I've set up a local APT mirror using apt-mirror2 to serve specific versions of Debian packages for my environment. However, since I don't update this mirror regularly, I've been encountering issues with expired repository metadata, resulting in errors like: E: Release file for http:///aptmirror/tagging/debian12.7/mirror/debian/20240731T204419Z/dists/bookworm-backports/InRelease is expired (invalid since X days). Updates for this repository will not be applied. Here is my client sources list: deb http:///aptmirror/tagging/debian12.7/debian bookworm main contrib non-free non-free-firmware deb http:///aptmirror/tagging/debian12.7/debian-security bookworm-security main contrib non-free non-free-firmware deb http:///aptmirror/tagging/debian12.7/debian bookworm-backports main contrib non-free deb http:///aptmirror/tagging/debian12.7/debian bookworm-updates main contrib non-free non-free-firmware deb http:///aptmirror/tagging/debian12.7/debian/20240731T204419Z/ bookworm-backports main contrib non-free non-free-firmware **Current Workarounds** To address this, I've found two potential solutions: Using the [check-valid-until=no] option directly in my sources.list file for the affected repositories. This seems to allow me to bypass the Valid-Until check selectively for specific entries: deb [check-valid-until=no] http:///aptmirror/tagging/debian12.7/mirror/debian/20240731T204419Z/ bookworm-backports main contrib non-free non-free-firmware Setting Acquire::Check-Valid-Until "false"; in /etc/apt/apt.conf to globally disable the Valid-Until check across all repositories. Which approach is preferable for my use case, considering I don’t update my APT mirror regularly? What are the security risks associated with bypassing the Valid-Until check for repository metadata? I want to ensure that I'm making an informed decision without compromising the security of my system. Are there any best practices or additional steps I can take to avoid the "InRelease is expired" issue without sacrificing too much security? Would love to hear how others manage this in their environments.

**Seeking Advice: Managing a Local APT Package Mirror with Custom Tags** Hello everyone, I'm looking for some advice and best practices on managing a local APT package mirror with custom tags. Here's the scenario I'm working with: **The Goal** I have set up the local APT mirror using apt-mirror, and it works fine for me. But I need to organize the packages on my local APT mirror with custom tags, allowing client machines to install packages based on these tags. I came across the debtags tool, which seems to allow for the manual addition of tags to packages. However, I'm open to other suggestions or methods that might be more efficient or easier to manage. **Questions** - Has anyone implemented a similar setup using debtags? If so, how did it work out for you? - Are there any other tools or methods that you would recommend for managing package tags and installations? - How do you handle distributing tag information to multiple client machines efficiently? - Any tips on automating this process to reduce manual work?

I use Debians apt-mirror to create a local mirror. Here's the entry in /etc/apt/mirror.list for getting lastest Debian 11 - that is 11.7. deb http://ftp.at.debian.org/debian bullseye main What to do when I need a specific minor version (e.g. 11.1) of bookworm? How can I get this with apt-mirror or otherwise?

Our organisation maintain a custom mirror for the deb package we publish. We build deb package for each project and publish it to the custom deb mirror (mentioned earlier) Recently one of the developers created a deb package(for a project xyz) with wrong version we can see the wrong version appearing on the mirror web package (index page) which appears something like this  We want to clean this I see he ran 3 commands to publish the package to the mirror

sudo aptly repo add unstable xyz_2.7.1.deb
sudo aptly snapshot create xyz2.7.1-unstable_2023-01-14 from repo unstable
sudo aptly publish -passphrase=asabc switch xenial xyz2.7.1-unstable_2023-01-14

Now I had manage to delete the package and snapshot using the below command

sudo aptly repo remove unstable xyz_2.7.1_all
 sudo aptly snapshot drop zyz2.7.1-unstable_2023-01-14

But even after deleting the repo and dropping the snapshot, I still see the package appearing on the web page that I have listed above and its downloadable using HTTP client like wget , curl Is there anything else I need to do to ensure the package is not shown on the web page?

I want to install Play On Linux and I was trying to update and upgrade the packages before, but I'm having a problem, when I run the command sudo apt update then sudo apt upgrade here's what I get Reading package lists... Done Building dependency tree... Done Reading state information... Done Calculating upgrade... Done The following packages have been kept back: libsmbclient libwbclient0 python3-samba samba-common samba-common-bin samba-libs smbclient xserver-common xserver-xephyr xserver-xorg-core xserver-xorg-legacy The following packages will be upgraded: libnss-myhostname libqt5core5a libqt5dbus5 libqt5gui5 libqt5network5 libqt5widgets5 libreoffice-base-drivers libreoffice-sdbc-hsqldb mesa-va-drivers qt5-gtk-platformtheme 10 upgraded, 0 newly installed, 0 to remove and 11 not upgraded. Need to get 13.3 MB of archives. After this operation, 14.3 kB of additional disk space will be used. Do you want to continue? [Y/n] y Err:1 http://mirror.marwan.ma/ubuntu jammy-updates/universe amd64 libqt5core5a amd64 5.15.3+dfsg-2ubuntu0.2 403 Forbidden [IP: 196.200.160.70 80] Err:2 http://mirror.marwan.ma/ubuntu jammy-updates/universe amd64 libqt5dbus5 amd64 5.15.3+dfsg-2ubuntu0.2 403 Forbidden [IP: 196.200.160.70 80] Err:3 http://mirror.marwan.ma/ubuntu jammy-updates/universe amd64 libqt5network5 amd64 5.15.3+dfsg-2ubuntu0.2 403 Forbidden [IP: 196.200.160.70 80] Err:4 http://mirror.marwan.ma/ubuntu jammy-updates/universe amd64 libqt5gui5 amd64 5.15.3+dfsg-2ubuntu0.2 403 Forbidden [IP: 196.200.160.70 80] Err:5 http://mirror.marwan.ma/ubuntu jammy-updates/universe amd64 libqt5widgets5 amd64 5.15.3+dfsg-2ubuntu0.2 403 Forbidden [IP: 196.200.160.70 80] Err:6 http://mirror.marwan.ma/ubuntu jammy-updates/universe amd64 libreoffice-base-drivers amd64 1:7.3.7-0ubuntu0.22.04.1 403 Forbidden [IP: 196.200.160.70 80] Err:7 http://mirror.marwan.ma/ubuntu jammy-updates/universe amd64 libreoffice-sdbc-hsqldb amd64 1:7.3.7-0ubuntu0.22.04.1 403 Forbidden [IP: 196.200.160.70 80] Err:8 http://mirror.marwan.ma/ubuntu jammy-updates/universe amd64 mesa-va-drivers amd64 22.0.5-0ubuntu0.1 403 Forbidden [IP: 196.200.160.70 80] Err:9 http://mirror.marwan.ma/ubuntu jammy-updates/universe amd64 qt5-gtk-platformtheme amd64 5.15.3+dfsg-2ubuntu0.2 403 Forbidden [IP: 196.200.160.70 80] Err:10 http://mirror.marwan.ma/ubuntu jammy-updates/universe amd64 libnss-myhostname amd64 249.11-0ubuntu3.6 403 Forbidden [IP: 196.200.160.70 80] E: Failed to fetch http://mirror.marwan.ma/ubuntu/pool/universe/q/qtbase-opensource-src/libqt5core5a_5.15.3%2bdfsg-2ubuntu0.2_amd64.deb 403 Forbidden [IP: 196.200.160.70 80] E: Failed to fetch http://mirror.marwan.ma/ubuntu/pool/universe/q/qtbase-opensource-src/libqt5dbus5_5.15.3%2bdfsg-2ubuntu0.2_amd64.deb 403 Forbidden [IP: 196.200.160.70 80] E: Failed to fetch http://mirror.marwan.ma/ubuntu/pool/universe/q/qtbase-opensource-src/libqt5network5_5.15.3%2bdfsg-2ubuntu0.2_amd64.deb 403 Forbidden [IP: 196.200.160.70 80] E: Failed to fetch http://mirror.marwan.ma/ubuntu/pool/universe/q/qtbase-opensource-src/libqt5gui5_5.15.3%2bdfsg-2ubuntu0.2_amd64.deb 403 Forbidden [IP: 196.200.160.70 80] E: Failed to fetch http://mirror.marwan.ma/ubuntu/pool/universe/q/qtbase-opensource-src/libqt5widgets5_5.15.3%2bdfsg-2ubuntu0.2_amd64.deb 403 Forbidden [IP: 196.200.160.70 80] E: Failed to fetch http://mirror.marwan.ma/ubuntu/pool/universe/libr/libreoffice/libreoffice-base-drivers_7.3.7-0ubuntu0.22.04.1_amd64.deb 403 Forbidden [IP: 196.200.160.70 80] E: Failed to fetch http://mirror.marwan.ma/ubuntu/pool/universe/libr/libreoffice/libreoffice-sdbc-hsqldb_7.3.7-0ubuntu0.22.04.1_amd64.deb 403 Forbidden [IP: 196.200.160.70 80] E: Failed to fetch http://mirror.marwan.ma/ubuntu/pool/universe/m/mesa/mesa-va-drivers_22.0.5-0ubuntu0.1_amd64.deb 403 Forbidden [IP: 196.200.160.70 80] E: Failed to fetch http://mirror.marwan.ma/ubuntu/pool/universe/q/qtbase-opensource-src/qt5-gtk-platformtheme_5.15.3%2bdfsg-2ubuntu0.2_amd64.deb 403 Forbidden [IP: 196.200.160.70 80] E: Failed to fetch http://mirror.marwan.ma/ubuntu/pool/universe/s/systemd/libnss-myhostname_249.11-0ubuntu3.6_amd64.deb 403 Forbidden [IP: 196.200.160.70 80] E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing? I have tried apt-get update --fix-missing and here's what it shows sudo apt-get update --fix-missing Ign:1 https://mirror.airenetworks.es/linuxmint/packages vanessa InRelease Hit:2 https://mirror.airenetworks.es/linuxmint/packages vanessa Release Hit:4 http://security.ubuntu.com/ubuntu jammy-security InRelease Hit:5 http://mirror.marwan.ma/ubuntu jammy InRelease Get:6 http://mirror.marwan.ma/ubuntu jammy-updates InRelease [114 kB] Get:7 http://mirror.marwan.ma/ubuntu jammy-backports InRelease [99.8 kB] Get:8 http://mirror.marwan.ma/ubuntu jammy-updates/main amd64 c-n-f Metadata [11.4 kB] Fetched 225 kB in 6s (37.7 kB/s) Reading package lists... Done when I run the command sudo apt upgrade again nothing changes, I tried to install Play On Linux anyways using the command sudo apt install playonlinux but it didn't work, what do you thing the problem is?

Let's take example of Ubuntu and Kali Linux, both are based on Debian Linux. but many packages in Kali's apt sources are not available in Ubuntu's apt sources. But if we add Kali's sources and GPG-keys. Those package will be installable on Ubuntu directly by apt install. I need to add all apt repositories on my Debian system so that, I can install any package from any other Debian based operating system. EDIT: Okay, I know this is a bad idea. But what if I wanna force use it in a VM or to use it once then remove the sources. (Kali is an example what about other distros)

I set up apt-mirror with the following config: GNU nano 2.5.3 File: /etc/apt/mirror.list ############# config ################## # # set base_path /var/spool/apt-mirror # # set mirror_path $base_path/mirror # set skel_path $base_path/skel # set var_path $base_path/var # set cleanscript $var_path/clean.sh # set defaultarch # set postmirror_script $var_path/postmirror.sh # set run_postmirror 0 set nthreads 20 set _tilde 0 # ############# end config ############## deb-amd64 http://archive.ubuntu.com/ubuntu xenial main restricted universe multiverse deb-amd64 http://archive.ubuntu.com/ubuntu xenial-security main restricted universe multiverse deb-amd64 http://archive.ubuntu.com/ubuntu xenial-updates main restricted universe multiverse deb-i386 http://archive.ubuntu.com/ubuntu xenial main restricted universe multiverse deb-i386 http://archive.ubuntu.com/ubuntu xenial-security main restricted universe multiverse deb-i386 http://archive.ubuntu.com/ubuntu xenial-updates main restricted universe multiverse deb http://ubuntu.kurento.org xenial kms6 clean http://archive.ubuntu.com/ubuntu However, I cannot seem to be able to mirror ubuntu.kurento.org Whenever I do sudo apt-get update sudo apt-get install kurento-media-server-6.0 I get the following messages: > E: Unable to locate package kurento-media-server-6.0 E: Couldn't find > any package by glob 'kurento-media-server-6.0' E: Couldn't find any > package by regex 'kurento-media-server-6.0' On the client machine I am connecting to my local mirror and I am able to get updates etc but not for kurento package. Is there anything I am missing?

