Skip to content

(#339) Use modern APT keyrings on Debian family#338

Merged
ripienaar merged 1 commit into
mainfrom
modern-apt-keyring
Jan 15, 2024
Merged

(#339) Use modern APT keyrings on Debian family#338
ripienaar merged 1 commit into
mainfrom
modern-apt-keyring

Conversation

@smortex

@smortex smortex commented Jan 8, 2024

Copy link
Copy Markdown
Member

This makes use of puppetlabs/puppetlabs-apt#1128 to store the public key
in /etc/apt/keyrings and add a signed-by option to the
sources.list.d entry.

@smortex

smortex commented Jan 8, 2024

Copy link
Copy Markdown
Member Author

On Debian 12, the legacy usage produce this warning (we do not have bookworm packages ATM because there is no corresponding AIO package so for this test I use a modified version that install bullseye packages on bookworm):

W: mirror://mirrorlists.choria.io/apt/release/debian/bullseye/mirrors.txt/dists/debian/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.

This is also safe with older Debian versions (all supported releases have support for this).

@ripienaar

Copy link
Copy Markdown
Member

Thanks, be good to have an issue and the usual commit format here.

This makes use of puppetlabs/puppetlabs-apt#1128 to store the public key
in `/etc/apt/keyrings` and add a `signed-by` option to the
`sources.list.d` entry.
@smortex smortex force-pushed the modern-apt-keyring branch from 3e881cf to b12ea0c Compare January 11, 2024 20:24
@smortex smortex linked an issue Jan 11, 2024 that may be closed by this pull request
@ripienaar ripienaar changed the title Use modern APT keyrings on Debian family (#339) Use modern APT keyrings on Debian family Jan 15, 2024
@ripienaar ripienaar merged commit bdff976 into main Jan 15, 2024
@ripienaar ripienaar deleted the modern-apt-keyring branch January 15, 2024 10:31
@ripienaar

Copy link
Copy Markdown
Member

Thank you

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Modernize APT keyrings on Debian family

2 participants