Comment 34 for bug 706011

Revision history for this message
bobafetthotmail (starshipeleven) wrote :

I quite frankly don't understand the rationale of all this bug report nor why anyone has not thought of this.

You are pissed off by apt crying when there are unsigned packages? I understand your pain. I develop stuff too, and it's annoying.

What I don't understand is the rationale for blaming the key generation system and ask mantainers to add a "make it all fake" option. That's... just going to attract flak because it breaks security (the whole point of the key generator system).

It's beyond obvious.

There is a simple solution though that does not involve breaking encryption system, so keep reading.

Disable package signature checking. Boom, problem solved, no need to compromise encryption for everyone else.

this command is of course "disable for this package"

sudo apt-get --allow-unauthenticated install mypackage

If you want to disable for EVERY package which is NOT SAFE AT ALL thus NOT RECOMMENDED for most systems (but it is probably fine for a development VM)

drop a file called 99unsigned or whatever in /etc/apt/apt.conf.d/

and write this inside:

APT::Get::AllowUnauthenticated "true";

in either case apt will show a warning about unisgned packages but will proceed anyway without requiring user input.

Now can this bug be closed? This solves the opener's issue.