Re: [bitfolk] lenny volatile expired GPG key?

Top Page
Author: Andy Smith
Date:  
To: users
Subject: Re: [bitfolk] lenny volatile expired GPG key?

Reply to this message
gpg: Signature made Thu Apr 1 14:38:12 2010 UTC using DSA key ID BF15490B
gpg: Good signature from "Andy Smith <andy@strugglers.net>"
gpg: aka "Andrew James Smith <andy@strugglers.net>"
gpg: aka "Andy Smith (UKUUG) <andy.smith@ukuug.org>"
gpg: aka "Andy Smith (BitFolk Ltd.) <andy@bitfolk.com>"
gpg: aka "Andy Smith (Linux User Groups UK) <andy@lug.org.uk>"
gpg: aka "Andy Smith (Cernio Technology Cooperative) <andy.smith@cernio.com>"
Hi Joseph,

On Thu, Apr 01, 2010 at 03:17:03PM +0900, Joseph Heenan wrote:
> Thanks for the thoughts. I do definitely have this new key in the apt key
> list now, but still get the problem.


Me too. I guess they haven't re-signed the files with the new key
yet.

> I've tried to switch my sources.list to volatile.debian.org, but it seems
> my VPS tries to contact this over ipv6 and fails to connect. (I've not
> deliberately enabled ipv6 on my VPS, but it seems to be getting an ipv6
> address from somewhere...)


Okay. Do you want to fix your IPv6, disable IPv6 or make your system
prefer IPv4 addresses?

If you want to fix IPv6, it might be a little involved. Please start
by showing the output of "ip -6 addr" and "ip -6 ro". Bear in mind
that once it's fixed you should then investigate ip6tables for IPv6
firewalling.

Disabling IPv6 can't be done without a reboot. Google for "blacklist
ipv6 debian" and you'll see how.

Applications that use getaddrinfo instead of gethostbyname should
pay attention to /etc/gai.conf for address selection. If you open
that file you'll see this part:

 51 #
 52 #    For sites which prefer IPv4 connections change the last line to
 53 #
 54 #precedence ::ffff:0:0/96  100


I think if you uncomment that then apt-get and aptitude should
prefer IPv4 addresses.

It would be nice if apt had a config option for preferring one or te
other as many applications do, but I can't see one.

Personally I will just be waiting a few more days to see if they fix
it.

Cheers,
Andy

--
http://bitfolk.com/ -- No-nonsense VPS hosting