5. Frequently Asked Questions (FAQ)

5.1 Why are some packages named "-binary"?

Packages with the "-binary" suffix either contain binary-only components, or are provided completely binary-only.

5.2. How can I check the OpenPGP signature with apt 0.6?

Currently, apt 0.6 which is found in testing and unstable does support checking packages with GPG. To use this feature, you need to import the right OpenPGP Public key.

The release files are signed by an automatic archive signing key. The 2008 key can be downloaded here. You can import it with the following command (as root).

apt-get install debian-unofficial-archive-keyring

or

aptitude install debian-unofficial-archive-keyring

gpg --keyserver subkeys.pgp.net --recv-keys 0xFDB8D39A
gpg --armor --export 0xFDB8D39A | apt-key add -

or

wget http://ftp-master.debian-unofficial.org/other/openpgp/archive-key-2008.asc -O - | apt-key add -

pub   1024D/FDB8D39A 2008-01-02 [expires: 2009-02-01]
      Key fingerprint = 5AEC 3E6B A6B2 3B1F A635  CEB6 736B FF07 FDB8 D39A
      uid                  Debian Unofficial Archive Automatic Signing Key (2008)