如何从unsigned存储库安装debian软件包

Posted 2021-04-10

尝试从未签名的存储库安装Debian软件包到Debian 9：

# apt-get --allow-unauthenticated update
Get:1 http://files.freeswitch.org/repo/deb/freeswitch-1.8 stretch InRelease [3,196 B]
Hit:2 http://security.debian.org/debian-security stretch/updates InRelease
Ign:1 http://files.freeswitch.org/repo/deb/freeswitch-1.8 stretch InRelease
Ign:3 http://debianmirror.nkn.in/debian stretch InRelease
Hit:4 http://debianmirror.nkn.in/debian stretch Release
Fetched 3,196 B in 1s (1,940 B/s)
Reading package lists... Done
W: GPG error: http://files.freeswitch.org/repo/deb/freeswitch-1.8 stretch InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BD3189F5A2B57698
W: The repository 'http://files.freeswitch.org/repo/deb/freeswitch-1.8 stretch InRelease' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.

但我需要它。我该怎么做？感谢名单！

答案

在不受信任的存储库的sources.list条目中，您可以在条目的前两个元素之间添加“[trusted = yes]”（带方括号），如deb [trusted=yes] http://...中所示

这会将错误转换为警告，因为它在过去的Debian版本中是默认的，而不必完全禁用签名验证