Debian Signing

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Debian Signing

Tomoe
Hi,

I have a question regarding debian apt repositories in Artifactory.

If I understand correctly, in debian packaging and apt repository configuration, you can sign deb package files as well as you can sign *repo*.

Looking at this document:
https://www.jfrog.com/confluence/display/RTF/Debian+Repositories#DebianRepositories-SigningDebianPackages

I wonder if Artifactory can do both package files signing and repo signing, or it means one of the two things.
Could anyone clarify?

Any help would be highly appreciated.

Best,
Tomoe


Reply | Threaded
Open this post in threaded view
|

Re: Debian Signing

samir
Hello there,

Exactly the same thing I wanted to ask. We use open-source Artifactory at work, and clarification on debian package and repo metadata signing would help us deciding on buying pro version. We need to know if Artifactory Pro signing plugin would sign deb package files, please help us with the answer!

S
Reply | Threaded
Open this post in threaded view
|

Re: Debian Signing

omar
Hello,

Yes, Artifactory does support Signing Debian Packages. Please check our guide for more details. All packages are signed under the same key, so in this sense, the repository is also signed.

Best Regards,
Omar