I've got many DEBIAN repository for my projects (e.g. EPAPI, erlang-dbus etc.). It seems that now Synaptic wants those to be signed for the packages to appear by default.

For the DEBIAN kung-fu masters out there, please provide me with a step-by-step guide to achieving this, please. I've googled a lot but I am still a bit confused on the subject.

update: I use a Launchpad PPA now... saves me from all this trouble.


Personally, I use the reprepro tool - it does it automatically for me. Yes, this is a tool to manage a whole repository, but it also automatically signs them and asks for my passphrase every time I add a new package.

  • I do not want to mirror repos, I want to sign my repos: how does reprepro help on this? – jldupont Oct 28 '09 at 15:16
  • 2
    @jldupont: I use reprepro as a tool to manage my own repository, not to mirror one. It works perfectly for it, and my repository gets signed. – Teddy Oct 29 '09 at 0:52

The Debian wiki has some automated options: http://wiki.debian.org/HowToSetupADebianRepository

But for the simple case the "howto" appears to be: http://wiki.debian.org/SecureApt#Settingupasecureaptrepository

This bit from the install instructions might help: http://people.debian.org/~osamu/pub/getwiki/html/ch02.en.html#_top_level_release_file_and_authenticity

If you're creating by hand it looks like none of the basic tools have an option to create release files so you might have to deal with apt-ftparchive or similar anyway.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.