Рубрики
Debian \ apt \ update \ install \ dpkg

debian 11 / apt-mirror / gpg

Ссылки:

https://wiki.debian.org/ru/CreateLocalRepo
https://wiki.debian.org/DebianRepository/Setup
https://wiki.debian.org/DebianRepository/Setup?action=show&redirect=HowToSetupADebianRepository

https://low-level.wiki/mirrors/ubuntu_repos.html

https://computingforgeeks.com/creating-ubuntu-mirrors-using-apt-mirror/
http://www.linux-admins.net/2013/11/creating-official-debian-mirror-with.html
https://wiki.debian.org/DebianRepository/Setup

https://habr.com/ru/post/46314/

How to export and import keys with GPG
https://wiki.ubuntu.com/Mirrors/Scripts https://askubuntu.com/questions/1105932/18-04-local-mirror-missing-some-translations-en http://freecoder.ru/zametki-o-linux/apt #### patch error: i18n/Translation-en 404 Not Found https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=932379

Репозитории debian 11:

Редактируем список репозиториев
vim /etc/apt/sources.list
-------------------------
deb http://deb.debian.org/debian bullseye main contrib non-free
deb-src http://deb.debian.org/debian bullseye main contrib non-free

deb http://deb.debian.org/debian-security/ bullseye-security main contrib non-free
deb-src http://deb.debian.org/debian-security/ bullseye-security main contrib non-free

deb http://deb.debian.org/debian bullseye-updates main contrib non-free
deb-src http://deb.debian.org/debian bullseye-updates main contrib non-free

deb http://deb.debian.org/debian bullseye-backports main contrib non-free
deb-src http://deb.debian.org/debian bullseye-backports main contrib non-free
-------------------------

Установка apt-mirror:

0. Ставим пакеты: 
apt update
apt install apt-mirror vim nginx gnupg


1. Редактируем настройки apt-mirror
vim /etc/apt/mirror.list
------------------------
############# config ##################
#
set base_path    /var/spool/apt-mirror
#
# set mirror_path  $base_path/mirror
# set skel_path    $base_path/skel
# set var_path     $base_path/var
# set cleanscript $var_path/clean.sh
# set defaultarch  
# set postmirror_script $var_path/postmirror.sh
set run_postmirror 0
set nthreads     20
set _tilde 0
#
############# end config ##############

#deb http://ftp.us.debian.org/debian unstable main contrib non-free
#deb-src http://ftp.us.debian.org/debian unstable main contrib non-free

# mirror additional architectures
#deb-alpha http://ftp.us.debian.org/debian unstable main contrib non-free
#deb-amd64 http://ftp.us.debian.org/debian unstable main contrib non-free
#deb-armel http://ftp.us.debian.org/debian unstable main contrib non-free
#deb-hppa http://ftp.us.debian.org/debian unstable main contrib non-free
#deb-i386 http://ftp.us.debian.org/debian unstable main contrib non-free
#deb-ia64 http://ftp.us.debian.org/debian unstable main contrib non-free
#deb-m68k http://ftp.us.debian.org/debian unstable main contrib non-free
#deb-mips http://ftp.us.debian.org/debian unstable main contrib non-free
#deb-mipsel http://ftp.us.debian.org/debian unstable main contrib non-free
#deb-powerpc http://ftp.us.debian.org/debian unstable main contrib non-free
#deb-s390 http://ftp.us.debian.org/debian unstable main contrib non-free
#deb-sparc http://ftp.us.debian.org/debian unstable main contrib non-free



### need repo
#

deb http://deb.debian.org/debian bullseye main contrib non-free
deb-src http://deb.debian.org/debian bullseye main contrib non-free

deb http://deb.debian.org/debian-security/ bullseye-security main contrib non-free
deb-src http://deb.debian.org/debian-security/ bullseye-security main contrib non-free

deb http://deb.debian.org/debian bullseye-updates main contrib non-free
deb-src http://deb.debian.org/debian bullseye-updates main contrib non-free

deb http://deb.debian.org/debian bullseye-backports main contrib non-free
deb-src http://deb.debian.org/debian bullseye-backports main contrib non-free

#
#### need repo end

#clean
clean  http://deb.debian.org/debian
clean  http://deb.debian.org/debian-security
------------------------




2. Редактируем настройки nginx
vim /etc/nginx/conf.d/mirrors.conf
----------------------------------
server {
 listen 80;
 server_name mirror.b14esh.com;
 root /var/spool/apt-mirror;

 location / {
   autoindex on;
 }
}

----------------------------------


3. еще можно заменить дефолтный nginx
vim /etc/nginx/sites-available/default
--------------------------------------
root  /var/spool/apt-mirror;
--------------------------------------


4. После настройки nginx 
systemctl restart nginx.service


!!! Придется делать каждый раз после обновления репозитория, но проще добавить "[trusted=yes]"
5. Подпись репозитория
- Переходим в каталог root:
cd /root

- Создаем ключ:
#gpg --full-gen-key
gpg --gen-key

- Переходим в каталог репозитория:
cd  /var/spool/apt-mirror

- Ищем "Release.gpg":
find -name Release.gpg

./mirror/deb.debian.org/debian-security/dists/bullseye-security/Release.gpg
./mirror/deb.debian.org/debian/dists/bullseye-backports/Release.gpg
./mirror/deb.debian.org/debian/dists/bullseye-updates/Release.gpg
./mirror/deb.debian.org/debian/dists/bullseye/Release.gpg
./skel/deb.debian.org/debian-security/dists/bullseye-security/Release.gpg
./skel/deb.debian.org/debian/dists/bullseye-backports/Release.gpg
./skel/deb.debian.org/debian/dists/bullseye-updates/Release.gpg
./skel/deb.debian.org/debian/dists/bullseye/Release.gpg

- Подписываем репозиторий:
cd  /var/spool/apt-mirror/mirror/deb.debian.org/debian-security/dists/bullseye-security/
gpg --armor -o Release.gpg -sb Release
cd  /var/spool/apt-mirror/mirror/deb.debian.org/debian/dists/bullseye-backports/
gpg --armor -o Release.gpg -sb Release
cd  /var/spool/apt-mirror/mirror/deb.debian.org/debian/dists/bullseye-updates/
gpg --armor -o Release.gpg -sb Release
cd  /var/spool/apt-mirror/mirror/deb.debian.org/debian/dists/bullseye/
gpg --armor -o Release.gpg -sb Release
cd  /var/spool/apt-mirror/skel/deb.debian.org/debian-security/dists/bullseye-security/
gpg --armor -o Release.gpg -sb Release
cd  /var/spool/apt-mirror/skel/deb.debian.org/debian/dists/bullseye-backports/
gpg --armor -o Release.gpg -sb Release
cd  /var/spool/apt-mirror/skel/deb.debian.org/debian/dists/bullseye-updates/
gpg --armor -o Release.gpg -sb Release
cd  /var/spool/apt-mirror/skel/deb.debian.org/debian/dists/bullseye/
gpg --armor -o Release.gpg -sb Release

- Экспортируем ключ:
gpg --list-keys - смотрим какие есть ключи
gpg --export -a USER_NAME > /var/spool/apt-mirror/public.gpg




Использование репозитория:

#wget http://192.168.15.157/public.gpg
wget http://sever_name_IP/pubring.gpg
apt-key add public.gpg

Для использования репозитория нужно добавить его в файл /etc/apt/sources.list в виде следующей строки (в общем виде):
deb file:///путь_к_папке_репозитория/ ветка разделы

Например:
deb file:///home/repository/ squeeze main contrib non-free


Пример:
deb [trusted=yes] http://192.168.15.157/deb.debian.org/debian bullseye main contrib non-free
deb-src [trusted=yes] http://192.168.15.157/deb.debian.org/debian bullseye main contrib non-free
deb [trusted=yes] http://192.168.15.157/deb.debian.org/debian-security/ bullseye-security main contrib non-free
deb-src [trusted=yes] http://192.168.15.157/deb.debian.org/debian-security/ bullseye-security main contrib non-free
deb [trusted=yes] http://192.168.15.157/deb.debian.org/debian bullseye-updates main contrib non-free
deb-src [trusted=yes] http://192.168.15.157/deb.debian.org/debian bullseye-updates main contrib non-free
deb [trusted=yes] http://192.168.15.157/deb.debian.org/debian bullseye-backports main contrib non-free
deb-src [trusted=yes] http://192.168.15.157/deb.debian.org/debian bullseye-backports main contrib non-free