Custom opkg feeds

yochanan · 2017-02-27T03:59:22.000Z

I tried adding a couple custom feeds so the adblock & luci_app_adblock packages will auto-update, but the signature check fails. I can comment out the option check_signature 1 line and the custom feeds will update, but that’s not very secure. I also noticed the Packages.sig files both say, “untrusted comment: signed by key …” Any ideas?

Custom feeds:

src/gz lede_snapshot_packages Index of /snapshots/packages/x86_64/packages/
src/gz lede_snapshot_luci Index of /snapshots/packages/x86_64/luci/

root@GL-AR300M:~# opkg update
Downloading https://downloads.lede-project.org/snapshots/packages/x86_64/packages//Packages.gz.
Updated list of available packages in /var/opkg-lists/lede_snapshot_packages.
Downloading https://downloads.lede-project.org/snapshots/packages/x86_64/packages//Packages.sig.
Signature check failed.
Remove wrong Signature file.
Downloading https://downloads.lede-project.org/snapshots/packages/x86_64/luci//Packages.gz.
Updated list of available packages in /var/opkg-lists/lede_snapshot_luci.
Downloading https://downloads.lede-project.org/snapshots/packages/x86_64/luci//Packages.sig.
Signature check failed.
Remove wrong Signature file.

alzhao · 2017-02-27T12:51:49.000Z

as you change the feeds which conflict with the original feeds, so you will have this warning.

So why you want to remove this warning? You are responsible for this by yourself.

yochanan · 2017-02-27T15:40:29.000Z

As I mentioned, I wanted to add the custom feeds to allow auto-updating adblock. I realize now that may conflict with GLi packages if I remove the signature check. I’m working on a bash script to automate the process instead.

alzhao · 2017-02-27T15:47:23.000Z

if you add custom feeds that doesn’t conflict with the original one, that should be OK. Or you can comment out the origin feeds.