Tell me more ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.
up vote 1 down vote favorite

When I run this in SSH:

apt-get install package_name

Then the package is installed. But from which site? Is it http://packages.debian.org

I know in ruby when you run gem intall xxx the gem is downloaded from rubygems.org. And not that long ago the site was hacked and the hackers installed a payload in 1 gem. It is possible to find the gems at github and see what is going on. Rubygems have also a status.rubygems.org. Is there any similar to debian packages?

share|improve this question
think we are talking about the wrong distro here... – Bruno Pereira♦ Feb 6 at 15:49
I am asking which offical site are the packages downloaded from? Ubuntu server 10.04 – Rails beginner Feb 6 at 15:52
I think they are downloaded from debian.org/distrib/packages – Rails beginner Feb 6 at 15:53

2 Answers

up vote 3 down vote accepted

Type:

apt-cache policy package_name

And it'll tell you. On Ubuntu, it's usually archive.ubuntu.com, but you may have other sources set up.

share|improve this answer
People manage this packages at: launchpad.net/ubuntu? – Rails beginner Feb 6 at 16:23
up vote 2 down vote 
cat /etc/apt/sources.list
cat /etc/apt/sources.d/*

should show you the repos used. I don't know how rubygems.org was protected but here is some useful pieces of advice on apt: http://wiki.debian.org/SecureApt it's for debian but it also applies to Ubuntu which uses the same packet manager.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.