* Fredrik Unger <f...@tree.se> [121115 18:51]:
> Were there any progress with this issue ?
>
> I am using gnupg-pkcs11-scd and a PKI Card.
> http://www.opensc-project.org/opensc/wiki/MyEID
>
> This means I can only sign things on my local computer, not
> on the server that serves the repository.
>
> If there has not been any changes to reprepro, what would
> be the steps to take to have a working setup ?

I suggest having your database locally and copying/moving files
to your server (unless you trust that server more).
For small repositories (r)syncing outdir can be a sensible solution.
Otherwise reprepro does not really care if files in pool/ are no longer
where it expects them (unless you run reprepro check of course),
so moving them to the server can work, too (though deleting them there
is of course not that easy then).

When storing also the database on the server, you can just do the
signing manually (as you need your local computer there is some manually
involved anyway). Just grab the Release file, sign it to generate
InRelease and/or Release.gpg and put them on the server.
(If you care about them out of date, you can do disable exporting (i.e.
generating new dists/ Content) and file deletion and just do some
explicit triggered export followed by a Release signing and then
unreferenced file removal).

        Bernhard R. Link


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to