Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

When I run this in SSH:

apt-get install package_name 

Then the package is installed. But from which site? Is it http://packages.debian.org

I know in ruby when you run gem intall xxx the gem is downloaded from rubygems.org. And not that long ago the site was hacked and the hackers installed a payload in 1 gem. It is possible to find the gems at github and see what is going on. Rubygems have also a status.rubygems.org. Is there any similar to debian packages?

share|improve this question
    
think we are talking about the wrong distro here... –  Bruno Pereira Feb 6 '13 at 15:49
    
I am asking which offical site are the packages downloaded from? Ubuntu server 10.04 –  Rails beginner Feb 6 '13 at 15:52
    
I think they are downloaded from debian.org/distrib/packages –  Rails beginner Feb 6 '13 at 15:53
add comment

2 Answers

up vote 3 down vote accepted

Type:

apt-cache policy package_name

And it'll tell you. On Ubuntu, it's usually archive.ubuntu.com, but you may have other sources set up.

share|improve this answer
    
People manage this packages at: launchpad.net/ubuntu? –  Rails beginner Feb 6 '13 at 16:23
add comment
cat /etc/apt/sources.list
cat /etc/apt/sources.d/*

should show you the repos used. I don't know how rubygems.org was protected but here is some useful pieces of advice on apt: http://wiki.debian.org/SecureApt it's for debian but it also applies to Ubuntu which uses the same packet manager.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.