[Spacewalk-list] debian repository and Release file

[Mgr. Peter Hudec]

Hi Paul,

none of the debian package in the repository is signed as far I known.
At this moment we choose the way number 2.

But could someone show me where is the Packages.gz file generated? I 
mean the source file /python, java, perl, ???/ uff, the spacewalk is mix 
of languages ;)

	best regards
		Peter

On 1/17/13 6:48 PM, Paul Robert Marino wrote:
> Number 2 is the way all the other distros do it.
> Also usually you don't resign previously signed packages.
>
> On Jan 17, 2013 8:17 AM, "Mgr. Peter Hudec" <peter.hudec at swan.sk
> <mailto:peter.hudec at swan.sk>> wrote:
>
>     Hi all,
>
>     We are using spacewalk system for debian based systems.
>     We want to use the GPG verification of the packages/repository.
>
>     1) signing repository
>     Debian is using Release and Release.gpg files for this purpose. Is there
>     any way how to generate these files in spacewalk system ? The only
>     generated file is right now Packages.
>
>     I haven;t found any way how to add this file to the repository
>     manually or
>     generate it on the fly.
>
>     2) sign the package
>     The second way how to achieve this is to sign each package before adding
>     to the repository.
>
>
>     At this time we prefer the first way. Does anyone have any
>     experience with
>     it?
>
>              Peter
>
>     --
>     Mgr. Peter Hudec
>     IT/Technical Specialist
>
>     CNC a.s.
>     Strojnícka 33
>     821 05 Bratislava
>
>     web: http://www.cnc.sk/
>     mail: peter.hudec at cnc.sk <mailto:peter.hudec at cnc.sk>
>     mob: +421 905 997203 <tel:%2B421%20905%20997203>
>
>
>
>     _________________________________________________
>     Spacewalk-list mailing list
>     Spacewalk-list at redhat.com <mailto:Spacewalk-list at redhat.com>
>     https://www.redhat.com/__mailman/listinfo/spacewalk-__list
>     <https://www.redhat.com/mailman/listinfo/spacewalk-list>
>