we host a local mirror for Ubuntu and Debian packages. root@apt-mirror:~# dpkg -l | grep mirror ii apt-mirror 0.5.4-1 all APT sources mirroring tool Mirroring and access works fine without ssl. root@db2:~# cat /etc/apt/sources.list.d/custom.apt-mirror.ubuntu.list deb http://apt-mirror.custom.de/de.archive.ubuntu.com/ubuntu bionic main universe deb http://apt-mirror.custom.de/de.archive.ubuntu.com/ubuntu bionic-security main universe deb http://apt-mirror.custom.de/de.archive.ubuntu.com/ubuntu bionic-updates main universe But if I want use access via https I get the following error message OK:1 http://apt-mirror.custom.de/de.archive.ubuntu.com/ubuntu bionic-security InRelease Ign:2 https://apt-mirror.custom.de/de.archive.ubuntu.com/ubuntu bionic InRelease OK:3 http://apt-mirror.custom.de/de.archive.ubuntu.com/ubuntu bionic-updates InRelease OK:4 http://apt-mirror.custom.de/repos.influxdata.com/ubuntu bionic InRelease Fehl:5 https://apt-mirror.custom.de/de.archive.ubuntu.com/ubuntu bionic Release Certificate verification failed: The certificate is NOT trusted. The certificate chain uses insecure algorithm. Could not handshake: Error in the certificate verification. [IP: XXX.XXX.XXX.XXX 443] Paketlisten werden gelesen... Fertig E: Das Depot »https://apt-mirror.custom.de/de.archive.ubuntu.com/ubuntu bionic Release« enthält keine Release-Datei mehr. N: Eine Aktualisierung von solch einem Depot kann nicht auf eine sichere Art durchgeführt werden, daher ist es standardmäßig deaktiviert. N: Weitere Details zur Erzeugung von Paketdepots sowie zu deren Benutzerkonfiguration finden Sie in der Handbuchseite apt-secure(8). All certificates in the chain are available on the host, so an test with openssl is successfully: root@db2:~# openssl s_client -showcerts -connect apt-mirror.custom.de:443 CONNECTED(00000005) depth=3 C = DE, O = CUSTOM, CN = CUSTOM-Root CA verify return:1 depth=2 C = DE, O = CUSTOM, CN = CUSTOM-Policy CA Intern verify return:1 depth=1 C = DE, O = CUSTOM, CN = CUSTOM-Server CA Intern verify return:1 depth=0 C = DE, ST = NRW, L = Bonn, O = CUSTOM, OU = Betrieb, CN = apt-mirror.custom.de verify return:1 --- Certificate chain 0 s:C = DE, ST = NRW, L = Bonn, O = CUSTOM, OU = Betrieb, CN = apt-mirror.custom.de i:C = DE, O = CUSTOM, CN = CUSTOM-Server CA Intern -----BEGIN CERTIFICATE----- MIIGCjCCA/KgAwIBAgITMwAAAX9YNM4nCd6z0QACAAABfzANBgkqhkiG9w0BAQsF ADA8MQswCQYDVQQGEwJERTENMAsGA1UEChMEQkdIVzEeMBwGA1UEAxMVQkdIVy1T ZXJ2ZXIgQ0EgSW50ZXJuMB4XDTE4MTAwOTA3MzgxNVoXDTIwMTAwODA3MzgxNVow ############################# lRV91hVW9bj4KsbyC4FGfK8+fgLPwlxBD+jwje43p9ZPY9WTxwcPFtIbT3fzxygX /wmwQRRtg3aoICE61guje3URoP/qt+KSjFBmJ6cOGJne/rVXZ5etHHfSNfNqfJR4 ZAxfVfDN70m7SjYieB0DsJfbhYFqf8uaEQvkcMPr/vVXowDrjMTRBl+1CtM+q3G5 KzZm9qKKlZjWbAeuQ8o5myeu+E6tblJTQioz1jxlcSdWG0DjcjcDcPBFDB4/Qblb KqPiEsGU+qRiwXqNjEWgSdUenOo4PlVVNUf+CsbbsoOdFV9qfG2G/ntXXbmoSPOZ ZWv/8tDYfV+BCYVklcw= -----END CERTIFICATE----- 1 s:C = DE, O = CUSTOM, CN = CUSTOM-Server CA Intern i:C = DE, O = CUSTOM, CN = CUSTOM-Policy CA Intern -----BEGIN CERTIFICATE----- MIIGdDCCBFygAwIBAgITaQAAABQg6MjMFAQ5mAAAAAAAFDANBgkqhkiG9w0BAQsF ADA8MQswCQYDVQQGEwJERTENMAsGA1UEChMEQkdIVzEeMBwGA1UEAxMVQkdIVy1Q b2xpY3kgQ0EgSW50ZXJuMB4XDTE4MDUyMjEyNDAwOVoXDTIzMDUyMjEyNTAwOVow PDELMAkGA1UEBhMCREUxDTALBgNVBAoTBEJHSFcxHjAcBgNVBAMTFUJHSFctU2Vy dmVyIENBIEludGVybjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMtO ############################# EkbVV9UkXWRosy8ENxfcMwynd7xQoTzTywYUazNaX9NcRPvwZZ4NfmP9Mxqru7Hj PofizUDnpKyp521brf9b7d7tjM4cYiS1beSiraOuW+9MBsf6pnuYpORfKvCa3wEP fNpjXPkpCU30xJadqMGR1xT0fehd0vJpXsdixcNJEDBMY+cKeGDpaYcTY1BmtUtZ 2YIXQv8BGZP6YsWJpX9odjW9I7/WS74b -----END CERTIFICATE----- 2 s:C = DE, O = CUSTOM, CN = CUSTOM-Policy CA Intern i:C = DE, O = CUSTOM, CN = CUSTOM-Root CA -----BEGIN CERTIFICATE----- MIIGCTCCA/GgAwIBAgIKYUYc4wAAAAAAAzANBgkqhkiG9w0BAQUFADAzMQswCQYD VQQGEwJERTENMAsGA1UEChMEQkdIVzEVMBMGA1UEAxMMQkdIVy1Sb290IENBMB4X DTEyMDYyNjA5MzExOVoXDTIzMDYyNjA5NDExOVowPDELMAkGA1UEBhMCREUxDTAL ############################# s/oRVYoW20m5bN26B0jsmVA41HPFH/xfRzciRy8xi0xYoS5QDBSMEFBdloCcAdlR u77otTQ45MhW7iJ7qefJhlGixnaYaNe8my0rKFEZdT+So46WsLjYv7iE11Dp4tbJ abDDRyYLQJYbGBoJdeEY30RJ7LFGpNlu6Mhj7puZza58uG/2VRs/olRbo9jCuYnc /EeOmnBXGB1caha+og== -----END CERTIFICATE----- 3 s:C = DE, O = CUSTOM, CN = CUSTOM-Root CA i:C = DE, O = CUSTOM, CN = CUSTOM-Root CA -----BEGIN CERTIFICATE----- MIIF7jCCA9agAwIBAgIQLjBY331L64pF+SwDb+wecDANBgkqhkiG9w0BAQUFADAz MQswCQYDVQQGEwJERTENMAsGA1UEChMEQkdIVzEVMBMGA1UEAxMMQkdIVy1Sb290 IENBMB4XDTEyMDYyNjA4MTE0MFoXDTMwMDYyNjA4MjEzMFowMzELMAkGA1UEBhMC ############################## DhW0PUKRBt+5qqyaHsCQJXGYqRREy/bznBQF7xV3nlRXqSlx+BoSR0PLjwgChzIj AQWUjA0N3RYhQmb+jyRm48xJJRBXi4fVFzkh8+qQz9neF91XPqp6pHs57A44gPEj YmlM58+4n2G90LohJT/aythka9QBjIqyLomMl4CQ5F4H+Q== -----END CERTIFICATE----- --- Server certificate subject=C = DE, ST = NRW, L = Bonn, O = CUSTOM, OU = Betrieb, CN = apt-mirror.custom.de issuer=C = DE, O = CUSTOM, CN = CUSTOM-Server CA Intern --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: X25519, 253 bits --- SSL handshake has read 6963 bytes and written 413 bytes Verification: OK --- New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES256-GCM-SHA384 Session-ID: 80BBED0A0E87437094755EB7D611B8FF8ED3D94837500D84CDBDBAA4282516E9 Session-ID-ctx: Master-Key: 915E404C840EC1C7EF840B618444D6BDC92FF12A2620000292E120C0F9B97FD1846A9B1F8B7835C0A8E3CE5F5AD6400D PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 300 (seconds) TLS session ticket: 0000 - e9 b0 15 43 aa ac 79 99-18 1e fb 60 03 5a 7a d5 ...C..y....`.Zz. 0010 - 27 20 e2 7a 87 de ea fe-0a 32 c6 57 e3 95 09 f9 ' .z.....2.W.... 0020 - 8e dc 92 7f 80 1e 87 5f-af ad 63 70 ef e6 86 d0 ......._..cp.... 0030 - 12 f5 67 65 26 2c 4f 02-a0 a6 a1 a8 f0 53 eb c2 ..ge&,O......S.. 0040 - 2d 53 ba 95 13 50 b0 cb-a9 cf a4 4f fe b4 3c 24 -S...P.....O..... 0080 - dd c5 f0 f0 db 94 76 65-12 88 b1 00 4b 0b 88 f1 ......ve....K... 0090 - 5e dd 4c cc 50 5d 43 f7-10 86 1e 42 ea 8f 4c b9 ^.L.P]C....B..L. 00a0 - 30 5e b9 ec 83 78 c9 35-d7 00 9d 44 7a a2 07 be 0^...x.5...Dz... 00b0 - 53 57 78 43 b4 dc 2c f7-76 bd e6 ac 45 f7 5b 36 SWxC..,.v...E.6 00c0 - 68 1a 07 f8 25 4e 4b 1e-f6 26 c8 89 3b 3a 38 1c h...%NK..&..;:8. Start Time: 1580217557 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: yes --- I don't want to skip the verification, like it is written here: [apt-accept-an-invalid-certificate Why apt say, the chain use an insecure algorithm? Thanks

