Debian Packaging

Repositories

/etc/apt/sources.list
deb     http://deb.debian.org/debian/              sid               main contrib non-free non-free-firmware
deb-src http://deb.debian.org/debian/              sid               main contrib non-free non-free-firmware
deb     http://security.debian.org/debian-security bookworm-security main contrib non-free non-free-firmware
deb-src http://security.debian.org/debian-security bookworm-security main contrib non-free non-free-firmware
deb     http://deb.debian.org/debian/              bookworm-updates  main contrib non-free non-free-firmware
deb-src http://deb.debian.org/debian/              bookworm-updates  main contrib non-free non-free-firmware

sudo apt update && sudo apt full-upgrade

Keys

Notes:

  • /etc/apt/trusted.gpg.d is insecure because it adds the key for all repositories

  • That’s why apt-key had to be deprecated

  • Use /usr/share/keyrings (or /etc/apt/keyrings) for 3rd party gpg keys

  • Put signed-by=/usr/share/keyrings/key.(gpg|asc) in repo definition

  • Prefer binary signatures (.gpg files), but ascii armored keys seems to work (as long as the extension is .asc)

  • No need to install gnupg (as long as you don’t use apt-key commands)

Using the newer DEB822 format

Versioning

Python