Ukubuyekezwa kwe-apt kwehluleka nge-NO_PUBKEY ngemva kokwengeza isitoreji se-VPN

Umthombo we-apt womthengisi wakho we-VPN wonakalise isiphathi samaphakethe, futhi isixazululo yisinqumo, hhayi umyalo. NO_PUBKEY, noma isikhalo sokuthi isitoreji asinayo ifayela le-Release, kusho ukuthi i-apt yenqabile ukwethemba lowo mthombo, ngakho konke ukusebenza kwamaphakethe okulandela kuqhubeka kuphrinta isexwayiso esifanayo. Ithungele yona ngokwayo cishe ayinacala. Phendula imibuzo emithathu yokuthi usawufuna yini lowo mthombo, futhi ukulungiswa okufanele kuyeza cishe ngomshini.

Okokuqala, beka ukwehluleka esigabeni esifanele

Ukwehluleka kokuthemba kubiza ifayela lomthombo futhi kungaba ukhiye ongekho noma ifayela le-Release elingekho. Ukwehluleka kokuthutha kubukeka ngendlela ehlukile: amaphutha esitifiketi se-TLS, ukuxhumeka okunqatshiwe, ukuphela kwesikhathi, noma i-proxy enqaba i-CONNECT. Lowo mehluko unquma ukuthi ufunda ikuphi isihloko, ngoba i-VPN ebamba i-TLS noma evimba umsingathi womthengisi ikhiqiza amaphutha okuthutha, hhayi amaphutha esiginesha.

Gijima sudo apt update wedwa bese ufunda isiphetho, ungazinaki iziphumo ezigciniwe ezingaphezulu. Umugqa obalulekile ubiza /etc/apt/sources.list.d/ futhi ukutshela ukuthi yiliphi ifayela okufanele ulivule.

Uma ukwehluleka kulandela ukuphakama kwethungele, hlola ngethungele liphansi nange-DNS elixazululwa isixazululi sohlelo. Umthombo osebenza ngaphandle kwe-VPN uyindaba yokuhambisa noma yokuvimbela, futhi akukho kulawulwa kokhiye okuzokulungisa lokho.

Imibuzo emithathu ekhetha indlela

Ingabe usafaka noma uthuthukisa amaphakethe alo mthombo? Uma iklayenti lisetshenziswa ngokoqobo, lungisa ukuthemba. Uma ufake iklayenti kanye futhi manje ungenisa iphrofayela evamile ku-NetworkManager, umthombo uwumthwalo ongewele futhi ukususa ukulungiswa okuqotho.

Okwesibili, ingabe umthengisi ushicilela ukhiye nesigxivizo somunwe ongasiqinisekisa ngaphandle kwesiteshi? Okwesithathu, ubani olawula okhiye kule ndawo yokusingatha: ukusatshalaliswa noma wena? Umthombo osayinwe ngokhiye ongakwazi ukusiqinisekisa uyigunya lokubuyekeza okufanele ungabinikeze lona.

Impendulo ethi cha embuzweni wokuqala iqeda ukuhlaziya. Impendulo ethi yebo kuzo zontathu izinto iholela ekulungisweni kwe-signed-by, okuyisihlelo kuphela esisebenza futhi esihlala sibukeka. Ukuhlanganisa izindlela ezimbili, ngokugcina umthombo nokuphoqelela ukuba udlule, iyona ndlela eyodwa okufanele ikhishwe ngokusobala.

Kungani i-trusted=yes ibukeka njengokulungiswa kodwa ingeyona

Ikhasi lencwadi yesandla ye-sources.list likusho ngqo. Ukusetha ukukhetha Trusted ku-yes kutshela i-apt ukuthi yamukele umthombo ngisho lapho kwehluleka ukuqinisekisa, okucisha i-apt-secure yalelo gciwane. Ikhasi likugcina lokho endaweni yasendaweni, uma kusetshenziswa nhlobo.

Lokhu akulona uhlobo oluncane lokwethemba umthengisi. Kususa umbuzo wokuthi ubani owasayina inkomba, ngakho noma ubani ongaphendula igama lalowo msingathi angayinikeza imishini yakho amaphakethe afakwa njenge-root.

Indlela yokulungisa: thola ukhiye, bese uwubopha

Thola ukhiye endaweni umthengisi ayibhalile bese uwuvula endandatho yokhiye elawulwa umqondisi, bese uqondisa umugqa wegciwane kulelo fayela ukuze ukuthemba kungagudluki.

1. Funda umugqa ohlulekayo ukuthola i-ID yokhiye negama lefayela lomthombo.
2. Landa ukhiye kamthengisi ohlome nge-ASCII bese ugijima gpg --dearmor ku-/etc/apt/keyrings/vendor-name.gpg.
3. [signed-by=/etc/apt/keyrings/vendor-name.gpg] kwengezelele ekufakweni efayeleni .list lalowo mthengisi.
4. Gijima sudo apt update bese uqinisekisa ukuthi umthombo uthola inkomba esikhundleni sokuphinda isexwayiso sesiginesha.

Khetha /usr/share/keyrings kumakhiye afika nephakethe bese ukhetha /etc/apt/keyrings kumakhiye owabeka ngesandla. Lokhu kwehlukanisa akukona ukuhlobisa: kutshela umqondisi olandelayo ukuthi imaphi amakhiye azosinda ekuthuthukisweni kwephakethe nokuthi amaphi adinga umuntu.

Qinisekisa isigxivizo somunwe ngokumelene nenani elishicilelwe umthengisi ngaphambi kokwethemba. I-ID yokhiye enamathiselwe esihlokweni senkundla iyona ndlela imishini eqala ngayo ukwethemba igunya lokubuyekeza okungekho muntu ongalibiza.

Indlela yokususa, nokuthi kungani iphutha lingabuya

Bheka ukuthi umfaki wabhala ini ngempela, ngoba amafayela amaningi angasho umthengisi oyedwa futhi elinye lawo ngokuvamile liyikhophi esele.

grep -r . /etc/apt/sources.list.d/
sudo rm /etc/apt/sources.list.d/vendor.list

I-apt ifunda kuphela amafayela .list kanye .sources kusukela kuleyo ndawo, ngakho ikhophi .save noma .distUpgrade isivele ishunqiwe; noma kunjalo ukuyisusa kuvimbela umfundi wakamuva ukuthi angayibuyiseli ngephutha. Ukususa umthombo akukhiphi lutho, futhi i-apt ingabe isichaza iphakethe le-VPN elifakiwe njengelifakwe endaweni noma elingasatholakali, okuwumlayezo wesimo sephakethe hhayi ukubuya kwephutha lokuthemba.

Icala eliphindaphindayo yisiluleko esidala esasifaka okhiye nge-apt-key endandathweni yokuthemba yomhlaba. Leyo ndlela ayisasebenzi, futhi ukuthuthukiswa kokukhishwa kungashiya ukhiye uwisekile noma ungabuzwanga nhlobo, futhi yikho kanye okwenza iphutha elalithule unyaka livele ngiviki lapho uthuthukisa khona. Hlola /etc/apt/trusted.gpg.d/, bese uhambisa isinqumo sokuthemba emugqeni wegciwane lapho kufanele khona. Uma umthengisi esaphrinta imiyalelo ye-apt-key, sebenzisa i-signed-by noma kunjalo; yisihlelo esibhalwe encwadini yesandla, futhi yisona esisinda ekuthuthukisweni.