id summary reporter owner description type status priority milestone component version resolution keywords cc 22148 debian package: apt-key is deprecated; new installation commands need to be documented skyper team "The command to download and store the gpg-key for the ubuntu package need to be updated under [wiki:Download#Ubuntu] as `apt-key add` is deprecated as insecure, see [https://manpages.debian.org/testing/apt/apt-key.8.en.html]. According to [https://wiki.debian.org/DebianRepository/UseThirdParty?action=show&redirect=RepositoryInstructions#OpenPGP_Key_distribution] the key should not be ascii-amored and stored in a separate directory beside `/etc/apt/trusted.gpg.d/`, e.g. `/usr/local/share/keyring/`, which might not exist so far, see [https://wiki.debian.org/DebianRepository/UseThirdParty?action=show&redirect=RepositoryInstructions#Sources.list_entry] As [wiki:Download?action=diff&version=188 this change] only changed the commands but not the underlying security issue, I reverted it. ---- * The command to remove the key from `/etc/apt/trusted.gpg` and `/etc/apt/trusted.gpg.d/` is something like {{{ #!sh apt-key del $(apt-key finger | grep -B1 """"| sed '$d' | cut -b 48-51,53-57) }}} " task new major Wiki content linux package install apt-key gpg security