Ubuntu 特拉维斯可以';在自定义源代码回购中找不到Debian软件包,为什么?

Ubuntu 特拉维斯可以';在自定义源代码回购中找不到Debian软件包,为什么?,ubuntu,debian,travis-ci,Ubuntu,Debian,Travis Ci,这里的说明似乎是合乎逻辑的,我在启用docker和不启用docker的情况下都尝试过: 以下是日志: Adding APT Sources (BETA) $ export DEBIAN_FRONTEND=noninteractive 0.01s$ echo "deb https://dl.bintray.com/solvingj/public-deb unstable main" | sudo tee -a /etc/apt/sources.list > /dev/null Instal

这里的说明似乎是合乎逻辑的,我在启用docker和不启用docker的情况下都尝试过:

以下是日志:

Adding APT Sources (BETA)
$ export DEBIAN_FRONTEND=noninteractive
0.01s$ echo "deb https://dl.bintray.com/solvingj/public-deb unstable main" | sudo tee -a /etc/apt/sources.list > /dev/null
Installing APT Packages (BETA)
$ export DEBIAN_FRONTEND=noninteractive
3.03s$ sudo -E apt-get -yq update &>> ~/apt-get-update.log
0.30s$ sudo -E apt-get -yq --no-install-suggests --no-install-recommends --force-yes install cmake go-bin-deb
Reading package lists...
Building dependency tree...
Reading state information...
E: Unable to locate package go-bin-deb
apt-get.diagnostics
apt-get install failed
$ cat ~/apt-get-update.log
Ign:1 http://us-central1.gce.archive.ubuntu.com/ubuntu precise InRelease
Hit:2 http://us-central1.gce.archive.ubuntu.com/ubuntu precise-updates InRelease
Hit:3 http://us-central1.gce.archive.ubuntu.com/ubuntu precise-backports InRelease
Hit:4 http://us-central1.gce.archive.ubuntu.com/ubuntu precise Release
Ign:5 http://downloads-distro.mongodb.org/repo/debian-sysvinit dist InRelease
Get:6 http://downloads-distro.mongodb.org/repo/debian-sysvinit dist Release [2,040 B]
Get:7 http://downloads-distro.mongodb.org/repo/debian-sysvinit dist Release.gpg [490 B]
Hit:8 http://security.ubuntu.com/ubuntu precise-security InRelease
Hit:9 http://apt.postgresql.org/pub/repos/apt precise-pgdg InRelease
Hit:11 http://ppa.launchpad.net/chris-lea/redis-server/ubuntu precise InRelease
Get:12 http://downloads-distro.mongodb.org/repo/debian-sysvinit dist/10gen amd64 Packages [30.9 kB]
Ign:13 http://ppa.launchpad.net/couchdb/stable/ubuntu precise InRelease
Ign:14 http://ppa.launchpad.net/git-core/v1.8/ubuntu precise InRelease
Get:15 http://downloads-distro.mongodb.org/repo/debian-sysvinit dist/10gen i386 Packages [30.5 kB]
Hit:16 http://ppa.launchpad.net/pollinate/ppa/ubuntu precise InRelease
Ign:17 https://dl.bintray.com/solvingj/public-deb unstable InRelease
Hit:18 http://ppa.launchpad.net/travis-ci/zero-mq/ubuntu precise InRelease
Hit:19 http://ppa.launchpad.net/ubuntugis/ppa/ubuntu precise InRelease
Hit:20 http://ppa.launchpad.net/webupd8team/java/ubuntu precise InRelease
Hit:21 https://packagecloud.io/basho/riak/ubuntu precise InRelease
Hit:22 http://ppa.launchpad.net/couchdb/stable/ubuntu precise Release
Hit:24 https://packagecloud.io/computology/apt-backport/ubuntu precise InRelease
Hit:25 http://ppa.launchpad.net/git-core/v1.8/ubuntu precise Release
Get:27 https://dl.bintray.com/solvingj/public-deb unstable Release [2,673 B]
Ign:28 https://dl.bintray.com/solvingj/public-deb unstable Release.gpg
Get:29 https://dl.bintray.com/solvingj/public-deb unstable/main amd64 Packages [14 B]
Get:30 https://dl.bintray.com/solvingj/public-deb unstable/main i386 Packages [14 B]
Fetched 66.7 kB in 1s (38.0 kB/s)
Reading package lists...
W: http://us-central1.gce.archive.ubuntu.com/ubuntu/dists/precise-updates/InRelease: Signature by key 630239CC130E1A7FD81A27B140976EAF437D05B5 uses weak digest algorithm (SHA1)
W: http://us-central1.gce.archive.ubuntu.com/ubuntu/dists/precise-backports/InRelease: Signature by key 630239CC130E1A7FD81A27B140976EAF437D05B5 uses weak digest algorithm (SHA1)
W: http://us-central1.gce.archive.ubuntu.com/ubuntu/dists/precise/Release.gpg: Signature by key 630239CC130E1A7FD81A27B140976EAF437D05B5 uses weak digest algorithm (SHA1)
W: http://downloads-distro.mongodb.org/repo/debian-sysvinit/dists/dist/Release.gpg: Signature by key 492EAFE8CD016A07919F1D2B9ECBEC467F0CEB10 uses weak digest algorithm (SHA1)
W: http://security.ubuntu.com/ubuntu/dists/precise-security/InRelease: Signature by key 630239CC130E1A7FD81A27B140976EAF437D05B5 uses weak digest algorithm (SHA1)
W: http://ppa.launchpad.net/couchdb/stable/ubuntu/dists/precise/Release.gpg: Signature by key 15866BAFD9BCC4F3C1E0DFC7D69548E1C17EAB57 uses weak digest algorithm (SHA1)
W: http://ppa.launchpad.net/git-core/v1.8/ubuntu/dists/precise/Release.gpg: Signature by key E1DD270288B4E6030699E45FA1715D88E1DF1F24 uses weak digest algorithm (SHA1)
W: The repository 'https://dl.bintray.com/solvingj/public-deb unstable Release' is not signed.
The command "sudo -E apt-get -yq --no-install-suggests --no-install-recommends --force-yes install cmake go-bin-deb" failed and exited with 100 during .
以下是我的travis.yml文件的开头:

