Package: apt-offline
Version: 1.3.1
Severity: important
Tags: patch

I want to make it really easy to build up Debian installs completely offline.
 I found that after I did a barebones Debian install and installed
apt-offline, apt-offline was failing on:

  apt-offline install /media/usbthumb/

The errors where one of these per signed file:

gpgv: Signature made Sat 26 Apr 2014 09:27:41 AM UTC using RSA key ID 46925553
gpgv: Can't check signature: public key not found

That is because /etc/apt/trusted.gpg is 0 bytes.  I fixed it quick-n-dirty by
doing:

cp /usr/share/keyrings/debian-archive-keyring.gpg /etc/apt/trusted.gpg

Perhaps a better fix would be to include
/usr/share/keyrings/debian-archive-keyring.gpg as one of the keyrings that
apt-offline supports for verifying the files (see attached patch).

diff --git a/apt_offline_core/AptOfflineCoreLib.py b/apt_offline_core/AptOfflineCoreLib.py
index e06f55b..6af1235 100644
--- a/apt_offline_core/AptOfflineCoreLib.py
+++ b/apt_offline_core/AptOfflineCoreLib.py
@@ -901,6 +901,7 @@ def installer( args ):
                                 
                         if keyring is None:
                                 self.opts="--keyring /etc/apt/trusted.gpg --ignore-time-conflict"
+                                self.opts += "--keyring /usr/share/keyrings/debian-archive-keyring.gpg"
                         else:
                                 self.opts = "--keyring %s --ignore-time-conflict" % (keyring)
                                 

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to