currently I'm trying to install Debian 10 (newest version) on my freshly rested VM. I'm getting no errors, until the installer tries to Configure the package manager. Then I get the error, that "the attempt to configure apt to install additional packages from the CD failed." When I ignore that, and enter my mirror country and so, when the installer is trying to configure apt, it says that there's a "Bad archive mirror". So, what can I do? Any Ideas? I'm happy about everything :)

I am using the official Kali mirror which is http.kali.org. Which redirects to other best mirrors during package installation.

cat /etc/apt/sources.list

# See https://www.kali.org/docs/general-use/kali-linux-sources-list-repositories/ 
deb http://http.kali.org/kali  kali-rolling main contrib non-free

# Additional line for source packages
# deb-src http://http.kali.org/kali  kali-rolling main contrib non-free

But, the problem is there are some lazy mirrors. Two of them are http://ftp.free.fr/pub/kali and http://archive-4.kali.org/kali . They're super slow but often chosen. They grab in 100-150 kBps where others grab in 1300+ kBps. While installing large packages it takes so long that I need immediately. I want to never use these two mirrors while installation. Is there any way I can prevent these mirrors from being used when using the official(http.kali.org) mirror?

Hi there i new to linux and I just enable Raid 10 as a result i can only connect through a putty session and not remote desktop, everything was working fine untill i followed this article https://magpi.raspberrypi.org/articles/build-a-raspberry-pi-nas I have tried to enable the VNC server which was enabled previously and i have tried to insta xrdp again which i did previously this is part of the error message I am getting Could not open file /var/lib/apt/lists/partial/raspbian.raspberrypi.org_raspbian_dists_buster_Release - open (13: Permission denied) [IP: 93.93.128.193 80] Reading package lists... Done W: Not using locking for read only lock file /var/lib/apt/lists/lock W: Problem unlinking the file /var/lib/apt/lists/partial/raspbian.raspberrypi.org_raspbian_dists_buster_InRelease - PrepareFiles (13: Permission denied) W: Problem unlinking the file /var/lib/apt/lists/partial/archive.raspberrypi.org_debian_dists_buster_InRelease - PrepareFiles (13: Permission denied) W: Problem unlinking the file /var/lib/apt/lists/partial/raspbian.raspberrypi.org_raspbian_dists_buster_Release - PrepareFiles (13: Permission denied) E: The repository 'http://raspbian.raspberrypi.org/raspbian buster Release' no longer has a Release file. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. W: Problem unlinking the file /var/lib/apt/lists/partial/archive.raspberrypi.org_debian_dists_buster_Release - PrepareFiles (13: Permission denied) E: The repository 'http://archive.raspberrypi.org/debian buster Release' no longer has a Release file. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. W: Problem unlinking the file /var/cache/apt/pkgcache.bin - RemoveCaches (30: Read-only file system) W: Problem unlinking the file /var/cache/apt/srcpkgcache.bin - RemoveCaches (30: Read-only file system)

