up vote 3 down vote favorite
1
share [g+] share [fb]

I've got many DEBIAN repository for my projects (e.g. EPAPI, erlang-dbus etc.). It seems that now Synaptic wants those to be signed for the packages to appear by default.

For the DEBIAN kung-fu masters out there, please provide me with a step-by-step guide to achieving this, please. I've googled a lot but I am still a bit confused on the subject.

update: I use a Launchpad PPA now... saves me from all this trouble.

link|improve this question
95% accept rate
feedback

2 Answers

up vote 4 down vote accepted

Personally, I use the reprepro tool - it does it automatically for me. Yes, this is a tool to manage a whole repository, but it also automatically signs them and asks for my passphrase every time I add a new package.

link|improve this answer
I do not want to mirror repos, I want to sign my repos: how does reprepro help on this? – jldupont Oct 28 '09 at 15:16
2  
@jldupont: I use reprepro as a tool to manage my own repository, not to mirror one. It works perfectly for it, and my repository gets signed. – Teddy Oct 29 '09 at 0:52
feedback
up vote 2 down vote

The Debian wiki has some automated options: http://wiki.debian.org/HowToSetupADebianRepository

But for the simple case the "howto" appears to be: http://wiki.debian.org/SecureApt#Settingupasecureaptrepository

This bit from the install instructions might help: http://people.debian.org/~osamu/pub/getwiki/html/ch02.en.html#%5Ftop%5Flevel%5Frelease%5Ffile%5Fand%5Fauthenticity

If you're creating by hand it looks like none of the basic tools have an option to create release files so you might have to deal with apt-ftparchive or similar anyway.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.