not download by-hash from source

[apt-mirror]

not download by-hash from source

[dev-rowbot]

This may not be the greatest fix but I think you could also just disable Acquire-By-Hash for your local mirror.

For example, in /etc/apt/mirror.list add:

set postmirror_script $var_path/postmirror.sh
set run_postmirror 1

And create an executable script called postmirror.sh in the apt mirror $var_path:

MIRROR_PATH="/path/to/apt/mirror/re.archive.ubuntu.com"

find $MIRROR_PATH -type f -name "Release" | xargs sed -i 's/Acquire-By-Hash: yes/Acquire-By-Hash: no/g'
find $MIRROR_PATH -type f -name "InRelease" | xargs sed -i 's/Acquire-By-Hash: yes/Acquire-By-Hash: no/g'

[SadPencil]

This may not be the greatest fix but I think you could also just disable Acquire-By-Hash for your local mirror.

For example, in /etc/apt/mirror.list add:

set postmirror_script $var_path/postmirror.sh
set run_postmirror 1

And create an executable script called postmirror.sh in the apt mirror $var_path:

MIRROR_PATH="/path/to/apt/mirror/re.archive.ubuntu.com"

find $MIRROR_PATH -type f -name "Release" | xargs sed -i 's/Acquire-By-Hash: yes/Acquire-By-Hash: no/g'
find $MIRROR_PATH -type f -name "InRelease" | xargs sed -i 's/Acquire-By-Hash: yes/Acquire-By-Hash: no/g'

Disagreed. You break the signature by this way.

[smartwang]

+1

[gbjtv]

+1

[modoojunko]

+1

[Kunzol]

You can use this lines of code in postmirror.sh
Change "MIRROR" to exactly the mirror you use in the "mirror.list" file.

MIRROR="http://archive.ubuntu.com/ubuntu"
find ${MIRROR#*//}/dists -type f -regex ".*/xenial.*/Release" -printf "%h\n" \
        | xargs -I REPLY \
        wget --timestamping --recursive --no-parent --exclude --no-verbose --execute robots=off --reject "index.html*" --level 1 \
                "http://REPLY/by-hash/SHA256/"
find ${MIRROR#*//}/dists -type d -regex ".*/xenial.*/i18n" -printf "%h\n" \
    | xargs -I REPLY \
    wget --timestamping --recursive --no-parent --exclude --no-verbose --execute robots=off --reject "index.html*" \
                "http://REPLY/dep11/"

The first find checks for the "Release" files. In this directories the "by-hash" directories are located.

The second find does the same, but searches for "i18n". In the same directory the "dep11" directories are located. It gets the whole dep11 directory including the by-hash. If you just want to download the "by-hash" inside "dep11", modify the line accordingly.

Make sure you have "skip-clean" lines in the "mirror.list" file, otherwise the "clean.sh" will remove this directories again.

[hungpr0]

+1 for this issue? Any fix so that I can deploy apt-mirror package? Thank you.

[Eijebong]

Any news on that ? This breaks apt-mirror for deb http://security.debian.org/debian-security buster/updates main too

[czyzo]

I have the same problem as @Eijebong . This is old bug. Is this project alive ?

[liedekef]

I have created a modified version that downloads the by-hash/SHA256 files. I'll post it later on to github.
Edit: see pull request #131