debian - 如何从未签名的存储库安装 debian 包

Question

尝试从未签名的存储库将 Debian 软件包安装到 Debian 9:

# apt-get --allow-unauthenticated update
Get:1 http://files.freeswitch.org/repo/deb/freeswitch-1.8 stretch InRelease [3,196 B]
Hit:2 http://security.debian.org/debian-security stretch/updates InRelease
Ign:1 http://files.freeswitch.org/repo/deb/freeswitch-1.8 stretch InRelease
Ign:3 http://debianmirror.nkn.in/debian stretch InRelease
Hit:4 http://debianmirror.nkn.in/debian stretch Release
Fetched 3,196 B in 1s (1,940 B/s)
Reading package lists... Done
W: GPG error: http://files.freeswitch.org/repo/deb/freeswitch-1.8 stretch InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BD3189F5A2B57698
W: The repository 'http://files.freeswitch.org/repo/deb/freeswitch-1.8 stretch InRelease' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.

但我需要它。我该怎么做？谢谢!

Answer 1

在不受信任的存储库的 sources.list 条目中，您可以在条目的前两个元素之间添加“[trusted=yes]”(带方括号)，如 deb [trusted=yes] http://...
这会将错误变成警告，因为它在过去的 Debian 版本中是默认设置，而不必完全禁用签名验证