Apt repository not signed

[bluecmd]

Hi,

I'm trying to figure out how to run ONL in a production environment. I've managed to build ONL from github and install it - but while installing packages with apt works, apt warns that the repository is not signed.

Is this working as intended?

root@localhost:~# apt update
Ign:1 http://apt.opennetlinux.org/debian unstable InRelease
Get:3 http://apt.opennetlinux.org/debian unstable Release
Ign:2 http://mirrors.edge.kernel.org/debian stretch InRelease            
Ign:4 http://apt.opennetlinux.org/debian unstable Release.gpg
Hit:5 http://mirrors.edge.kernel.org/debian stretch Release
Reading package lists... Done
E: The repository 'http://apt.opennetlinux.org/debian unstable Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

[fquinner]

This is still a thing. A workaround (whether it's a good idea or not is another question) is updating /etc/apt/sources.list.d/multistrap-onl.list with:

deb [arch=amd64 trusted=yes] http://apt.opennetlinux.org/debian ./unstable main