sous-chefs / apt

Development repository for the apt cookbook
https://supermarket.chef.io/cookbooks/apt
Apache License 2.0
202 stars 266 forks source link

apt-key deprecated - use signed-by #272

Open dnisbet opened 1 year ago

dnisbet commented 1 year ago

Using apt-key gives warnings of deprecation, an often recommended way to specify the key to use is to drop it into /etc/apt/trusted.gpg.d/ which works fine with the current cookbook. However there is a further recommendation to use apt's [signed-by] field (eg https://blog.cloudflare.com/dont-use-apt-key/) but there's no facility in the cookbook to do this.

:grey_question: Possible Solution

A signed-by property detailing the key file that signs for the apt repository.

:arrow_heading_up: Describe alternatives you've considered

Just use trusted.gpg.d - but this does have it's own caveats, key in that folder is trusted for ALL repo's.