Bug#968148: apt: please document replacement for 'apt-key list'

[Julian Andres Klode <jak@debian.org>]

Control: severity -1 minor

On Sun, Aug 09, 2020 at 09:33:27PM +0200, Piotr Engelking wrote:
> Package: apt
> Version: 2.1.8
> Severity: wishlist
> 
> Running the 'apt key list' command gives the following information:
> 
>   Warning: apt-key is deprecated.  Manage keyring files in
>   trusted.gpg.d instead (see apt-key(8)).
> 
> Neither the manpage nor other documentation suggests what to replace
> the command with. Please document it.

There is no replacement. Plans need to be made at some point, though
you can arguably just run gpg on the keyring files, like this:

gpg --no-default-keyring --keyring /etc/apt/trusted.gpg.d/steam.gpg --list-key

Adding the deprecation messages now is more important than figuring out how
to replace the commands. It's 2020 and people are still using apt-key when
they should not be - a lot of apt-key adv or apt-key add commands are still
floating around.

I want to get a clear message out that apt-key is deprecated, and people should
stop using it. How we deal with the list use case is a different topic.

I also need to add a deprecation notice to apt update if a repository
was signed with a key from trusted.gpg instead of trusted.gpg.d, so we
can completely stop using trusted.gpg once bullseye (and Ubuntu 22.04) is
released, at which point all apt-key add use will naturally break :)

-- 
debian developer - deb.li/jak | jak-linux.org - free software dev
ubuntu core developer                              i speak de, en