About apt-get messages

rangalo · 01-06-2007, 06:38 AM

Hi,

I am a newbie at using apt-get. Although, I have used debian before, I was using apt-get only with cds, as I didnt have internet.

I copied the sources.ist posted in this list by Rich, i changed all the mirrors fro us to de (germany) and it worked well for me, except the debian-multimedia.org. For this I got error with apt-get update command, saying some public key was not found or mathed. So I had to comment the mirror out. I dont know what this msg means, but I do need some multimedia stuff on my machine. Any other mirror for that ?

Moreover, while installing some common packages like firefox, gaim etc I got message that the package was not varified ! Is it dangerous to install unverified package ? If i change the mirrors, will this msg go away ?

regards,
Hardik

saman007uk · 01-06-2007, 07:11 AM

To add the appropriate GPG public-key for debian-multimedia, see FAQ::Multimedia Debian Packages.

Generally, installing unverified packages are ok, as long as you trust the source.

rangalo · 01-06-2007, 09:38 AM

Hi,

Quote:

To add the appropriate GPG public-key for debian-multimedia, see FAQ::Multimedia Debian Packages.

I tried it but it doent work. The commands say, no gpg key found !

regards,
Hardik

rickh · 01-06-2007, 10:23 AM

As root:
# gpg --keyserver wwwkeys.eu.pgp.net --recv-keys XXXXXXXXXXXXXXXX && apt-key add /root/.gnupg/pubring.gpg && apt-get update

Replace the XXXXXXXXXXXXXXXX with the missing key

Also, I recommend using aptitude instead of apt-get, but you have to use it pretty much exclusively.

First run # aptitude keep-all ... or aptitude will be trying to get rid of a bunch of packages you want. I just use it from the command line replacing apt-get with aptitude ... same syntax. I still haven't figured out the ncurses interface, and so far I haven't needed it.

rangalo · 01-06-2007, 10:46 AM

Hi rich,

first of all thanks for posting your sources.list. It has been very useful.

But the solution u gave me doesnt work.

With, apt-get update, I have followign errors.

Code:

Hit http://ftp.de.debian.org testing/main Sources/DiffIndex
Hit http://ftp.de.debian.org experimental/main Packages/DiffIndex
Hit http://ftp.de.debian.org experimental/main Sources/DiffIndex
Fetched 5752B in 10s (528B/s)
Reading package lists... Done
W: GPG error: http://www.debian-multimedia.org testing Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 07DC563D1F41B907
W: You may want to run apt-get update to correct these problems

Then I try to get the keys with the command you suggested and got the following output.

Code:

gpg --keyserver wwwkeys.eu.pgp.net --recv-keys 07DC563D1F41B907 && apt-key add /root/.gnupg/pubring.gpg && apt-get update
gpg: requesting key 1F41B907 from hkp server wwwkeys.eu.pgp.net
gpg: key 1F41B907: "Christian Marillat <marillat@debian.org>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
gpg: no valid OpenPGP data found.

and again with the apt-get update I get the same error as above.

Am I doing something wrong ?

regards,
Hardik

rickh · 01-06-2007, 11:51 AM

I cut and pasted your command above, only changing the "apt-get" to "aptitude", and it worked fine.

Code:

debian64:~# gpg --keyserver wwwkeys.eu.pgp.net --recv-keys 07DC563D1F41B907 && apt-key add /root/.gnupg/pubring.gpg && aptitude update
gpg: requesting key 1F41B907 from hkp server wwwkeys.eu.pgp.net
gpg: key 1F41B907: "Christian Marillat <marillat@debian.org>" 13 new signatures
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:         new signatures: 13
OK
Get:1 http://www.debian-multimedia.org testing Release.gpg [189B]
Get:2 http://ftp.us.debian.org unstable Release.gpg [378B]
Get:3 http://ftp.us.debian.org experimental Release.gpg [378B]
Get:4 http://security.debian.org testing/updates Release.gpg [189B]
Get:5 http://www.debian-multimedia.org testing Release [5560B]
Get:6 http://ftp.us.debian.org unstable Release [79.6kB]
.
.
.

You may be missing some programs such as gnupg, gpgkeys, apt-key, etc.

craigevil · 01-06-2007, 11:55 AM

One question why do you have experimental in your sources.list, even those of us that run unstable rarely touch experimental.

Check that you have gpg installed by doing gpg --version in a terminal.

Then try the following:
gpg --keyserver wwwkeys.eu.pgp.net --recv-keys 1F41B907 && apt-key add /root/.gnupg/pubring.gpg

rangalo · 01-06-2007, 12:11 PM

Hi,

Quote:

One question why do you have experimental in your sources.list, even those of us that run unstable rarely touch experimental.

I also dont know why, I searched for an Etch sources.list in this forum and found rich's post. There he says that with this sources.list there are less chances of getting into the dependency hell.

I use slackware at work, so I am a bit new to apt world !

I have all the pakages listed by rich.

gpg --version gives following.

Code:

[hardik@galaxy: ~ ]$ gpg --version
gpg (GnuPG) 1.4.6
Copyright (C) 2006 Free Software Foundation, Inc.
This program comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it
under certain conditions. See the file COPYING for details.

Home: ~/.gnupg
Supported algorithms:
Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA
Cipher: 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH
Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224

and another command .........

Code:

gpg --keyserver wwwkeys.eu.pgp.net --recv-keys 1F41B907 && apt-key add /root/.gnupg/pubring.gpg
gpg: requesting key 1F41B907 from hkp server wwwkeys.eu.pgp.net
gpg: key 1F41B907: "Christian Marillat <marillat@debian.org>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
gpg: no valid OpenPGP data found.

I dont know what is wrong with my system !!

regards,
Hardik

rickh · 01-06-2007, 12:34 PM

I don't know what's wrong with your system either, but I would suggest you not let it drive you nuts. I'll probably go away in a day or two.

Re. Experimental: I only vaguely recall putting a rather generic sources.list file out a while back, and had I thought about it, I would probably not have included Experimental. I do use it occasionally, so it is included in my own sources.list. It won't really hurt anything because Apt does not download from Experimental unless you specifically tell it to.

rangalo · 01-11-2007, 11:33 AM

Hi all,

thanks for you help.

I could not figure out why the gpg method was not working, but I downloaded the keyfile manually and then added to the apt-keys as

#apt-keys add <downloaded-file-name>

and it added the key, after that apt-get update worked fine !

regards
Hardik