I have a partial Debian mirror "across the room" so I can quickly do a netinstall or grab a package. Wheezy's already there; this morning, I went to add Jessie and oldstable (I'm on a T1, and Ethernet is significantly faster :-).
mkdebmirror says, among other things: > [GNUPG:] SIG_ID F3t9wlFdv+WlOKgQFBRTyLgnYsU 2015-09-05 1441446236 > [GNUPG:] GOODSIG 8B48AD6246925553 Debian Archive Automatic Signing Key > (7.0/wheezy) <ftpmas...@debian.org> > [GNUPG:] VALIDSIG A1BD8E9D78F7FE5C3E65D8AF8B48AD6246925553 2015-09-05 > 1441446236 0 4 0 1 8 00 A1BD8E9D78F7FE5C3E65D8AF8B48AD6246925553 > [GNUPG:] ERRSIG 7638D0442B90D010 1 8 00 1441446236 9 > [GNUPG:] NO_PUBKEY 7638D0442B90D010 > [GNUPG:] ERRSIG CBF8D6FD518E17E1 1 8 00 1441446733 9 > [GNUPG:] NO_PUBKEY CBF8D6FD518E17E1 > gpgv: Signature made Sat 05 Sep 2015 03:43:56 AM MDT using RSA key ID 46925553 > gpgv: Good signature from "Debian Archive Automatic Signing Key (7.0/wheezy) > <ftpmas...@debian.org>" > gpgv: Signature made Sat 05 Sep 2015 03:43:56 AM MDT using RSA key ID 2B90D010 > gpgv: Can't check signature: public key not found > gpgv: Signature made Sat 05 Sep 2015 03:52:13 AM MDT using RSA key ID 518E17E1 > gpgv: Can't check signature: public key not found > Release gpg signature does not verify. Looks to me like I have a valid Wheezy key, but not Jessie or oldstable. I've looked on the 'Net and in Martin Krafft's book. And I tried (from the mkdebmirror source): > gpg --keyring /usr/share/keyrings/debian-archive-keyring.gpg --export \ > | gpg --no-default-keyring --keyring trustedkeys.gpg --import it's output: > gpg: key 11F63C51: "Jamie Cameron <jcame...@webmin.com>" not changed > gpg: key 46925553: "Debian Archive Automatic Signing Key (7.0/wheezy) > <ftpmas...@debian.org>" not changed > gpg: key B98321F9: "Squeeze Stable Release Key > <debian-rele...@lists.debian.org>" not changed > gpg: key 473041FA: "Debian Archive Automatic Signing Key (6.0/squeeze) > <ftpmas...@debian.org>" not changed > gpg: key 65FFB764: "Wheezy Stable Release Key > <debian-rele...@lists.debian.org>" not changed > gpg: key 46925553: "Debian Archive Automatic Signing Key (7.0/wheezy) > <ftpmas...@debian.org>" not changed > gpg: key 518E17E1: public key "Jessie Stable Release Key > <debian-rele...@lists.debian.org>" imported > gpg: key 2B90D010: public key "Debian Archive Automatic Signing Key > (8/jessie) <ftpmas...@debian.org>" imported > gpg: key C857C906: public key "Debian Security Archive Automatic Signing Key > (8/jessie) <ftpmas...@debian.org>" imported > gpg: Total number processed: 9 > gpg: imported: 3 (RSA: 3) > gpg: unchanged: 6 > gpg: no ultimately trusted keys found Looks good, but mkdebmirror said: > ./mkdebmirror: 76: ./mkdebmirror: --rsync-extra=: not found > > ------- creating/updating a mirror of arch(s) amd64 ------- > ------- repository at mirror.picosecond.org/debian ------- > ------- dist: wheezy,jessie,oldstable, sections: main,contrib ------- > Mirroring to /var/www/debian from http://mirror.picosecond.org/debian/ > Arches: amd64 > Dists: wheezy,jessie,oldstable > Sections: main,contrib > Pdiff mode: use > Passive mode on. > Will clean up after mirroring. > Attempting to get lock ... > Updating remote trace files (using rsync) ... > receiving incremental file list > ./ > project/trace/debian.gtisc.gatech.edu > 294 100% 287.11kB/s 0:00:00 (xfer#1, to-check=3/7) > project/trace/ftp-master.debian.org > 104 100% 7.81kB/s 0:00:00 (xfer#2, to-check=2/7) > project/trace/mirror.picosecond.org > 290 100% 20.23kB/s 0:00:00 (xfer#3, to-check=1/7) > project/trace/syncproxy.wna.debian.org > 270 100% 18.83kB/s 0:00:00 (xfer#4, to-check=0/7) > > sent 234 bytes received 414 bytes 432.00 bytes/sec > total size is 958 speedup is 1.48 > Getting meta files ... > [ 0%] Getting: dists/wheezy/Release... #** GET > http://mirror.picosecond.org/debian/dists/wheezy/Release ==> 200 OK (2s) > ok > [ 0%] Getting: dists/wheezy/Release.gpg... #** GET > http://mirror.picosecond.org/debian/dists/wheezy/Release.gpg ==> 200 OK > ok > [ 0%] Getting: dists/jessie/Release... #** GET > http://mirror.picosecond.org/debian/dists/jessie/Release ==> 200 OK (1s) > ok > [ 0%] Getting: dists/jessie/Release.gpg... #** GET > http://mirror.picosecond.org/debian/dists/jessie/Release.gpg ==> 200 OK > ok > [ 0%] Getting: dists/oldstable/Release... #** GET > http://mirror.picosecond.org/debian/dists/oldstable/Release ==> 200 OK (1s) > ok > [ 0%] Getting: dists/oldstable/Release.gpg... #** GET > http://mirror.picosecond.org/debian/dists/oldstable/Release.gpg ==> 200 OK > ok > Duplicate dist wheezy. > WARNING: releasing 1 pending lock... > > Sat Oct 10 15:56:23 MDT 2015 An improvement, I think. It looks to me like it should work, but mkdebmirror didn't download anything but metadata. picosecond.org is a mirror just up the road from me. I've successfully used it as a source for Squeeze and Wheezy. df tells me that there is 174G of available space on my disk. My mirror is in /var/www/debian (don't ask why -- I don't remember). Analysis, instructions, and suggestions would be appreciated. -- Glenn English