Lee Winter <lee.j.i.win...@gmail.com> writes: > On Wed, Sep 16, 2009 at 3:54 PM, Russ Allbery <r...@debian.org> wrote:
>> There's a one-to-one correspondance between an entry in sources.list >> and the metadata that apt expects to find in the repository, which in >> turn is signed. You would have to combine the metadata in order to >> combine the sources.list lines, which would then require resigning the >> metadata. > OK, this is where it starts to get interesting. I didn't see much more > than passing references to this in the apt doc. Did I miss it or are > there other docs that describe the repository structure? Should I be > looking at the doc about creating packages or for creating releases? I'm afraid I have no idea where it might be documented. The above statement is from experience dealing with apt and various local repositories rather than taken from documentation. :/ Back when I made a foray into writing tools to generate a local repository and then patching debarchiver, I found it rather difficult to find coherent documentation of all of the features of the Debian archive layout and mostly resorted to looking at the Debian archives and reading source code. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/> -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org