newrelic / ansible-install

Building installation support for our customers are using ansible to manage their infrastructure and services at scale
Apache License 2.0
8 stars 6 forks source link

Trusted.gpg deprecation in future Ubuntu versions #77

Open dcruzrinkel opened 4 months ago

dcruzrinkel commented 4 months ago

Summary

W: https://download.newrelic.com/infrastructure_agent/linux/apt/dists/jammy/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.

Ubuntu 24.04 will be released next April and it will include a deprecation for the trusted.gpg files.

Desired Behavior

GPG keys should be included in /usr/share/keyrings or /etc/apt/keyrings and then included in the repo file.

deb [signed-by=/etc/apt/trusted.gpg.d/GPGkey] https://whatever_repo stable main

About the right location for GPG keys.

/usr/share/keyrings for keyrings managed by packages, and /etc/apt/keyrings for keyrings managed by the system operator.

Possible Solution

Additional context

We receive a warning right now, but in a couple of months this will be mandatory when updating. The updated method will also work (at least) in Ubuntu 22.04.