docs: apt repo: deploy gpg to /usr/share/keyrings and use 'signed-by' in repo definition

gpg --dearmor because of note in https://wiki.debian.org/DebianRepository/UseThirdParty

fixes https://github.com/zrepl/zrepl/issues/529
This commit is contained in:
Christian Schwarz 2021-12-12 13:00:34 +01:00
parent c3f0041efd
commit af2905d245

View File

@ -9,18 +9,29 @@ The fingerprint of the signing key is ``E101 418F D3D6 FBCB 9D65 A62D 7086 99FC
It is available at `<https://zrepl.cschwarz.com/apt/apt-key.asc>`_ . It is available at `<https://zrepl.cschwarz.com/apt/apt-key.asc>`_ .
Please open an issue in on GitHub if you encounter any issues with the repository. Please open an issue in on GitHub if you encounter any issues with the repository.
The following snippet configure the repository for your Debian or Ubuntu release:
:: ::
sudo apt update && sudo apt install curl gnupg lsb-release; \ (
ARCH="$(dpkg --print-architecture)"; \ set -ex
CODENAME="$(lsb_release -i -s | tr '[:upper:]' '[:lower:]') $(lsb_release -c -s | tr '[:upper:]' '[:lower:]')"; \ zrepl_apt_key_url=https://zrepl.cschwarz.com/apt/apt-key.asc
echo "Using Distro and Codename: $CODENAME"; \ zrepl_apt_key_dst=/usr/share/keyrings/zrepl.gpg
(curl https://zrepl.cschwarz.com/apt/apt-key.asc | sudo apt-key add -) && \ zrepl_apt_repo_file=/etc/apt/sources.list.d/zrepl.list
(echo "deb [arch=$ARCH] https://zrepl.cschwarz.com/apt/$CODENAME main" | sudo tee /etc/apt/sources.list.d/zrepl.list) && \
sudo apt update
# Install dependencies for subsequent commands
sudo apt update && sudo apt install curl gnupg lsb-release
# Deploy the zrepl apt key.
curl -fsSL "$zrepl_apt_key_url" | tee | gpg --dearmor | sudo tee "$zrepl_apt_key_dst" > /dev/null
# Add the zrepl apt repo.
ARCH="$(dpkg --print-architecture)"
CODENAME="$(lsb_release -i -s | tr '[:upper:]' '[:lower:]') $(lsb_release -c -s | tr '[:upper:]' '[:lower:]')"
echo "Using Distro and Codename: $CODENAME"
echo "deb [arch=$ARCH signed-by=$zrepl_apt_key_dst] https://zrepl.cschwarz.com/apt/$CODENAME main" | sudo tee /etc/apt/sources.list.d/zrepl.list
# Update apt repos.
sudo apt update
)
.. NOTE:: .. NOTE::