I'm updating one of my systems and I get an error which I don't know how to fix or what the problem is. Here is the error: E: Failed to fetch http://the.earth.li/debian/dists/stretch-updates/main/binary-i386/Packages 404 Not Found [IP: 46.43.34.31 80] E: Failed to fetch http://the.earth.li/debian/dists/stretch/main/binary-i386/Packages 404 Not Found [IP: 46.43.34.31 80] E: Some index files failed to download. They have been ignored, or old ones used instead. --------------- root /home/kristjan # apt update Hit:1 http://ftp.debian.org/debian stretch-backports InRelease Hit:2 http://security.debian.org/debian-security stretch/updates InRelease Hit:3 http://download.virtualbox.org/virtualbox/debian stretch InRelease Hit:4 https://download.mono-project.com/repo/debian stable-stretch InRelease Hit:5 http://www.deb-multimedia.org stretch InRelease Hit:6 http://repo.steampowered.com/steam precise InRelease Hit:7 https://deb.torproject.org/torproject.org stretch InRelease Ign:8 http://the.earth.li/debian stretch InRelease Get:9 http://the.earth.li/debian stretch-updates InRelease [91.0 kB] Get:10 http://the.earth.li/debian stretch Release [118 kB] Get:11 http://the.earth.li/debian stretch-updates/main Sources.diff/Index [8,608 B] Get:12 http://the.earth.li/debian stretch-updates/main i386 Packages.diff/Index [8,608 B] Get:12 http://the.earth.li/debian stretch-updates/main i386 Packages.diff/Index [8,608 B] Ign:12 http://the.earth.li/debian stretch-updates/main i386 Packages.diff/Index Get:15 http://the.earth.li/debian stretch Release.gpg [2,434 B] Get:16 http://the.earth.li/debian stretch-updates/main Sources 2019-02-21-2009.35.pdiff [10.2 kB] Get:17 http://the.earth.li/debian stretch-updates/main Sources 2019-03-27-2010.32.pdiff [471 B] Get:18 http://the.earth.li/debian stretch-updates/main Sources 2019-03-30-2008.27.pdiff [726 B] Get:19 http://the.earth.li/debian stretch-updates/main amd64 Packages 2019-02-21-2009.35.pdiff [4,149 B] Get:20 http://the.earth.li/debian stretch-updates/main amd64 Packages 2019-03-27-2010.32.pdiff [531 B] Get:21 http://the.earth.li/debian stretch-updates/main amd64 Packages 2019-03-30-2008.27.pdiff [1,599 B] Get:22 http://the.earth.li/debian stretch-updates/main Translation-en 2019-02-21-2009.35.pdiff [5,483 B] Get:18 http://the.earth.li/debian stretch-updates/main Sources 2019-03-30-2008.27.pdiff [726 B] Get:22 http://the.earth.li/debian stretch-updates/main Translation-en 2019-02-21-2009.35.pdiff [5,483 B] Get:21 http://the.earth.li/debian stretch-updates/main amd64 Packages 2019-03-30-2008.27.pdiff [1,599 B] Ign:23 http://the.earth.li/debian stretch-updates/main i386 Packages Get:24 http://the.earth.li/debian stretch/non-free Sources [79.4 kB] Get:25 http://the.earth.li/debian stretch/main Sources [6,746 kB] Get:26 http://the.earth.li/debian stretch/main i386 Packages [7,064 kB] Get:26 http://the.earth.li/debian stretch/main i386 Packages [7,064 kB] Get:26 http://the.earth.li/debian stretch/main i386 Packages [7,064 kB] Get:26 http://the.earth.li/debian stretch/main i386 Packages [7,064 kB] Ign:26 http://the.earth.li/debian stretch/main i386 Packages Ign:31 http://the.earth.li/debian stretch/non-free i386 Packages Ign:23 http://the.earth.li/debian stretch-updates/main i386 Packages Ign:26 http://the.earth.li/debian stretch/main i386 Packages Ign:31 http://the.earth.li/debian stretch/non-free i386 Packages Err:23 http://the.earth.li/debian stretch-updates/main i386 Packages 404 Not Found [IP: 46.43.34.31 80] Ign:26 http://the.earth.li/debian stretch/main i386 Packages Ign:31 http://the.earth.li/debian stretch/non-free i386 Packages Err:26 http://the.earth.li/debian stretch/main i386 Packages 404 Not Found [IP: 46.43.34.31 80] Ign:31 http://the.earth.li/debian stretch/non-free i386 Packages Fetched 235 kB in 1s (125 kB/s) Reading package lists... Done E: Failed to fetch http://the.earth.li/debian/dists/stretch-updates/main/binary-i386/Packages 404 Not Found [IP: 46.43.34.31 80] E: Failed to fetch http://the.earth.li/debian/dists/stretch/main/binary-i386/Packages 404 Not Found [IP: 46.43.34.31 80] E: Some index files failed to download. They have been ignored, or old ones used instead. Here is the system: root /home/kristjan # cat /etc/os-release PRETTY_NAME="Debian GNU/Linux 9 (stretch)" NAME="Debian GNU/Linux" VERSION_ID="9" VERSION="9 (stretch)" ID=debian HOME_URL="https://www.debian.org/ " SUPPORT_URL="https://www.debian.org/support " BUG_REPORT_URL="https://bugs.debian.org/ " Here is sources list: root /home/kristjan # cat /etc/apt/sources.list # #deb cdrom:[Debian GNU/Linux 9.4.0 _S #deb cdrom:[Debian GNU/Linux 9.4.0 _S deb http://www.deb-multimedia.org stretch main non-free deb http://the.earth.li/debian/ stretch main non-free deb-src http://the.earth.li/debian/ stretch main non-free deb http://security.debian.org/debian-security stretch/updates main contrib non-free deb-src http://security.debian.org/debian-security stretch/updates main contrib non-free # stretch-updates, previously known as 'volatile' deb http://the.earth.li/debian/ stretch-updates main contrib non-free deb-src http://the.earth.li/debian/ stretch-updates main contrib non-free # Virtualbox Oracle deb http://download.virtualbox.org/virtualbox/debian stretch contrib #Tor###########################97 deb https://deb.torproject.org/torproject.org stretch main deb-src https://deb.torproject.org/torproject.org stretch main # For the stable version. #deb tor://sdscoq7snqtznauu.onion/torproject.org stretch main ########################### Backports testingittt #deb http://ftp.debian.org/debian stretch-backports main **What is the problem here and how can I fix it?