sudo: required
language: cpp
compiler:
- gcc
os:
- linux
addons:
  apt:
    sources:
    - sourceline: deb https://dl.bintray.com/solvingj/public-deb unstable main
    packages:
    - cmake
    - go-bin-deb
您可以访问定制回购,将其添加到debian机器,并找到没有问题的软件包:


警告很清楚:

W: The repository 'https://dl.bintray.com/solvingj/public-deb unstable Release' is not signed.
apt
对每个包进行gpg验证,以使攻击者难以用恶意版本替换包

因此,您应该对存储库进行签名,以便
apt
可以验证包的真实性

一种不安全、危险且通常不好的替代方法是添加
--允许未经验证的
标志:

   --allow-unauthenticated
       Ignore if packages can't be authenticated and don't prompt about it. This can be useful while working with
       local repositories, but is a huge security risk if data authenticity isn't ensured in another way by the user
       itself. The usage of the Trusted option for sources.list(5) entries should usually be preferred over this
       global override. Configuration Item: APT::Get::AllowUnauthenticated.
不要用它。你被警告了!
而是对存储库进行签名。

问题是存储库中只包含32位版本的软件包。我的成功测试是在32位操作系统上进行的。我失败的测试是在Travis和Windows Subsystem for Linux上进行的,它们都是64位的。一旦我将64位构建上传到debian存储库,它就找到了包

关于签名的消息是一个警告,事实证明不是问题。你应该接受自己的答案,这样它就不再显示为需要帮助的问题
   --allow-unauthenticated
       Ignore if packages can't be authenticated and don't prompt about it. This can be useful while working with
       local repositories, but is a huge security risk if data authenticity isn't ensured in another way by the user
       itself. The usage of the Trusted option for sources.list(5) entries should usually be preferred over this
       global override. Configuration Item: APT::Get::AllowUnauthenticated.