# debootstrap buster /srv/buster I: Retrieving InRelease I: Checking Release signature E: Release signed by unknown key (key id DCC9EFBF77E11517)
Where do I get this release key, and How do I add this release key to the debootstrap trust?
Server Fault is a question and answer site for system and network administrators. It only takes a minute to sign up.Sign up to join this community
Where to get the release key? The debian archive keyring server:
How to make debootstrap trust this release key:
Make a new keyring, and inform deboostrap to use it:
wget https://ftp-master.debian.org/keys/release-10.asc -qO- | gpg --import --no-default-keyring --keyring ./debian-release-10.gpg debootstrap --keyring=./debian-release-10.gpg buster /srv/buster
I found that using a gpg2 keyring would not work due to debootstrap using
gpgv under the hood, which uses a gpg1 database version. I recreated by gpg database like so from the , note that
gpg is gpg 1.x.x not gpg 2.x.x or newer at time of writing:
deboostrapwere updated to use
gpg --verifyinstead of
gpgv, I would imagine
gpg2could be used as a drop-in replacement - But I cannot be certain.