我正在尝试在本地机器上创建镜像,但无法验证 gpg 签名。
请遵循以下步骤:https://help.ubuntu.com/community/Debmirror
唯一的区别是我在 /home/ubuntu/mirrorkeyring 下创建了 trustkeys,并在 /var/repository 下创建了存储库文件
创建密钥:
mkdir /home/ubuntu/mirrorkeyring
gpg --no-default-keyring --keyring /home/ubuntu/mirrorkeyring/trustedkeys.gpg --import /usr/share/keyrings/ubuntu-archive-keyring.gpg
从我的mirrorbuild.sh:
export GNUPGHOME="/home/ubuntu/mirrorkeyring"
执行mirrorbuild.sh:
Getting meta files ...
[ 0%] Getting: dists/trusty/Release... #** GET http://archive.ubuntu.com/ubuntu/dists/trusty/Release ==> 200 OK
ok
[ 0%] Getting: dists/trusty/Release.gpg... #** GET http://archive.ubuntu.com/ubuntu/dists/trusty/Release.gpg ==> 200 OK
ok
Release gpg signature does not verify.
Ubuntu Release file: using Suite (trusty).
[ 0%] Getting: dists/trusty-security/Release... #** GET http://archive.ubuntu.com/ubuntu/dists/trusty-security/Release ==> 200 OK (1s)
ok
[ 0%] Getting: dists/trusty-security/Release.gpg... #** GET http://archive.ubuntu.com/ubuntu/dists/trusty-security/Release.gpg ==> 200 OK
ok
Release gpg signature does not verify.
Ubuntu Release file: using Suite (trusty-security).
[ 0%] Getting: dists/trusty-updates/Release... #** GET http://archive.ubuntu.com/ubuntu/dists/trusty-updates/Release ==> 200 OK
ok
[ 0%] Getting: dists/trusty-updates/Release.gpg... #** GET http://archive.ubuntu.com/ubuntu/dists/trusty-updates/Release.gpg ==> 200 OK
ok
Release gpg signature does not verify.
Ubuntu Release file: using Suite (trusty-updates).
Errors:
Release gpg signature does not verify
Release gpg signature does not verify
Release gpg signature does not verify
Failed to download some Release or Release.gpg files!
答案1
我刚刚尝试使用 root 从标准 .gnupg 文件夹读取文件并且成功了。