** UPDATE: I have **two servers both running Debian Stretch 9.9 and with the same debian servers for packages and updates but I can only update one of them**, this one gives me this error: ~↓↓$↓↓ apt update Hit:1 http://www.deb-multimedia.org stretch InRelease Ign:2 http://the.earth.li/debian stretch InRelease Hit:3 http://ppa.launchpad.net/linuxuprising/java/ubuntu bionic InRelease Get:4 http://security.debian.org/debian-security stretch/updates InRelease [94.3 kB] Hit:6 http://download.virtualbox.org/virtualbox/debian stretch InRelease Hit:7 http://ftp.debian.org/debian stretch-backports InRelease Get:5 http://the.earth.li/debian stretch-updates InRelease [91.0 kB] Hit:9 http://repo.mysql.com/apt/debian stretch InRelease Hit:10 https://packages.microsoft.com/debian/9/prod stretch InRelease Hit:11 https://packages.microsoft.com/repos/vscode stable InRelease Get:8 http://the.earth.li/debian stretch Release [118 kB] Hit:12 https://deb.torproject.org/torproject.org stretch InRelease Get:13 http://security.debian.org/debian-security stretch/updates/main Sources [205 kB] Get:14 http://the.earth.li/debian stretch Release.gpg [2,434 B] Get:15 http://security.debian.org/debian-security stretch/updates/main amd64 Packages [492 kB] Get:16 http://the.earth.li/debian stretch-updates/main Sources [13.1 kB] Get:17 http://the.earth.li/debian stretch-updates/main amd64 Packages [27.2 kB] Get:18 http://the.earth.li/debian stretch-updates/main i386 Packages [27.2 kB] Get:18 http://the.earth.li/debian stretch-updates/main i386 Packages [27.2 kB] Hit:21 http://repo.steampowered.com/steam precise InRelease Ign:18 http://the.earth.li/debian stretch-updates/main i386 Packages Ign:22 http://the.earth.li/debian stretch-updates/main i386 Contents (deb) Get:23 http://security.debian.org/debian-security stretch/updates/main i386 Packages [494 kB] Ign:18 http://the.earth.li/debian stretch-updates/main i386 Packages Hit:24 https://download.mono-project.com/repo/debian stable-stretch InRelease Ign:25 https://apt.jenslody.de/stable stretch InRelease Err:22 http://the.earth.li/debian stretch-updates/main i386 Contents (deb) 404 Not Found [IP: 46.43.34.31 80] Get:18 http://the.earth.li/debian stretch-updates/main i386 Packages [169 kB] Get:18 http://the.earth.li/debian stretch-updates/main i386 Packages [169 kB] Hit:28 https://apt.jenslody.de/stable stretch Release Get:18 http://the.earth.li/debian stretch-updates/main i386 Packages [169 kB] Get:18 http://the.earth.li/debian stretch-updates/main i386 Packages [169 kB] Get:18 http://the.earth.li/debian stretch-updates/main i386 Packages [169 kB] Get:18 http://the.earth.li/debian stretch-updates/main i386 Packages [169 kB] Get:18 http://the.earth.li/debian stretch-updates/main i386 Packages [169 kB] Get:18 http://the.earth.li/debian stretch-updates/main i386 Packages [169 kB] Ign:18 http://the.earth.li/debian stretch-updates/main i386 Packages Ign:36 http://the.earth.li/debian stretch/main i386 Packages Get:37 http://the.earth.li/debian stretch/main i386 Contents (deb) [31.3 MB] Get:38 http://the.earth.li/debian stretch/main amd64 Contents (deb) [31.4 MB] Get:39 http://the.earth.li/debian stretch/non-free amd64 Packages [78.3 kB] Ign:40 http://the.earth.li/debian stretch/non-free i386 Packages Get:41 http://the.earth.li/debian stretch/non-free Translation-en [80.3 kB] Get:42 http://the.earth.li/debian stretch/non-free amd64 DEP-11 Metadata [7,180 B] Get:43 http://the.earth.li/debian stretch/non-free DEP-11 64x64 Icons [30.0 kB] Get:44 http://the.earth.li/debian stretch/non-free DEP-11 128x128 Icons [85.2 kB] Get:45 http://the.earth.li/debian stretch/non-free amd64 Contents (deb) [809 kB] Get:46 http://the.earth.li/debian stretch/non-free i386 Contents (deb) [750 kB] Ign:36 http://the.earth.li/debian stretch/main i386 Packages Ign:40 http://the.earth.li/debian stretch/non-free i386 Packages Ign:36 http://the.earth.li/debian stretch/main i386 Packages Ign:40 http://the.earth.li/debian stretch/non-free i386 Packages Err:36 http://the.earth.li/debian stretch/main i386 Packages 404 Not Found [IP: 46.43.34.31 80] Ign:40 http://the.earth.li/debian stretch/non-free i386 Packages Fetched 44.7 MB in 13s (3,223 kB/s) Reading package lists... Done E: Failed to fetch http://the.earth.li/debian/dists/stretch-updates/main/Contents-i386 404 Not Found [IP: 46.43.34.31 80] E: Failed to fetch http://the.earth.li/debian/dists/stretch/main/binary-i386/Packages 404 Not Found [IP: 46.43.34.31 80] E: Some index files failed to download. They have been ignored, or old ones used instead. Here are other list files just for detail: ~↓↓$↓↓ ls -asil /etc/apt/sources.list.d/ total 36 1175229 4 drwxr-xr-x 2 root root 4096 May 18 09:52 . 1175056 4 drwxr-xr-x 6 root root 4096 May 23 01:54 .. 1178126 4 -rw-r--r-- 1 root root 67 May 2 08:18 linuxuprising-java.list 1178021 4 -rw-r--r-- 1 root root 75 Jan 17 2018 microsoft-prod.list 1177218 4 -rw-r--r-- 1 root root 70 Jul 12 2018 mono-official-stable.list 1176353 4 -rw-r--r-- 1 root root 712 May 13 06:23 mysql.list 1178155 4 -rw-r--r-- 1 root root 148 Jul 24 2018 steam.list 1178030 4 -rw-r--r-- 1 root root 64 Jul 21 2018 stretch-backports.list 1176782 4 -rw-r--r-- 1 root root 73 May 18 09:42 vscode.list Here is sources.list on the other server: deb http://www.deb-multimedia.org stretch main non-free deb http://the.earth.li/debian/ stretch main non-free deb-src http://the.earth.li/debian/ stretch main non-free deb http://security.debian.org/debian-security stretch/updates main contrib non-free deb-src http://security.debian.org/debian-security stretch/updates main contrib non-free # stretch-updates, previously known as 'volatile' deb http://the.earth.li/debian/ stretch-updates main contrib non-free deb-src http://the.earth.li/debian/ stretch-updates main contrib non-free # Virtualbox Oracle deb http://download.virtualbox.org/virtualbox/debian stretch contrib

