Skip to main content

A simple command line utility to create a debian repository

Project description

Simple command line tool to create apt repositories. This will work on debian and ubuntu.

https://api.travis-ci.org/devopsconsulting/vdt.simpleaptrepo.svg?branch=master

Installation:

First install from pypi:

pip install vdt.simpleaptrepo

This tool is a wrapper for some debian specific packages, so you will need to install them first:

apt-get install gnupg dpkg-sig apt-utils

To show which commands are available:

simpleapt --help

Create a repository:

First you need to create a gpg key to sign your packages with. This is not mandatory but highly recommended:

simpleapt create-gpg-key

Copy and remember the key’s hash. The output looks something like this:

gpg: key 10FB8BDC marked as ultimately trusted

So copy the 10FB8BDC hash, you will need it later.

Now create a repository:

simpleapt create-repo myrepo /www/ --gpgkey 10FB8BDC

Repository 'myrepo' created
Now add a component with the 'add-component' command

Create a component:

In one repository you have multiple components:

simpleapt add-component myrepo test

You will see what you need to do now:

Component 'test' created in repo 'myrepo'

Now add some unsigned debian packages in the directory
and run the 'update-repo' command (see the 'add packages' section below)

Configure your webservice to set the www-root to /www/
Add http://<hostname>/myrepo/test / to your sources.list

Add the key on the host where you want to install the packages.
(This is only needed once per repository)
wget -qO - http://<hostname>/myrepo/test/keyfile | sudo apt-key add -

Add some more if you like:

simpleapt add-component myrepo staging
simpleapt add-component myrepo production

See that our repo is there:

simpleapt list-repos

myrepo (gpgkey: 10FB8BDC)
   test
   staging
   main

Add packages:

Copy some debian package into a component’s directory and update the repo:

simpleapt update-repo myrepo test

Exported key 10FB8BDC to /www/myrepo/test/keyfile

Signed package /www/myrepo/test/my-package_0.0.1_all.deb
Creates Packages
Creates Packages.gz
Create Release with key 10FB8BDC
Create InRelease with key 10FB8BDC
Create Releases.gpg with key 10FB8BDC

When there a a lot packages you can skip resigning packages by using the --skip-signed option:

simpleapt update-repo myrepo test --skip-signed

Exported key 10FB8BDC to /www/myrepo/test/keyfile

Skipped signing /www/myrepo/test/my-package_0.0.1_all.deb

Creates Packages
Creates Packages.gz
Create Release with key 10FB8BDC
Create InRelease with key 10FB8BDC
Create Releases.gpg with key 10FB8BDC

Now you can install these packages!

Changelog:

0.0.5 (2018-08-04):

  • Checked for python 3.7 support

0.0.4 (2017-11-20):

  • Added a --skip-signed option so we can skip already signed debian packages

  • Added python 3 support

Useful URLS:

http://blog.packagecloud.io/eng/2014/10/28/howto-gpg-sign-verify-deb-packages-apt-repositories/

https://keyring.debian.org/creating-key.html

https://wiki.debian.org/SecureApt#How_apt_uses_Release.gpg

https://help.ubuntu.com/community/CreateAuthenticatedRepository

http://lists.gnupg.org/pipermail/gnupg-users/2004-May/022471.html

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

vdt.simpleaptrepo-0.0.5.tar.gz (5.9 kB view hashes)

Uploaded Source

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page