argus-archive-keyring (1.0.0-1)
Published 2026-08-07 19:27:21 +00:00 by tech
Installation
sudo curl https://git-cloud.weboria.eu/api/packages/Weboria/debian/repository.key -o /etc/apt/keyrings/gitea-Weboria.asc
echo "deb [signed-by=/etc/apt/keyrings/gitea-Weboria.asc] https://git-cloud.weboria.eu/api/packages/Weboria/debian $distribution $component" | sudo tee -a /etc/apt/sources.list.d/gitea.list
sudo apt updateChoose $distribution and $component from the list below.
sudo apt install argus-archive-keyring=1.0.0-1Repository Info
Distributions |
stable, staging |
Components |
main |
Architectures |
all |
About this package
ARGUS APT archive signing key and repository definition Ships /usr/share/keyrings/argus-archive-keyring.gpg (the dearmored public key Gitea's Debian package registry at git-cloud.weboria.eu generates and holds for the Weboria owner scope -- Gitea signs every Release file with the matching private key server-side; no signing secret is ever held by CI) and /etc/apt/sources.list.d/argus.sources (deb822, Signed-By, pointed at the `stable` suite). . Never uses apt-key and never grants global archive trust -- Signed-By scopes trust in this key to exactly this one repository entry, per current APT best practice (ADR-0040 M12). . This is the package a first-boot bootstrap script installs after fetching it over HTTPS and verifying its fingerprint against a value hardcoded in the installer (ADR-0040 M10's remaining "add repo + key" leg) -- see debian/README in this directory for the current key's fingerprint and how to re-derive it if the key is ever rotated.