Admin: Text replacement - "Category:Wiki" to "Category:Wiki '''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]''''' "

2026-01-17T07:05:34Z

Text replacement - "Category:Wiki" to "Category:Wiki '''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]''''' "

← Older revision		Revision as of 07:05, 17 January 2026
Line 1:		Line 1:
	[[Category:Wiki]]		[[Category:Wiki]]

			'''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]'''''


	== Syntax ==		== Syntax ==

Admin at 17:11, 6 January 2026

2026-01-06T17:11:35Z

← Older revision		Revision as of 17:11, 6 January 2026
Line 1:		Line 1:
	[[Category:Wiki]]		[[Category:Wiki]]

	~~'''[https://it-arts.net/index.php/Category:Wiki Return to the wiki index]'''~~

	== Syntax ==		== Syntax ==

Admin at 17:10, 6 January 2026

2026-01-06T17:10:58Z

← Older revision		Revision as of 17:10, 6 January 2026
Line 1:		Line 1:
	[[Category:Wiki]]		[[Category:Wiki]]

	~~<bold>~~[https://it-arts.net/index.php/Category:Wiki Return to the wiki index]~~</bold>~~		'''[https://it-arts.net/index.php/Category:Wiki Return to the wiki index]'''

	== Syntax ==		== Syntax ==

Admin at 17:10, 6 January 2026

2026-01-06T17:10:39Z

← Older revision		Revision as of 17:10, 6 January 2026
Line 1:		Line 1:
	[[Category:Wiki]]		[[Category:Wiki]]

	[https://it-arts.net/index.php/Category:Wiki Return to the wiki index]		<bold>[https://it-arts.net/index.php/Category:Wiki Return to the wiki index]</bold>

	== Syntax ==		== Syntax ==

Admin at 17:10, 6 January 2026

2026-01-06T17:10:08Z

← Older revision		Revision as of 17:10, 6 January 2026
Line 1:		Line 1:
	[[Category:Wiki]]		[[Category:Wiki]]

			[https://it-arts.net/index.php/Category:Wiki Return to the wiki index]

	== Syntax ==		== Syntax ==

Admin: Created page with "Category:Wiki == Syntax == apt-key [options] [command options] == Commands == === add === apt-key add [file] - Adds a new key to the list of trusted keys for apt. - The file argument can be a key file (in ASCII-armored format) or a public key URL. Example: sudo apt-key add /path/to/keyfile === del === apt-key del - Removes a key from the trusted list using its key I..."

2026-01-06T11:26:24Z

Created page with "Category:Wiki == Syntax == <nowiki> apt-key [options] <command> [command options]</nowiki> == Commands == === add === <nowiki> apt-key add [file]</nowiki> - Adds a new key to the list of trusted keys for apt. - The file argument can be a key file (in ASCII-armored format) or a public key URL. Example: <nowiki>sudo apt-key add /path/to/keyfile</nowiki> === del === <nowiki> apt-key del <keyid></nowiki> - Removes a key from the trusted list using its key I..."

New page

[[Category:Wiki]]

== Syntax ==

<nowiki>
apt-key [options] <command> [command options]</nowiki>

== Commands ==

=== add ===

<nowiki>
apt-key add [file]</nowiki>

- Adds a new key to the list of trusted keys for apt.
- The file argument can be a key file (in ASCII-armored format) or a public key URL.

Example:

<nowiki>sudo apt-key add /path/to/keyfile</nowiki>

=== del ===

<nowiki>
apt-key del <keyid></nowiki>

- Removes a key from the trusted list using its key ID.
- The key ID is typically the last 8 characters of the key fingerprint.

Example:

<nowiki>
sudo apt-key del ABCD1234 </nowiki>

=== list ===

<nowiki>
apt-key list</nowiki>

- Lists all the currently installed keys and their corresponding fingerprints.

Example:

<nowiki>
sudo apt-key list</nowiki>

=== export ===

<nowiki>apt-key export <keyid></nowiki>

- Exports a key to the standard output.
- The key ID can be a full key ID or a part of it.

Example:

<nowiki>
apt-key export ABCD1234</nowiki>

=== adv ===

<nowiki>
apt-key adv --keyserver <keyserver> --recv-keys <keyid></nowiki>

- Receives keys from a keyserver.
- This command fetches keys from a remote keyserver, which is useful when adding third-party repository keys.

Example:

<nowiki>
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys ABCD1234</nowiki>

== Security Concepts ==

=== Trusted Keys and the APT System ===

- APT relies on cryptographic signatures to ensure that the software packages you install come from trusted sources.
- The trusted keys list is maintained by `apt-key` and consists of the public keys of the repositories or package maintainers.
- The keys in `/etc/apt/trusted.gpg` and `/etc/apt/trusted.gpg.d/` ensure that apt can verify the integrity and authenticity of the package metadata.

=== Deprecated Methods ===

- The `apt-key` command has been deprecated in recent versions of APT, as the keyring management is transitioning to more modern solutions like signed-by in `.list` files.
- Using `apt-key` poses a potential security risk since it can lead to keys being imported into global keyrings without proper compartmentalization, which might allow unauthorized repositories to be trusted by the system.

=== Modern Key Management ===

- In modern usage, repositories should be configured to use `signed-by` for the keyring to prevent system-wide key management.
- Example repository entry:

<nowiki>
deb [signed-by=/etc/apt/trusted.gpg.d/myrepo.gpg] http://myrepo.com/ubuntu focal main</nowiki>

=== Key Expiration and Revocation ===

- Key expiration ensures that keys are not valid indefinitely. It's essential to monitor key expiration dates and update keys accordingly.
- Revocation allows a key to be marked as invalid, rendering any software packages signed with that key untrustworthy.
- Users should ensure that their system updates the repository keys regularly, especially for third-party repositories.

== Troubleshooting ==

=== Error: "The following signatures were invalid" ===

- This error occurs when the key used to sign the repository metadata is missing or outdated.
- To fix this issue, you can retrieve the correct key:

<nowiki>
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys <keyid></nowiki>

=== Error: "NO_PUBKEY" ===

- When you receive the "NO_PUBKEY" error, it means a key is missing for one of the repositories configured on your system.
- You can resolve this issue by fetching the missing key using the following command:

<nowiki>
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys <keyid></nowiki>

=== Warnings about Deprecation of apt-key ===

- If you encounter warnings about the deprecation of `apt-key`, consider switching to the new `signed-by` directive in your `/etc/apt/sources.list` or in the individual repository list files.

Example:

<nowiki>
deb [signed-by=/etc/apt/trusted.gpg.d/myrepo.gpg] http://myrepo.com/ubuntu focal main</nowiki>

=== Key is Not Available from Keyserver ===

- If a key cannot be retrieved from the keyserver, it might be due to a temporary network issue or an unresponsive keyserver.
- Try using a different keyserver:

<nowiki>
sudo apt-key adv --keyserver pool.sks-keyservers.net --recv-keys <keyid></nowiki>

=== The Key is Already Installed ===

- If you see an error indicating that the key is already installed, it means the key has been successfully imported before.
- You can check if the key exists using:

<nowiki>
sudo apt-key list</nowiki>

If it's present, you can skip adding the key.

== Useful Links ==

- [APT official documentation](https://man7.org/linux/man-pages/man8/apt-key.8.html)
- [Debian Keyring Management](https://www.debian.org/doc/manuals/apt-howto/ch-keys.en.html)
- [APT Repository Management](https://wiki.debian.org/SecureApt)
- [Ubuntu Keyserver Documentation](https://ubuntu.com/server/docs/security-keys)
- [The dangers of using apt-key](https://www.debian.org/releases/stable/amd64/index.en.html#keyring)

APT-KEY - Base Documentation - Revision history

Admin: Text replacement - "Category:Wiki" to "Category:Wiki '''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]''''' "

Admin at 17:11, 6 January 2026

Admin at 17:10, 6 January 2026

Admin at 17:10, 6 January 2026

Admin at 17:10, 6 January 2026