I can't get anything to install via apt-get and I'm using Kali 1.0. I also can't get notepadqq to install. How can I get this to work?

root@kali:~/Desktop# apt-get update

Err http://­security.kali.org  sana/updates Release.gpg      
          
  Could not resolve '­security.kali.org'

Err http://­http.kali.org  sana Release.gpg    
                        
  Could not resolve '­http.kali.org'

Reading package lists... Done     

W: Failed to fetch http://­http.kali.org/kali/dists/sana/Release.gpg   Could not resolve '­http.kali.org'


W: Failed to fetch http://­security.kali.org/­kali-security/dists/sana/updates/Release.gpg   Could not resolve '­security.kali.org'


W: Some index files failed to download. They have been ignored, or old ones used instead.

root@kali:~/Desktop# apt-get upgrade

Reading package lists... Done

Building dependency tree       

Reading state information... Done

0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

root@kali:~/Desktop# apt-get notepadqq

E: Invalid operation notepadqq

root@kali:~/Desktop# apt-get install notepadqq

Reading package lists... Done

Building dependency tree       

Reading state information... Done

E: Unable to locate package notepadqq

root@kali:~/Desktop# cat /etc/apt/sources.list

deb http://­http.kali.org/kali  sana main non-free contrib

deb-src http://­http.kali.org/kali  sana main non-free contrib


deb http://­security.kali.org/­kali-security/  sana/updates main contrib non-free

deb-src http://­security.kali.org/­kali-security/  sana/updates main contrib non-freeroot@kali:~/Desktop# 

Since switching from debian:jessie to debian:stretch as the base image of my Dockerfiles, I've experienced a remarkably high frequency of 503 errors on apt-get commands using the image's default URL for the stretch repos, deb http://deb.debian.org/debian stretch main which I understand is Debian's official CDN. Usually these are resolved by rebuilding the instances at some later time, but are still a nuisance. Perhaps these issues are due to stretch only recently being released as stable, but into today's world of easily available high performance content delivery networks this seems surprising. Are there alternative CDN-based mirrors for debian that would be faster / more reliable? Are there AWS-S3 backed mirrors for debian sources? (Not really looking for a regional mirror since the containers could be built anywhere). Example 503 error messages: Get:220 http://deb.debian.org/debian stretch/main amd64 vim-runtime all 2:8.0.0197-4 [5,409 kB] Get:221 http://deb.debian.org/debian stretch/main amd64 vim amd64 2:8.0.0197-4 [1,033 kB] Fetched 201 MB in 5min 4s (660 kB/s) [91mE: Failed to fetch http://deb.debian.org/debian/pool/main/g/ghostscript/ghostscript_9.20~dfsg-3.2_amd64.deb 503 Service Temporarily Unavailable [IP: 13.32.244.252 80] E: Failed to fetch http://deb.debian.org/debian/pool/main/h/harfbuzz/libharfbuzz-icu0_1.4.2-1_amd64.deb 503 Service Temporarily Unavailable [IP: 13.32.244.252 80] E: Failed to fetch http://deb.debian.org/debian/pool/main/h/hunspell/libhunspell-1.4-0_1.4.1-2+b2_amd64.deb 503 Service Temporarily Unavailable [IP: 13.32.244.252 80] E: Failed to fetch http://deb.debian.org/debian/pool/main/h/hunspell/libhunspell-dev_1.4.1-2+b2_amd64.deb 503 Service Temporarily Unavailable [IP: 13.32.244.252 80] E: Failed to fetch http://deb.debian.org/debian/pool/main/p/potrace/libpotrace0_1.13-3_amd64.deb 503 Service Temporarily Unavailable [IP: 13.32.244.252 80] E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing? Alternately, is there a better way to run apt to retry or be more patient about these 503 errors?

