Hailey@hailey@hails.org
debian heads, how do i import a pubkey to a keyring for apt on trixie? The old way no longer works
Hailey@hailey@hails.org
Hailey@hailey@hails.org
oh it looks like I can just pop the ascii armoured public key straight into signed-by and skip the whole keyring diversion entirely!
josch@josch@floss.social
@hailey@hails.org Yes, this feature is meant to fix the problem that in the past, you would tell apt "trust this keyring" and the problem was that this would mean that apt would trust all repos signed by this key which could be used to sneak in a repository that you never intended to trust but is signed by the same key. Bonus side effect: no more mucking around with keyrings and as a Debian derivative maintainer all I need to tell my users is: download this sources.list and that's it. It includes the key.