Comment 3 for bug 646901

as commented in bug #645147, I'm not going to upload anything to the Ubuntu archive that forcibly bypasses apt's gpg checking. I'll have a look at the apt bug.

 [UbuntuToolchains]
-packages=g++-4.4-arm-linux-gnueabi linux-libc-dev-armel-cross binutils-arm-linux-gnueabi
-source=http://archive.ubuntu.com/ubuntu
+packages=gcc-arm-linux-gnueabi libc-dev-armel-cross linux-libc-dev-armel-cross
+source=[arch=i386,amd64] http://archive.ubuntu.com/ubuntu
 suite=maverick
 components=main universe
 keyring=ubuntu-keyring

Why are you enabling multiarch sources here? Unless otherwise annotated, any sources.list entry is native-arch-only, which is what we want here; this syntax will cause pointless downloads of Packages files on apt-get update that correspond to neither the host nor the build arch.