Skip to content

apt-key deprecated - use signed-by #272

@dnisbet

Description

@dnisbet

Using apt-key gives warnings of deprecation, an often recommended way to specify the key to use is to drop it into /etc/apt/trusted.gpg.d/ which works fine with the current cookbook. However there is a further recommendation to use apt's [signed-by] field (eg https://blog.cloudflare.com/dont-use-apt-key/) but there's no facility in the cookbook to do this.

❔ Possible Solution

A signed-by property detailing the key file that signs for the apt repository.

⤴️ Describe alternatives you've considered

Just use trusted.gpg.d - but this does have it's own caveats, key in that folder is trusted for ALL repo's.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Feature RequestEnhancement to existing functionality or new functionality

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions