How to do a automatic signature check of the debian packages:<\/p>\n
Let’s assume, that you have GPG installed. Also it should be noted that this procedure was tested only on unstable, and I have no idea how will it go on a machine running stable. I could try that with marla, but later.<\/p>\n
We add a sources.list entry for experimental:<\/p>\n
deb ftp:\/\/debian.ludost.net\/debian ..\/project\/experimental main
\n(or
\ndeb ftp:\/\/ftp.de.debian.org\/debian ..\/project\/experimental main
\nI’m not sure if it will work with ftp.bg.debian.org at least it didn’t work a year ago.)<\/p>\n
We tell apt that we want only what we explicitly tell him from experimental, in \/etc\/apt\/preferences:
\nPackage: *
\nPin: release a=experimental
\nPin-Priority: 50<\/p>\n
Then install apt from experimental:
\napt-get install apt\/experimental<\/p>\n
Then install the debian-key-ring package (all the gpg keys of debian people):
\napt-get install debian-keyring<\/p>\n
Add the role keys in apt’s keyring:
\napt-key add \/usr\/share\/keyrings\/debian-role-keys.gpg<\/p>\n
After that do apt-get update, and it should go without problems. If you’re not using non-us, and only the standard archive, you might not need debian-keyring, the default key in apt-get is the one for that archive.<\/p>\n
The verification that those keys are real is left for an exercise for the reader…<\/p>\n","protected":false},"excerpt":{"rendered":"
How to do a automatic signature check of the debian packages: Let’s assume, that you have GPG installed. Also it should be noted that this procedure was tested only on unstable, and I have no idea how will it go on a machine running stable. I could try that with marla, but later. We add […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-347","post","type-post","status-publish","format-standard","hentry","category-general"],"_links":{"self":[{"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=\/wp\/v2\/posts\/347","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=347"}],"version-history":[{"count":0,"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=\/wp\/v2\/posts\/347\/revisions"}],"wp:attachment":[{"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=347"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=347"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=347"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}