Comprehensive Guide to APT Package Management in Offline Environments: Download Without Installation

Problem Context of Offline Package Management

In embedded systems, security-isolated environments, or network-restricted devices, computers may lack Network Interface Controllers (NICs), preventing direct internet access to software repositories. In such cases, users need to transfer software packages from networked computers to target devices via removable media like USB storage. The core challenge lies in downloading package files from the apt-get system without triggering the installation process.

Basic Solution: The --download-only Option

The apt-get command provides a dedicated download option with the basic syntax:

apt-get -d install <package_name>

Or using the full option name:

apt-get --download-only install <package_name>

This option is defined in the man apt-get documentation as: download package files only, without unpacking or installing. The corresponding configuration item is APT::Get::Download-Only. When executed, the system resolves package dependencies, downloads the main package and all its dependencies, but stops before the installation phase.

Download File Storage Location

By default, downloaded .deb package files are stored in the apt package cache directory:

/var/cache/apt/archives

This directory is organized into several subdirectories by function: archives stores complete package files, partial holds temporary files during download, and lock files ensure concurrent operation safety. Users can copy files from this directory to USB devices, then use dpkg -i *.deb for batch installation on target devices.

Advanced Extension Tools

For more complex offline management needs, the Debian ecosystem provides specialized extension packages:

apt-offline Tool

apt-offline is a comprehensive offline apt package manager that supports generating signed request files, downloading in networked environments, and then installing on offline devices. Its workflow consists of three phases:

# Generate request on offline device
apt-offline set offline.sig --install-packages <package_list>

# Download on networked device
apt-offline get offline.sig --bundle offline.zip

# Install on offline device
apt-offline install offline.zip

apt-zip Tool

apt-zip is specifically designed for updating non-networked computers using removable media, automatically handling dependencies and file organization:

# Prepare update package
apt-zip -a /media/usb update

# Install on target device
apt-zip -p /media/usb install

Custom Download Directory

The -o option allows specifying a custom cache directory, particularly useful when needing to download files directly to USB devices:

apt-get install -d -o dir::cache=/path/to/usb <package_name>

Note that the target directory must have the necessary subdirectory structure pre-created: archives, lock, and partial, otherwise the command will prompt for required directory information.

Technical Implementation Principles

apt-get's download mechanism is based on Debian's package management system architecture. When --download-only is specified, the system executes the following workflow: first, it queries software repository metadata and resolves dependency graphs; then downloads all required .deb files from mirror servers; finally verifies file integrity and signatures, but skips the pre-installation, configuration, and post-installation script execution stages of dpkg. This process ensures package file availability while avoiding changes to system state.

Practical Application Scenarios

This technology has significant application value in multiple environments: in security-sensitive production servers, administrators can download and verify packages in test environments before offline deployment to production; in bulk deployment scenarios, unified package mirrors can be created; in bandwidth-limited areas, centralized downloads can be distributed to multiple end devices. Combined with apt-cache depends and apt-cache rdepends commands, download scope can be further precisely controlled to avoid unnecessary package transfers.

Considerations and Best Practices

When using offline download functionality, pay attention to architecture compatibility to ensure downloaded packages match the target device's CPU architecture; maintain version consistency to avoid mixing packages from different Debian versions; regularly clean cache directories to prevent disk space exhaustion. It is recommended to verify file integrity using sha256sum after download and employ checksum mechanisms during transfer to ensure data accuracy.