apt-repos: Use signed-by instead of globally trusted keys.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
This commit is contained in:
Anders Kaseorg 2025-08-12 15:39:38 -07:00 committed by Tim Abbott
parent 60fe9d438f
commit fd1543a67c
8 changed files with 25 additions and 25 deletions

View File

@ -98,7 +98,7 @@ if ! apt-get -dy install "${pre_setup_deps[@]}"; then
fi
apt-get -y install "${pre_setup_deps[@]}"
apt-key add "$LIST_PATH/"*.asc
cp "$LIST_PATH/"*.asc /etc/apt/keyrings/
cp "$LIST_PATH/$release.list" "$SOURCES_FILE"
if [ -e "$LIST_PATH/custom.sh" ]; then

View File

@ -1,2 +1,2 @@
deb http://www.ksplice.com/apt jammy ksplice
deb-src http://www.ksplice.com/apt jammy ksplice
deb [signed-by=/etc/apt/keyrings/ksplice.asc] http://www.ksplice.com/apt jammy ksplice
deb-src [signed-by=/etc/apt/keyrings/ksplice.asc] http://www.ksplice.com/apt jammy ksplice

View File

@ -1,2 +1,2 @@
deb http://www.ksplice.com/apt noble ksplice
deb-src http://www.ksplice.com/apt noble ksplice
deb [signed-by=/etc/apt/keyrings/ksplice.asc] http://www.ksplice.com/apt noble ksplice
deb-src [signed-by=/etc/apt/keyrings/ksplice.asc] http://www.ksplice.com/apt noble ksplice

View File

@ -1 +1 @@
deb https://apt.releases.teleport.dev/ubuntu jammy stable/v17
deb [signed-by=/etc/apt/keyrings/teleport-pubkey.asc] https://apt.releases.teleport.dev/ubuntu jammy stable/v17

View File

@ -1 +1 @@
deb https://apt.releases.teleport.dev/ubuntu noble stable/v17
deb [signed-by=/etc/apt/keyrings/teleport-pubkey.asc] https://apt.releases.teleport.dev/ubuntu noble stable/v17

View File

@ -1,5 +1,5 @@
deb http://apt.postgresql.org/pub/repos/apt/ bookworm-pgdg main
deb-src http://apt.postgresql.org/pub/repos/apt/ bookworm-pgdg main
deb [signed-by=/etc/apt/keyrings/pgdg.asc] http://apt.postgresql.org/pub/repos/apt/ bookworm-pgdg main
deb-src [signed-by=/etc/apt/keyrings/pgdg.asc] http://apt.postgresql.org/pub/repos/apt/ bookworm-pgdg main
deb http://deb.debian.org/debian bookworm-backports main
deb-src http://deb.debian.org/debian bookworm-backports main

View File

@ -1,11 +1,11 @@
deb http://apt.postgresql.org/pub/repos/apt/ jammy-pgdg main
deb-src http://apt.postgresql.org/pub/repos/apt/ jammy-pgdg main
deb [signed-by=/etc/apt/keyrings/pgdg.asc] http://apt.postgresql.org/pub/repos/apt/ jammy-pgdg main
deb-src [signed-by=/etc/apt/keyrings/pgdg.asc] http://apt.postgresql.org/pub/repos/apt/ jammy-pgdg main
deb http://ppa.launchpad.net/groonga/ppa/ubuntu jammy main
deb-src http://ppa.launchpad.net/groonga/ppa/ubuntu jammy main
deb [signed-by=/etc/apt/keyrings/pgroonga-ppa.asc] http://ppa.launchpad.net/groonga/ppa/ubuntu jammy main
deb-src [signed-by=/etc/apt/keyrings/pgroonga-ppa.asc] http://ppa.launchpad.net/groonga/ppa/ubuntu jammy main
deb https://ppa.launchpadcontent.net/strukturag/libheif/ubuntu/ jammy main
deb-src https://ppa.launchpadcontent.net/strukturag/libheif/ubuntu/ jammy main
deb [signed-by=/etc/apt/keyrings/strukturag.asc] https://ppa.launchpadcontent.net/strukturag/libheif/ubuntu/ jammy main
deb-src [signed-by=/etc/apt/keyrings/strukturag.asc] https://ppa.launchpadcontent.net/strukturag/libheif/ubuntu/ jammy main
deb https://ppa.launchpadcontent.net/strukturag/libde265/ubuntu/ jammy main
deb-src https://ppa.launchpadcontent.net/strukturag/libde265/ubuntu/ jammy main
deb [signed-by=/etc/apt/keyrings/strukturag.asc] https://ppa.launchpadcontent.net/strukturag/libde265/ubuntu/ jammy main
deb-src [signed-by=/etc/apt/keyrings/strukturag.asc] https://ppa.launchpadcontent.net/strukturag/libde265/ubuntu/ jammy main

View File

@ -1,12 +1,12 @@
deb http://apt.postgresql.org/pub/repos/apt/ noble-pgdg main
deb-src http://apt.postgresql.org/pub/repos/apt/ noble-pgdg main
deb [signed-by=/etc/apt/keyrings/pgdg.asc] http://apt.postgresql.org/pub/repos/apt/ noble-pgdg main
deb-src [signed-by=/etc/apt/keyrings/pgdg.asc] http://apt.postgresql.org/pub/repos/apt/ noble-pgdg main
deb http://ppa.launchpad.net/groonga/ppa/ubuntu noble main
deb-src http://ppa.launchpad.net/groonga/ppa/ubuntu noble main
deb [signed-by=/etc/apt/keyrings/pgroonga-ppa.asc] http://ppa.launchpad.net/groonga/ppa/ubuntu noble main
deb-src [signed-by=/etc/apt/keyrings/pgroonga-ppa.asc] http://ppa.launchpad.net/groonga/ppa/ubuntu noble main
deb https://ppa.launchpadcontent.net/strukturag/libheif/ubuntu/ noble main
deb-src https://ppa.launchpadcontent.net/strukturag/libheif/ubuntu/ noble main
deb [signed-by=/etc/apt/keyrings/strukturag.asc] https://ppa.launchpadcontent.net/strukturag/libheif/ubuntu/ noble main
deb-src [signed-by=/etc/apt/keyrings/strukturag.asc] https://ppa.launchpadcontent.net/strukturag/libheif/ubuntu/ noble main
# libde265 in 24.04 is up-to-date, so the PPA doesn't provide 24.04 packages
#deb https://ppa.launchpadcontent.net/strukturag/libde265/ubuntu/ noble main
#deb-src https://ppa.launchpadcontent.net/strukturag/libde265/ubuntu/ noble main
#deb [signed-by=/etc/apt/keyrings/strukturag.asc] https://ppa.launchpadcontent.net/strukturag/libde265/ubuntu/ noble main
#deb-src [signed-by=/etc/apt/keyrings/strukturag.asc] https://ppa.launchpadcontent.net/strukturag/libde265/ubuntu/ noble main