how to avoid unauthenticated warning

[Max Bowsher]

travis+ml-ubuntu-dev at subspacefield.org wrote:
> Hello,
> 
> I'm in the process of setting up my own Ubuntu repository for some local
> packages.
> 
> I used the following HOWTOs:
> https://help.ubuntu.com/community/AptMoveHowto
> https://wiki.ubuntu.com/PackagingGuide/HandsOn
> 
> I use the following script:
> 
> for b in $(find dists -type d \( -name 'binary*' -o -name 'all' \))
> do
>         dpkg-scanpackages $b /dev/null | gzip -9c > $b/Packages.gz
> done
> for s in $(find dists -type d -name source)
> do
>         dpkg-scansources $s | gzip -9c > $s/Sources.gz
> done
> for r in intrepid jaunty
> do
>     rm dists/$r/Release
>     apt-ftparchive -c ../$r.conf release dists/$r > dists/$r/Release
>     gpg -ba -u 4F988F40 -o dists/$r/Release.gpg dists/$r/Release
> done
> 
> However, I still get this error:
> 
> WARNING: The following packages cannot be authenticated!
>   polipo-tor
> Install these packages without verification [y/N]?
> 
> How do I avoid that error?

Your script doesn't look like it will generate a proper repository
layout to me.

> Is there an easier way of doing all this?

My own script for this purpose is currently at
https://code.launchpad.net/~maxb/+junk/apt-generate . It certainly works
for me.

Max.





-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-devel-discuss/attachments/20090603/9a0d6202/attachment.sig>