Dev/APT

From Kicksecure
< Dev
Revision as of 10:43, 20 May 2022 by Patrick (talk | contribs) (Created page with "{{Header}} {{#seo: |description=TODO }} APT by default considers only signing keys in: * file <code>/etc/apt/trusted.gpg</code> * folder <code>/etc/apt/trusted.gpg.d/</code> Signing keys in folder <code>/usr/share/keyrings</code> are ignored by default by APT, unless the <code>signed-by</code> keyword is used in APT sources files (i.e. in configuration file <code>/etc/apt/sources.list</code> or in configuration snippet drop-in folder <code>/etc/apt/sources.list.d</cod...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search


APT by default considers only signing keys in:

  • file /etc/apt/trusted.gpg
  • folder /etc/apt/trusted.gpg.d/

Signing keys in folder /usr/share/keyrings are ignored by default by APT, unless the signed-by keyword is used in APT sources files (i.e. in configuration file /etc/apt/sources.list or in configuration snippet drop-in folder /etc/apt/sources.list.d).

Example signed-by keyword use:

[signed-by=/usr/share/keyrings/derivative.asc]

Example of complete deb line with signed-by keyword.

deb [signed-by=/usr/share/keyrings/derivative.asc] https://deb.kicksecure.com bullseye main contrib non-free

Footnotes

We believe security software like Kicksecure needs to remain Open Source and independent. Would you help sustain and grow the project? Learn more about our 12 year success story and maybe DONATE!