Tool for creating Debian mirror to be put to ISO has option to sign Release file and since
local mirror has different set of packages and filesystem paths regular Debian Release.gpg
cannot be reused. See reprepro(1) for more information on how to sign repository with PGP/GPG.
This is critically important for network setups (PXE). Currently we bypass repository signature checks using debian-installer/allow_unauthenticated=true preseed given on pxelinux command line.
Tool for creating Debian mirror to be put to ISO has option to sign Release file and since local mirror has different set of packages and filesystem paths regular Debian Release.gpg cannot be reused. See reprepro(1) for more information on how to sign repository with PGP/GPG.
This is critically important for network setups (PXE). Currently we bypass repository signature checks using debian-installer/allow_unauthenticated=true preseed given on pxelinux command line.