为什么即使在 Debian 8 上禁用有效性检查后仍然会收到软件包身份验证警告?

为什么即使在 Debian 8 上禁用有效性检查后仍然会收到软件包身份验证警告?

我仍在我过时的 Banana Pi BPI-R1 硬件上运行 Debian 8“Jessy”。但现在,当我尝试安装软件包时,我得到了

WARNING: The following packages cannot be authenticated!

跑步后

$ apt update                                
Ign http://archive.debian.org jessie InRelease
Get:1 http://archive.debian.org jessie-backports InRelease [166 kB]
...
Hit http://archive.debian.org jessie/contrib armhf Packages                                                                                                                                                                                  
Fetched 168 kB in 26s (6457 B/s)                                                                                                                                                                                                             
Reading package lists... Done
Building dependency tree       
Reading state information... Done
34 packages can be upgraded. Run 'apt list --upgradable' to see them.
W: GPG error: http://archive.debian.org jessie-backports InRelease: The following signatures were invalid: KEYEXPIRED 1587841717 KEYEXPIRED 1668891673
W: GPG error: http://archive.debian.org jessie Release: The following signatures were invalid: KEYEXPIRED 1587841717

事实证明,Debian 密钥将于 2022 年过期。好的,在搜索问题之后,我发现可以通过禁用有效性检查来解决问题。

基本上我遵循了https://blog.milliondollarserver.com/2020/06/fix-apt-get-update-error-on-old-debian.html

不幸的是,这个解决方法不能解决我的问题。当我尝试“使用”软件包时,我仍然收到警告:

$ apt install dpkg-sig
Reading package lists... Done
Building dependency tree       
Reading state information... Done
...
Install these packages without verification? [y/N] 
E: Some packages could not be authenticated

我确认已应用修复:

$ apt-config dump|grep Valid
Acquire::Check-Valid-Until "false";

有什么提示我做错了什么吗?

目前还没有更换硬件和使用最新 Debian 的计划... ;-)

相关内容