deb
Files: 
 d9796b41e1f3091fa65e069f4a2fea9e 1402 admin important apt_0.8.16~exp3.dsc
 9a350280597a986f74f347b5b94f5fbf 3466665 admin important apt_0.8.16~exp3.tar.gz
 443866ec0e0b65f57afc925c39f64462 246198 doc optional apt-doc_0.8.16~exp3_all.deb
 3cbc9865aef981568f382843a19d48c4 777704 doc optional libapt-pkg-doc_0.8.16~exp3_all.deb
 02ca6b1bb235db0b59768f9d0a04f980 994384 admin important libapt-pkg4.11_0.8.16~exp3_amd64.deb
 e2d84ed7ddb2f7413eda12513ae52d84 179982 admin important libapt-inst1.3_0.8.16~exp3_amd64.deb
 beb8730b3985f7bdcd36aa48bc51389d 1130402 admin important apt_0.8.16~exp3_amd64.deb
 df87b32747bd299aa8226af2aa4ebb05 166978 libdevel optional libapt-pkg-dev_0.8.16~exp3_amd64.deb
 e3ecc2aabc8896042d28edd73a5a2088 263480 admin important apt-utils_0.8.16~exp3_amd64.deb
 d94f19ce5c36552b11654189d2fd29b0 91994 admin optional apt-transport-https_0.8.16~exp3_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk4f9IQACgkQliSD4VZixzTGkACeKi7hCW2KNIomcSBzSgPnkzoR
uhcAoI7cuQ9omWp+ifmz/uw5URUSfWdD
=iF2G
-----END PGP SIGNATURE-----



--- End Message ---

Reply to: