Bug#579028: Allow --check-key to be reliably cleared once set

Ansgar Burchardt ansgar at debian.org
Mon Mar 5 18:15:51 UTC 2012


On 03/04/2012 01:51 PM, Neil Williams wrote:
> Mixing suites, mixing access sites, use inside and outside restrictive
> networks, these are all use-cases for having multiple config files for
> pbuilder and some will require SecureApt to be turned off.

Hopefully those days will be over soon: apt 0.8.16 (in experimental) has
an option to disable signature checking for specific sources.list
entries.  This way you can have an (unsigned) local repository, but
signatures for any repository accessed via network will still be
checked.  See #596498 for more details.

You still need an option to disable signature checking when working with
older versions of apt, but it should be enabled by default.

Regards,
Ansgar





More information about the Pbuilder-maint mailing list