On Wed, Oct 19, 2005 at 12:53:38AM -0400, Joey Hess wrote: > Package: apt > Version: 0.6.41 > Severity: grave > Tags: d-i
Thanks for your bugreport. [..] > As I understand it, there is basically no way we can build official > Debian CDs that are signed with our archive signing key. There is also > currently no way to turn off the signature checking that doesn't disable > it for all apt sources, which wouldn't be an acceptible tradeoff. > > The simplest fix would be to special case apt to not require CD sources > to be authenticated. This seems ok to me, since the user has already > *booted* the CD, at least when using it as install media. I have a branch with a "APT::Authentication::Trust-CDROM" option. Turing it on would result in trusting any cdrom source. Is that sufficient for your needs? Cheeers, Michael -- Linux is not The Answer. Yes is the answer. Linux is The Question. - Neo -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

