Excuse-me. I don't know how to change the tittle.

"Debian 11 - Local packages (not miror)"

--------------------------------------------------------

In "/etc/apt/sources.list": we have only one line:
------------------
deb file:/My-packages ./
------------------

If I don't make mistake, we needs:
/My-packages
- some packages ready to install
- file Release
- file Release.gpg (optionnal)
- file Packages
- file Packages.gz

. To create file "Release":
root@pc:/My-packagess# dpkg-scanpackages . /dev/null > Packages

. To create file "Packages":
root@pc:/My-packages# cat <<EOF > Release
Origin: Me
Label: Enough-me
Suite: stable
Version: 1.0
Codename: stable
Date: $(date -R)
Architectures: amd64
Components: main
Description: Local deposit personal
MD5Sum:
$(md5sum Packages | awk '{print " " $1}' | sed -e 's/ / /g') $(stat -c%s Packages)
SHA256:
$(sha256sum Packages | awk '{print " " $1}' | sed -e 's/ / /g') $(stat -c%s Packages)
EOF

. To create file "Packages.gz":
root@pc:/My-packagest# dpkg-scanpackages . /dev/null | gzip -c -9 > Packages.gz

Below:
root@pc:/My-packagest# apt-get update --allow-insecure-repositories
is Ok.

And after, "apt-get install one_paquet" is ok too.


But, whe need to go longer (and not having to use "--allow-insecure-repositories").

Now, if we try to create the file "Release.gpg":

root@pc:/My-packages# apt-get install gnupg

root@pc:/My-packages# gpg --full-generate-key

root@pc:/My-packages# gpg --list-keys
gpg: marginals needed: 3 completes needed: 1 trust model: pgp
gpg: profondeur*: 0 valables*: 1 signées*: 0
confiance*: 0*i., 0*n.d., 0*j., 0*m., 0*t., 1*u.
/root/.gnupg/pubring.kbx
------------------------
pub rsa3072 2023-09-23 [SC]
5E1419DBDE6F356A4679E57CC3B305F1E218A137
uid [ ultime ] ME <ME@LOCAL>
sub rsa3072 2023-09-23 [E]

root@pc:/My-packages# gpg -abs -o Release.gpg -u 5E1419DBDE6F356A4679E57CC3B305F1E218A137 Release

But the following steps no longer work:

root@pc:/My-packages# gpg --recv-keys 5E1419DBDE6F356A4679E57CC3B305F1E218A137
gpg: failure to receive from key server: No data

Impossible to find a solution. Sorry.

And
root@pc:/Mon-depot# apt-get update
Réception de*:1 file:/My-packages ./ InRelease
Ign*:1 file:/My-packages ./ InRelease
Réception de*:2 file:/My-packages ./ Release [326 B]
Réception de*:2 file:/My-packages ./ Release [326 B]
Réception de*:3 file:/My-packages ./ Release.gpg [659 B]
Réception de*:3 file:/My-packages ./ Release.gpg [659 B]
Ign*:3 file:/My-packages ./ Release.gpg
Reading the lists of My-packages... Done
W: GPG error*:*file:/My-packages ./ Release*:*The following signatures could not be verified because the public key is not available*: NO_PUBKEY C3B305F1E218A137
E: The file:/My-packages ./Release repository is not signed.

I hope I managed to explain the problem and the tests carried out.

Thanks fore all.

Best regards.

In "English" so I assume packages?

[CODE][/CODE] tags will help in deciphering what you're trying to do, are you trying to create a local mirror?

Maybe: https://wiki.debian.org/Packaging/Intro
https://www.pendrivelinux.com/how-to...-linux-mirror/
https://wiki.debian.org/DebianRepository/Setup &c...

Packages.. Packages...

Yes, packages. I'm sorry.

I'll study the links you have written.

The third seems to be very interesting.

Local mirror: the server will own only some packages (bind9, apache2, etc.), not all packages. For example, we have selected only 1,3 Go of packages. We don't need more packages.

In Debian 10, we have a solution that worked fine. But with Debian 11, the security is higher, and our "old" solution doesn't work.

With Debian 11, we have found a solution with "apt-get update --allow-insecure-repositories". Having a solution with only "apt-get update" is a challenge. But, for that, we have to understand PGP !

Thanks for all.

Best regards.

1 members found this post helpful.

Not at all. Just install the package local-apt-repository and follow instructions in its README.

Yes, "local-apt-repository" make all what I want !

With "/usr/share/doc/local-apt-repository/README", I've found how to use it.

Thanks for all.

Best regards.