如何从未签名的存储库安装 debian 软件包 [英] how to install debian package from unsigned repository

问题描述

尝试从未签名的存储库将 Debian 软件包安装到 Debian 9:

Trying to install Debian package to Debian 9 from unsigned repository:

# apt-get --allow-unauthenticated update
Get:1 http://files.freeswitch.org/repo/deb/freeswitch-1.8 stretch InRelease [3,196 B]
Hit:2 http://security.debian.org/debian-security stretch/updates InRelease
Ign:1 http://files.freeswitch.org/repo/deb/freeswitch-1.8 stretch InRelease
Ign:3 http://debianmirror.nkn.in/debian stretch InRelease
Hit:4 http://debianmirror.nkn.in/debian stretch Release
Fetched 3,196 B in 1s (1,940 B/s)
Reading package lists... Done
W: GPG error: http://files.freeswitch.org/repo/deb/freeswitch-1.8 stretch InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BD3189F5A2B57698
W: The repository 'http://files.freeswitch.org/repo/deb/freeswitch-1.8 stretch InRelease' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.

但我需要它.我该怎么做?谢谢！

But I need it. How can I do it? Thanx!

推荐答案

在不可信存储库的sources.list条目中，您可以在前两个元素之间添加[trusted=yes]"(带方括号)条目，如 deb [trusted=yes] http://...

In the sources.list entry for the untrusted repository, you can add "[trusted=yes]" (with the square brackets) between the first two elements of the entry, as in deb [trusted=yes] http://...

这会将错误变成警告，因为它在过去的 Debian 版本中一直是默认设置，而无需完全禁用签名验证

This will turn the error into a warning, as it has been default in past Debian releases, without having to completely disable signature verification

这篇关于如何从未签名的存储库安装 debian 软件包的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！