首先导入gpg签钥来给程序库签名,这个操作对一个服务器只需进行一次操作就行了。导入的签钥使apt在下载程序时能验证包的完整性。
我们的签钥序列号:0xcbcb082a1bb943db,完整的签钥指纹是:1993 69E5 404B D5FC 7D2F E43B CBCB 082A 1BB9 43DB
用apt-key程序可以轻松地将签钥导入apt:sudo apt-key adv --recv-keys --keyserver keyserver.ubuntu.com 0xcbcb082a1bb943db
debian与ubuntu用的上面同样的命令导入签钥。
例子:localhost:~# apt-key adv --recv-keys --keyserver keyserver.ubuntu.com 0xcbcb082a1bb943db
Executing: gpg --ignore-time-conflict --no-options --no-default-keyring --secret-keyring /tmp/tmp.ASyOPV87XC --trustdb-name /etc/apt/trustdb.gpg --keyring /etc/apt/trusted.gpg --primary-keyring /etc/apt/trusted.gpg --recv-keys --keyserver keyserver.ubuntu.com 0xcbcb082a1bb943db
gpg: requesting key 1BB943DB from hkp server keyserver.ubuntu.com
gpg: key 1BB943DB: public key "Daniel Bartholomew (Monty Program signing key) <[email protected]>" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg: imported: 1
当签钥导入后,你就可以添加程序库了。