Using gpg-authenticated debian-archives: Difference between revisions
Jump to navigation
Jump to search
(nicer formatting) |
(add keyserver - by default none is set in the config, and without it the command fails) |
||
| Line 5: | Line 5: | ||
<pre> | <pre> | ||
apt-get install gnupg debian-keyring | apt-get install gnupg debian-keyring | ||
gpg --recv-keys 4F368D5D | gpg --keyserver hkp://subkeys.pgp.net --recv-keys 4F368D5D | ||
</pre> | </pre> | ||
(adjust the key ID as needed) | (adjust the key ID and keyserver as needed) | ||
Adding | Adding | ||
Revision as of 18:31, 14 October 2007
read http://wiki.debian.org/SecureApt
do this inside the nfsroot if needed:
apt-get install gnupg debian-keyring gpg --keyserver hkp://subkeys.pgp.net --recv-keys 4F368D5D
(adjust the key ID and keyserver as needed)
Adding
FAI_DEBOOTSTRAP_OPTS="--include=gnupg"
to make-fai-nfsroot.conf then you don't need to install gnupkg manually.
For people running an archive repository
(taken from http://wiki.debian.org/apt06 - go to that page and read it!)
If you run a archive make sure that you have a toplevel Release file (create it with apt-ftparchive release) and sign it a key (with gpg -abs -o Release.gpg Release). Then tell your users what key they need to import.
howto create a local mirror incl. security.debian.org
http://www.psycast.de/blog/?postid=30 (german, will do a translation soon)