Securely retrieving dscs from snapshot.debian.org

[Paul Wise]

On Thu, Dec 28, 2017 at 5:41 AM, peter green wrote:

> Unfortunately there doesn't seem to be a good way to securely retrive a dsc
> from snapshot.debian.org given a package name and version number.

At this time there isn't any good way to do that securely, until
#763419 gets implemented.

https://bugs.debian.org/763419

Your options are:

You can use debsnap, which is easy but not secure.

$ debsnap srcpkg version

Debian members can login to lw08.debian.org, that has NFS access to
the snapshot archive and guest access to the snapshot meta-data
database. That is probably the most secure you can get right now.
There are some Python functions for interacting with the DB here:

https://anonscm.debian.org/cgit/dex/census.git/tree/bin/compare-source-package-list#n517

-- 
bye,
pabs

https://wiki.debian.org/PaulWise