使用debmirror为Debian建立本地源的方法，以及遇到的GPG key验证错误问题的解决方法

来源：互联网发布：有关网络信息安全的书编辑：程序博客网时间：2024/06/05 16:24

(1) 为了建立Debian的本地源，可以采用以下方法

lipeng@localhost:~$ debmirror -a i386,amd64 --source --progress -e http -h debian.ustc.edu.cn --ignore-release-gpg -d wheezy ~/mirror/wheezy/
Mirroring to /home/lipeng/mirror/wheezy/ from http://debian.ustc.edu.cn/debian/
Arches: i386,amd64
Dists: wheezy
Sections: main,contrib,non-free,main/debian-installer
Including source.
Pdiff mode: use
Will clean up after mirroring.
Attempting to get lock ...
Updating remote trace files (using rsync) ...
receiving incremental file list
./
project/trace/
project/trace/ftp-master.debian.org
104 100% 101.56kB/s 0:00:00 (xfer#1, to-check=1/5)
project/trace/syncproxy.wna.debian.org
270 100% 263.67kB/s 0:00:00 (xfer#2, to-check=0/5)

sent 181 bytes received 266 bytes 298.00 bytes/sec
total size is 374 speedup is 0.84
Getting meta files ...
[ 0%] Getting: dists/wheezy/Release... #** GET http://debian.ustc.edu.cn/debian/dists/wheezy/Release ==> 200 OK (1s)
ok
[ 0%] Getting: dists/wheezy/Release.gpg... #** GET http://debian.ustc.edu.cn/debian/dists/wheezy/Release.gpg ==> 200 OK
ok
gpgv: Signature made Sat 08 Feb 2014 06:36:35 PM CST using RSA key ID 46925553
[GNUPG:] ERRSIG 8B48AD6246925553 1 8 00 1391855795 9
[GNUPG:] NO_PUBKEY 8B48AD6246925553
gpgv: Can't check signature: public key not found
gpgv: Signature made Sat 08 Feb 2014 06:50:57 PM CST using RSA key ID 65FFB764
[GNUPG:] ERRSIG 6FB2A1C265FFB764 1 8 00 1391856657 9
[GNUPG:] NO_PUBKEY 6FB2A1C265FFB764
gpgv: Can't check signature: public key not found
Release gpg signature does not verify.
Parsing Packages and Sources files ...
Get Translation files ...
Files to download: 0 B
Downloaded 165 kiB in 15s at 11.06 kiB/s.
Everything OK. Moving meta files ...
Cleanup mirror.
All done.

(2) 解决上面出现的gpgv错误，需要import一个public key
gpg --keyring /usr/share/keyrings/debian-archive-keyring.gpg --export | gpg --no-default-keyring --keyring ～/.gnupg/trustedkeys.gpg --import

这个方法参考了以下链接，稍有调整
Debmirror problem: gpgv: Can’t check signature: public key not found

http://lgallardo.com/en/2013/11/12/problema-de-debmirror-gpgv-cant-check-signature-public-key-not-found/

0 0