Do you want to learn how you can distribute your software as a package to the Debian community? Well, this course is for you.

docker15.tar.gz

buildingPackage1-UsingBuildSystem-copy

buildingPackage2-Makefile-copy

buildingPackage3-custombuild-copy

buildingPackage4-installFile-copy

Exercise-buildingPackage-copy

Exercise1-solution-buildingPackage-copy

buildingPackage5-multi-package-dhmoves-copy

buildingPackage6-multi-package-dhinstall-copy

Exercise-buildingPackage-multipackage-copy

Exercise2-solution-buildingMultiplePackage-dhinstall-copy

Exercise3-solution-buildingMultiplePackage-copy

aptly-RemoveAtEnd

aptly-copy

Exercise-aptly-endpoints

Exercise_aptly-nginx

Packages are fundamental units of software deployment in Debian and related operating systems. Packaging enables users to deploy your packages using the built-in tools of their operating system.

In this course, you’ll learn about the environment that Debian packages live in, including repositories, package management installation tools, source and binary packages, and the “upstream” concept. Then you’ll learn about the structure and metadata of packages and an efficient way to build Debian packages using the fpm tool. You’ll also learn to use the Debian Build System, including the tools used to create package skeletons and multiple packages from a single code base. You’ll finish with an introduction to repository and package management and integrity.

By the end of this course, you’ll have learned about the Debian package ecosystem and several ways to build and package. This will enable you to seamlessly integrate your packages into existing infrastructure and take your deployment skills to the next level.

Building Debian Packages from the Ground Up

Which file contains the contents of the `Release` file and a cryptographic signature inline?



Which file contains the contents of the <code>Release</code> file and a cryptographic signature inline?

**(Select all that apply.)** What is true about having to enter a passphrase whenever the repository management software asks for it,compared to using `gpg-agent`?

(Select all that apply.) What is true about having to enter a passphrase whenever the repository management software asks for it,compared to using <code>gpg-agent</code>?

For stopping a replay attack at the transport level

For preventing `apt` from accepting older versions of a `Release` file

**(Select all that apply.)** The `Valid-Until` field in a `Release` file is useful for what reasons?

(Select all that apply.) The <code>Valid-Until</code> field in a <code>Release</code> file is useful for what reasons?

Key rotation is an effective mechanism for accomplishing what task?

Key rotation is an effective mechanism for accomplishing what task?

**(True or False)** The command `dkpkg-buildpackage -b` builds a binary package without signing it.

(True or False) The command <code>dkpkg-buildpackage -b</code> builds a binary package without signing it.

The checksum of the `Packages.gz` file is contained in the `Release` or `InRelease` file.

The `Release` or `InRelease` file is signed with the repository signing key.

To insert malicious code in a package without being detected, the attacker needs to only change the `Packages.gz` file.

To insert malicious code in a package without being detected, the attacker only needs to change the `Packages.gz` file in addition to the `Release`/`InRelease` file.

Introduction

Debian Packages in Context

What's Inside a Debian Package

Quick Package Construction with fpm

The Debian Build System

Quick Debian Packaging and Multipackage Builds

Repository Management

Conclusion

Appendix

Quiz: Repository Management