APT-SECURE(8) APT APT-SECURE(8) (NAME) apt-secure - APT (DESCRIPTION) . APT Release . Release . . APT . . Release APT . : APT apt-get(8) aptitude(8) synaptic(8) APT . (USER CONFIGURATION) .sources (ASCII-armored) Signed-By . . sources.list(5) . /etc/apt/keyrings /usr/share/keyrings Signed-By: /etc/apt/keyrings/example-archive-keyring.asc .sources deb [signed-by=/etc/apt/keyrings/example-archive-keyring.asc] ... .list . APT . . .asc .gpg . APT GnuPG gpg --export-options export-minimal [--armor] --export . --keyring file --import GnuPG (<< keybox >>) . . extrepo . (UNSIGNED REPOSITORIES) Release Release APT update apt-get(8) . Acquire::AllowInsecureRepositories true APT . sources.list(5) allow-insecure=yes . APT . Trusted sources.list(5) . update APT . Acquire::AllowDowngradeToInsecureRepositories true sources.list(5) allow-downgrade-to-insecure=yes . (SIGNED REPOSITORIES) APT . apt-secure . . apt-secure . debsig-verify debsign ( debsig-verify devscripts) . ( ) . ( debian-keyring) . . . Packages . Packages Release . Release Packages . debian-archive-keyring . Release - APT . . : o << >> (man in the middle). ( ) ( ARP DNS) . o (Mirror network compromise). . ( ) Release . . (INFORMATION CHANGES) Release . . apt_preferences(5) . . ( ). (REPOSITORY CONFIGURATION) : o Release . apt-ftparchive release ( apt-utils) . o . gpg --clearsign -o InRelease Release gpg -abs -o Release.gpg Release . o . debian-archive-keyring . o . . ( ) (web of trust). ( ) . (SEE ALSO) apt.conf(5), apt-get(8), sources.list(5), apt-ftparchive(1), debsign(1), debsig-verify(1), gpg(1) (Debian Security Infrastructure)[1] ( harden-doc ) (Strong Distribution HOWTO)[2] V. Alex Brennen . (BUGS) APT[3]. APT /usr/share/doc/debian/bug-reporting.txt reportbug(1) . (AUTHOR) APT APT . (MANPAGE AUTHORS) - (Javier Fernandez-Sanguino Pena) (Isaac Jones) (Colin Walters) (Florian Weimer) (Michael Vogt) . (AUTHORS) Jason Gunthorpe APT (NOTES) 1. Debian Security Infrastructure https://www.debian.org/doc/manuals/securing-debian-manual/ch07 2. Strong Distribution HOWTO http://www.cryptnet.net/fdp/crypto/strong_distro.html 3. APT https://bugs.debian.org/src:apt APT 3.3.3 23 November 2024 APT-SECURE(8)