Skip to content

feat: update the key management scheme to be compatible with recent Debian key management - #427

Open
doudou wants to merge 2 commits into
masterfrom
new_apt_key_management
Open

doudou wants to merge 2 commits into
masterfrom
new_apt_key_management

Conversation

@doudou

@doudou doudou commented Dec 30, 2025

Copy link
Copy Markdown
Member

apt-key is deprecated. One is now supposed to save the keys separately in
/etc/apt/keyrings and refer to them with the signed-by attribute.

This commit updates the existing scheme to allow for named keys, that is
the 'keys' entries in osrepos can have a 'name' entry, and the 'repo' entries
should have a 'key' entry with the name of that key

If a key has a name, it is saved in /etc/apt/keyrings instead of being passed
to apt-key. If a repo has a 'key' entry, it gets the corresponding signed-by
attribute.

@doudou
doudou requested a review from g-arjones December 30, 2025 01:49
@doudou
doudou force-pushed the new_apt_key_management branch from 1ad26d8 to c35fe5c Compare December 30, 2025 14:59
@g-arjones

Copy link
Copy Markdown
Contributor

Cool! Tests are failing though...

@chhtz chhtz mentioned this pull request Feb 2, 2026
@doudou
doudou force-pushed the new_apt_key_management branch from 4732bd3 to e0e124a Compare June 9, 2026 16:29
doudou added 2 commits June 9, 2026 13:29
…ebian key management

apt-key is deprecated. One is now supposed to save the keys separately in
/etc/apt/keyrings and refer to them with the signed-by attribute.

This commit updates the existing scheme to allow for named keys, that is
the 'keys' entries in osrepos can have a 'name' entry, and the 'repo' entries
should have a 'key' entry with the name of that key

If a key has a name, it is saved in /etc/apt/keyrings instead of being passed
to apt-key. If a repo has a 'key' entry, it gets the corresponding signed-by
attribute.
Aruba 2.2 seems to have a weird bug related to accessing `stdin`. Stick to 2.1
on ruby < 3 and move to 2.3 on ruby > 3
@doudou
doudou force-pushed the new_apt_key_management branch from e0e124a to ee844cc Compare June 9, 2026 16:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants