Bug#1002820: Please document adding keys to /etc/apt/trusted.gpg.d/ in detail
Package: apt
Version: 2.2.4
Severity: normal
X-Debbugs-Cc: debian@rocketjump.eu
Hi,
I noticed that apt-key(8) prominently mentions being deprecated. However, the
alternative is only mentioned in a single sentence under the "add" parameter,
which is easily overseen. It would be great if the knowledge in [0] is poured
into a man page to point users to. Specifically, I'd add a full section about
key management to apt(8) or sources.list(5), and that ascii-armored keys need
the .asc extension, binary encoded keys use need the .gpg extension, which
Debian releases support which, and how to verify that the key is accepted.
Thanks in advance!
Regards,
Lee
[0] https://blog.jak-linux.org/2021/06/20/migrating-away-apt-key/
-- Package-specific info:
-- (no /etc/apt/preferences present) --
-- (no /etc/apt/preferences.d/* present) --
-- (/etc/apt/sources.list present, but not submitted) --
-- (/etc/apt/sources.list.d/chef-stable.list present, but not submitted) --
-- System Information:
Debian Release: 11.2
APT prefers stable-updates
APT policy: (990, 'stable-updates'), (990, 'stable-security'), (990, 'stable'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 5.15.11 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_USER, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages apt depends on:
ii adduser 3.118
ii debian-archive-keyring 2021.1.1
ii gpgv 2.2.27-2
ii libapt-pkg6.0 2.2.4
ii libc6 2.31-13+deb11u2
ii libgcc-s1 10.2.1-6
ii libgnutls30 3.7.1-5
ii libseccomp2 2.5.1-1+deb11u1
ii libstdc++6 10.2.1-6
ii libsystemd0 247.3-6
Versions of packages apt recommends:
ii ca-certificates 20210119
Versions of packages apt suggests:
pn apt-doc <none>
ii aptitude 0.8.13-3
ii dpkg-dev 1.20.9
ii gnupg 2.2.27-2
ii powermgmt-base 1.36
ii synaptic 0.90.2
-- no debconf information
Reply to: