X-Git-Url: https://git.proxmox.com/?p=pve-docs.git;a=blobdiff_plain;f=pve-package-repos.adoc;h=58d8699d96bdedc42856d5d46a9993304eb89990;hp=0c04b6a96fdb5a8c9ad5c2b0f02da8f5442c396c;hb=152b10fb37c4e586adee5644b2c7bf4f74b2dea5;hpb=b4a6535593d28accbdf1ac3fe915051023c12153 diff --git a/pve-package-repos.adoc b/pve-package-repos.adoc index 0c04b6a..58d8699 100644 --- a/pve-package-repos.adoc +++ b/pve-package-repos.adoc @@ -1,20 +1,25 @@ Package Repositories -------------------- +include::attributes.txt[] + +ifdef::wiki[] +:pve-toplevel: +endif::wiki[] All Debian based systems use http://en.wikipedia.org/wiki/Advanced_Packaging_Tool[APT] as package management tool. The list of repositories is defined in -'/etc/apt/sources.list' and '.list' files found inside -'/etc/apt/sources.d/'. Updates can be installed directly using -'apt-get', or via the GUI. +`/etc/apt/sources.list` and `.list` files found inside +`/etc/apt/sources.d/`. Updates can be installed directly using +`apt-get`, or via the GUI. -Apt 'sources.list' files list one package repository per line, with +Apt `sources.list` files list one package repository per line, with the most preferred source listed first. Empty lines are ignored, and a -'#' character anywhere on a line marks the remainder of that line as a +`#` character anywhere on a line marks the remainder of that line as a comment. The information available from the configured sources is -acquired by 'apt-get update'. +acquired by `apt-get update`. -.File '/etc/apt/sources.list' +.File `/etc/apt/sources.list` ---- deb http://ftp.debian.org/debian jessie main contrib @@ -29,25 +34,29 @@ In addition, {pve} provides three different package repositories. This is the default, stable and recommended repository, available for all {pve} subscription users. It contains the most stable packages, -and is suitable for production use. You need a valid subscription key -to access this repository. The `pve-enterprise` repository is enabled -by default: +and is suitable for production use. The `pve-enterprise` repository is +enabled by default: -.File '/etc/apt/sources.list.d/pve-enterprise.list' +.File `/etc/apt/sources.list.d/pve-enterprise.list` ---- deb https://enterprise.proxmox.com/debian jessie pve-enterprise ---- -NOTE: You can disable this repository by commenting out the above line -using a '#' (at the start of the line). This prevents error messages -if you do not have a subscription key. Please configure the -`pve-no-subscription` repository in that case. - As soon as updates are available, the `root@pam` user is notified via email about the available new packages. On the GUI, the change-log of each package can be viewed (if available), showing all details of the update. So you will never miss important security fixes. +Please note that and you need a valid subscription key to access this +repository. We offer different support levels, and you can find further +details at http://www.proxmox.com/en/proxmox-ve/pricing. + +NOTE: You can disable this repository by commenting out the above line +using a `#` (at the start of the line). This prevents error messages +if you do not have a subscription key. Please configure the +`pve-no-subscription` repository in that case. + + {pve} No-Subscription Repository ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ @@ -56,9 +65,9 @@ this repository. It can be used for testing and non-production use. Its not recommended to run on production servers, as these packages are not always heavily tested and validated. -We recommend to configure this repository in '/etc/apt/sources.list'. +We recommend to configure this repository in `/etc/apt/sources.list`. -.File '/etc/apt/sources.list' +.File `/etc/apt/sources.list` ---- deb http://ftp.debian.org/debian jessie main contrib @@ -70,14 +79,14 @@ deb http://download.proxmox.com/debian jessie pve-no-subscription deb http://security.debian.org jessie/updates main contrib ---- - + {pve} Test Repository ~~~~~~~~~~~~~~~~~~~~~~ Finally, there is a repository called `pvetest`. This one contains the latest packages and is heavily used by developers to test new features. As usual, you can configure this using -'/etc/apt/sources.list' by adding the following line: +`/etc/apt/sources.list` by adding the following line: .sources.list entry for `pvetest` ---- @@ -87,3 +96,104 @@ deb http://download.proxmox.com/debian jessie pvetest WARNING: the `pvetest` repository should (as the name implies) only be used for testing new features or bug fixes. + +SecureApt +~~~~~~~~~ + +We use GnuPG to sign the `Release` files inside those repositories, +and APT uses that signatures to verify that all packages are from a +trusted source. + +The key used for verification is already installed if you install from +our installation CD. If you install by other means, you can manually +download the key with: + + # wget http://download.proxmox.com/debian/key.asc + +Please verify the fingerprint afterwards: + +---- +# gpg --with-fingerprint key.asc +pub 1024D/9887F95A 2008-10-28 Proxmox Release Key + Key fingerprint = BE25 7BAA 5D40 6D01 157D 323E C23A C7F4 9887 F95A +sub 2048g/A87A1B00 2008-10-28 +---- + +If this shows the exact same fingerprint, you can add the key to the +list of trusted APT keys: + + # apt-key add key.asc + + +ifdef::wiki[] + +// include note about older releases, but only for wiki + +{pve} 3.x Repositories +~~~~~~~~~~~~~~~~~~~~~~ + +{pve} 3.x is based on Debian 7.x (``wheezy''). Please note that this +release is out of date, and you should update your +installation. Nevertheless, we still provide access to those +repositories at our download servers. + +[width="100%",cols="