使用 reprepro 制作 apt 源

sudo chown www-data:www-data -R /var/www/packages

reprepro --basedir /var/www/packages/debian includedeb bookworm ~/bookworm/debhello_0.0-1_amd64.deb

reprepro --basedir /var/www/packages/debian processincoming bookworm

# 列出
reprepro list bookworm
# 移除
reprepro remove bookworm debhello
# 删除所有不在发行版中的包数据库
reprepro clearvanished

sudo mkdir /etc/nginx/htpasswd/
sudo htpasswd /etc/nginx/htpasswd/packages packages
sudo htpasswd /etc/nginx/htpasswd/packages jenkins

limit_except GET HEAD {
    auth_basic              "packages.notfound.cn";
    auth_basic_user_file    /etc/nginx/htpasswd/packages;
}

client_body_temp_path   /var/www/packages/client_temp;
create_full_put_path    off;
dav_access              user:rw group:rw all:r;
dav_methods             PUT DELETE MKCOL COPY MOVE;

#!/bin/bash

function error_400() {
    echo 'Status: 400 Bad Request'
    echo 'Content-Type: text/plain'
    echo ''
    echo "$1"
    exit 1
}

if [ "$REQUEST_METHOD" != 'POST' ]; then
    error_400 'only support POST'
fi

IFS='/'; set -- $REQUEST_URI
os=$3
distribution=$4

case "$os/$distribution" in
    debian/bookworm)
        ;;
    debian/bullseye)
        ;;
    ubuntu/jammy)
        ;;
    ubuntu/focal)
        ;;
    *)
        error_400 "unsupport $os/$distribution"
        ;;
esac

message=$(reprepro --basedir /var/www/packages/$os processincoming $distribution 2>&1)
if [ $? -ne 0 ]; then
    echo 'Status: 500 Internal Server header'
    echo 'Content-Type: text/plain'
    echo ''
    echo $message
    exit 1
fi

echo 'Status: 200 OK'
echo 'Content-Type: text/plain'
echo ''
echo 'success'
echo "$message"
exit 0

# vim: set tabstop=4 shiftwidth=4 expandtab

sudo a+x /usr/local/bin/reprepro.cgi

auth_basic              "packages.notfound.cn";
auth_basic_user_file    /etc/nginx/htpasswd/packages;

gzip off;

include         fastcgi_params;
fastcgi_pass    unix:/run/fcgiwrap.socket;

fastcgi_param SCRIPT_FILENAME /usr/local/bin/reprepro.cgi;

server {
    listen 80;
    # listen 443 ssl;
    server_name packages.notfound.cn;

    # ssl_certificate     /etc/nginx/cert.d/notfound.cn.crt;
    # ssl_certificate_key /etc/nginx/cert.d/notfound.cn.key;
    # ssl_protocols       TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;

    root /var/www/packages;

    access_log  /var/log/nginx/packages.access.log;
    error_log   /var/log/nginx/packages.error.log;

    client_max_body_size 100M;

    location / {
        autoindex on;
    }

    location ~ /(.*)/(conf|db) {
        deny all;
    }

    # debian: bookworm, bullseye
    location ~ ^/incoming/debian/(bookworm|bullseye)/cgi-bin/reprepro.cgi$ {
        include packages_fastcgi_params;
    }
    location ~ ^/incoming/debian/(bookworm|bullseye)/ {
        autoindex   on;
        include     packages_dav_params;
    }

    # ubuntu: jammy, focal
    location ~ ^/incoming/ubuntu/(jammy|focal)/cgi-bin/reprepro.cgi$ {
        include packages_fastcgi_params;
    }
    location ~ ^/incoming/ubuntu/(jammy|focal)/ {
        autoindex   on;
        include     packages_dav_params;
    }
}