I quite frankly don't understand the rationale of all this bug report
nor why anyone has not thought of this.

You are pissed off by apt crying when there are unsigned packages? I
understand your pain. I develop stuff too, and it's annoying.

What I don't understand is the rationale for blaming the key generation
system and ask mantainers to add a "make it all fake" option. That's...
just going to attract flak because it breaks security (the whole point
of the key generator system).

It's beyond obvious.

There is a simple solution though that does not involve breaking
encryption system, so keep reading.

Disable package signature checking. Boom, problem solved, no need to
compromise encryption for everyone else.

this command is of course "disable for this package"

sudo apt-get --allow-unauthenticated install mypackage


If you want to disable for EVERY package which is NOT SAFE AT ALL thus NOT 
RECOMMENDED for most systems (but it is probably fine for a development VM)

drop a file called 99unsigned or whatever in /etc/apt/apt.conf.d/

and write this inside:

APT::Get::AllowUnauthenticated "true";


in either case apt will show a warning about unisgned packages but will proceed 
anyway without requiring user input.


Now can this bug be closed? This solves the opener's issue.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/706011

Title:
  gpg --key-gen doesn't have enough entropy and rng-tools install/start
  fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnupg/+bug/706011/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to