I'd like to install a couple of packages available from an unofficial repository, problem is the repository share many packages and an apt upgrade would replace many of the official. I know about pinning but would prefer not to use it. I think to remember something about adding a repository for only a package, did a little search online and into apt's documentation but found not much, did also some test without success, if there's a syntax to add only few packages from a repository that would be perfect. Alternatively I'm thinking about using cron and reprepro (or whatever is used nowadays to create a repository) to only mirror the few packages I need, anything already existing like that?

I have an ubuntu mirror set up and ready to be transferred by hard drive to an offline machine. I want to verify that the mirror has all the packages I need and add any missing packages to it. The mirror is located in /var/spool/apt-mirror, is 120 GB in size and has hundreds of .deb files in it. How do I do these two tasks? (1) To check for a package to be present, I assume I have to use dpkg and point it somehow to my mirror and ask it whether my package in somewhere in the mirror. How do I do that? This is what I tried unsuccessfully: dpkg --info /var/spool/apt-mirror/ astyle dpkg-deb: error: error reading archive magic version number from file /var/spool/apt-mirror/: Is a directory Maybe I should be using the apt-cache command somehow? (2) Assuming that the package is missing, how do I get it into the mirror? Do I just find a deb file(s) and copy them wherever I want into the mirror "pool"? For example, lets say I want this package: apt-cache showpkg astyle Package: astyle Versions: 2.01-1 (/var/lib/apt/lists/us.archive.ubuntu.com_ubuntu_dists_precise_universe_binary-amd64_Packages) This package is apparently available in my local cache (but not installed on my staging machine). How would I move it into the mirror?

I tried to do a repository mirror using apt-mirror and it inexplicably choose the wrong architecture. This is the architecture of the mirroring machine: uname -a Linux MyWorkStation 3.2.0-76-generic #111-Ubuntu SMP Tue Jan 13 22:16:09 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux head /proc/cpuinfo processor : 0 vendor_id : GenuineIntel cpu family : 6 model : 44 model name : Intel(R) Xeon(R) CPU X5690 @ 3.47GHz stepping : 2 microcode : 0x10 cpu MHz : 3458.056 cache size : 12288 KB physical id : 0 This is what my /etc/apt/mirror.list looks like: ############# config ################## # # set base_path /var/spool/apt-mirror # # set mirror_path $base_path/mirror # set skel_path $base_path/skel # set var_path $base_path/var # set cleanscript $var_path/clean.sh # set defaultarch # set postmirror_script $var_path/postmirror.sh # set run_postmirror 0 set nthreads 20 set _tilde 0 # ############# end config ############## deb http://archive.ubuntu.com/ubuntu precise main restricted universe multiverse deb http://archive.ubuntu.com/ubuntu precise-security main restricted universe multiverse deb http://archive.ubuntu.com/ubuntu precise-updates main restricted universe multiverse #deb http://archive.ubuntu.com/ubuntu precise-proposed main restricted universe multiverse #deb http://archive.ubuntu.com/ubuntu precise-backports main restricted universe multiverse deb-src http://archive.ubuntu.com/ubuntu precise main restricted universe multiverse deb-src http://archive.ubuntu.com/ubuntu precise-security main restricted universe multiverse deb-src http://archive.ubuntu.com/ubuntu precise-updates main restricted universe multiverse #deb-src http://archive.ubuntu.com/ubuntu precise-proposed main restricted universe multiverse #deb-src http://archive.ubuntu.com/ubuntu precise-backports main restricted universe multiverse clean http://archive.ubuntu.com/ubuntu The mirror that was created was only amd64 binaries, no i386. Where is it going wrong?

I would like to download the midnight commander with the following task: sudo apt-get install mc But it doesn't work because the package is not found. My mirror is: ftp.hu.debian.org How can I do to install the midnhight commander?

I am using apt-mirror to create a local Ubuntu mirror. It does succeed in downloading files from another mirror (there's about a couple gigabytes each week), but never removing anything or indicates files that can be deleted. I might run out of free space, eventually. The output of apt-mirror always include > 0.0 bytes in 0 files and 0 directories can be freed. > > Run /var/spool/apt-mirror/var/clean.sh for this purpose. The clean.sh is ran every time apt-mirror executes, because the content of /var/spool/apt-mirror/var/postmirror.sh is just /var/spool/apt-mirror/var/clean.sh Running clean.sh produces this output: > Removing 0 unnecessary files [0 bytes]... done. > > Removing 0 unnecessary directories... done. Here's my mirror.list file: ############# config ################## # # set base_path /var/spool/apt-mirror # # set mirror_path $base_path/mirror # set skel_path $base_path/skel # set var_path $base_path/var # set cleanscript $var_path/clean.sh # set defaultarch # set postmirror_script $var_path/postmirror.sh # set run_postmirror 0 set nthreads 20 set _tilde 0 # ############# end config ############## deb-i386 http://ubuntu.c3sl.ufpr.br/ubuntu/ trusty main restricted universe multiverse deb-i386 http://ubuntu.c3sl.ufpr.br/ubuntu/ trusty-updates main restricted universe multiverse deb-i386 http://ubuntu.c3sl.ufpr.br/ubuntu/ trusty-backports main restricted universe multiverse deb-i386 http://ubuntu.c3sl.ufpr.br/ubuntu/ trusty-security main restricted universe multiverse deb-amd64 http://ubuntu.c3sl.ufpr.br/ubuntu/ trusty main restricted universe multiverse deb-amd64 http://ubuntu.c3sl.ufpr.br/ubuntu/ trusty-updates main restricted universe multiverse deb-amd64 http://ubuntu.c3sl.ufpr.br/ubuntu/ trusty-backports main restricted universe multiverse deb-amd64 http://ubuntu.c3sl.ufpr.br/ubuntu/ trusty-security main restricted universe multiverse clean http://archive.ubuntu.com/ubuntu

We have a local apt mirror built with apt-mirror and it's working nicely, but since it considers valid only the latest version of every package, if there's the need to downgrade one of them (because of a regression or whatever) we can't rollback to the previous one, we can only go back to the first version available. For example, we are having a problem with Thunderbird 24.5.0 and we'd like to go back to 24.4.0, but: $ apt-cache show thunderbird | grep Version Version: 1:24.5.0+build1-0ubuntu0.12.04.1 Version: 11.0.1+build1-0ubuntu2 What is the recommended way to build an apt mirror that keeps more versions of the same package available?