Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I've got many DEBIAN repository for my projects (e.g. EPAPI, erlang-dbus etc.). It seems that now Synaptic wants those to be signed for the packages to appear by default.

For the DEBIAN kung-fu masters out there, please provide me with a step-by-step guide to achieving this, please. I've googled a lot but I am still a bit confused on the subject.

update: I use a Launchpad PPA now... saves me from all this trouble.

share|improve this question

2 Answers 2

up vote 4 down vote accepted

Personally, I use the reprepro tool - it does it automatically for me. Yes, this is a tool to manage a whole repository, but it also automatically signs them and asks for my passphrase every time I add a new package.

share|improve this answer
    
I do not want to mirror repos, I want to sign my repos: how does reprepro help on this? –  jldupont Oct 28 '09 at 15:16
2  
@jldupont: I use reprepro as a tool to manage my own repository, not to mirror one. It works perfectly for it, and my repository gets signed. –  Teddy Oct 29 '09 at 0:52

The Debian wiki has some automated options: http://wiki.debian.org/HowToSetupADebianRepository

But for the simple case the "howto" appears to be: http://wiki.debian.org/SecureApt#Settingupasecureaptrepository

This bit from the install instructions might help: http://people.debian.org/~osamu/pub/getwiki/html/ch02.en.html#%5Ftop%5Flevel%5Frelease%5Ffile%5Fand%5Fauthenticity

If you're creating by hand it looks like none of the basic tools have an option to create release files so you might have to deal with apt-ftparchive or similar anyway.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.