Mxl at 03:36, 15 January 2025

2025-01-15T03:36:43Z

← Older revision		Revision as of 03:36, 15 January 2025
Line 63:		Line 63:

	Or alternatively <code>Pin: origin repo.url</code>		Or alternatively <code>Pin: origin repo.url</code>

			[[Category:System Configuration]]

Mxl at 03:35, 15 January 2025

2025-01-15T03:35:10Z

← Older revision		Revision as of 03:35, 15 January 2025
Line 36:		Line 36:

	Note that a single dot <code>.</code> must be used to replace the empty line, otherwise the empty line will split the file into multiple entries.		Note that a single dot <code>.</code> must be used to replace the empty line, otherwise the empty line will split the file into multiple entries.

	<!--		<!--
	See:		See:
	- General instructions (above)		- General instructions (above)
	- https://askubuntu.com/a/1307181		- https://askubuntu.com/a/1307181
			TODO: link to why trusted keys are bad and why /etc/apt/keyrings is correct
	-->		-->

	~~<!-- TODO: link to why trusted keys are bad and why /etc/apt/keyrings is correct -->~~

	== Pinning ==		== Pinning ==
			<!-- TODO: flesh out section if useful -->

	Add a <code>.pref</code> file in <code>/etc/apt/preferences.d/</code> to allow only specified packages to be installed by using pinning.		Add a <code>.pref</code> file in <code>/etc/apt/preferences.d/</code> to allow only specified packages to be installed by using pinning.
Line 64:		Line 63:

	Or alternatively <code>Pin: origin repo.url</code>		Or alternatively <code>Pin: origin repo.url</code>

	~~<!-- TODO: flesh out section if useful -->~~

Mxl: Created page with "Best practices, references, and helpers for '''managing custom APT repositories''' on Debian-derived systems. The general advice is to put source lists in `/etc/apt/sources.list.d/` and keys in `/etc/apt/keyrings/`, referenced by `Signed-By` entries. The use of DEB822 Source Format is encouraged, as it simplifies managing repositories manually. == Resources == * Debian Wiki's general instructions on third-party repositories: https://wi..."

2025-01-15T03:33:08Z

Created page with "Best practices, references, and helpers for '''managing custom APT repositories''' on Debian-derived systems. The general advice is to put source lists in <code>/etc/apt/sources.list.d/</code> and keys in <code>/etc/apt/keyrings/</code>, referenced by <code>Signed-By</code> entries. The use of DEB822 Source Format is encouraged, as it simplifies managing repositories manually. == Resources == * Debian Wiki's general instructions on third-party repositories: https://wi..."

New page

Best practices, references, and helpers for '''managing custom APT repositories''' on Debian-derived systems.

The general advice is to put source lists in <code>/etc/apt/sources.list.d/</code> and keys in <code>/etc/apt/keyrings/</code>, referenced by <code>Signed-By</code> entries. The use of DEB822 Source Format is encouraged, as it simplifies managing repositories manually.

== Resources ==

* Debian Wiki's general instructions on third-party repositories: https://wiki.debian.org/DebianRepository/UseThirdParty
* Repolib's documentation of the DEB822 Source Format: https://repolib.readthedocs.io/en/latest/deb822-format.html
* Man page for APT <code>sources.list</code>: https://manpages.debian.org/unstable/apt/sources.list.5.en.html

== Converting list format to DEB822 ==

Given a line in the traditional list format <code><nowiki>deb [arch=arch1,arch2,... signed-by=/path/to/key] https://repo.url distribution component1 component2 ...</nowiki></code>, the corresponding DEB822 sources entry becomes:

<nowiki>Enabled: yes
Types: deb
URIs: https://repo.url
Suites: distribution ...
Components: component1 component2 ...
Architectures: arch1 arch2 ...
Signed-By: /path/to/key</nowiki>

Note: the <code>distribution</code> in the traditional entry becomes (one of) the <code>Suites</code> in the DEB822 entry.

== Signing Keys ==

Signing keys should be placed in <code>/etc/apt/keyrings/</code> and then by referenced by their file path in the <code>Signed-By</code> option in the source list entry.

Alternatively, keys can be ASCII-armored and referenced inline in a DEB822 source list:

<nowiki>Signed-By:
-----BEGIN PGP PUBLIC KEY BLOCK-----
.
mQINBGdCz4IBEACqA2UybPzUDw81EG0nXNUJ4Fk64pRkKqC5FwWUg7dPA4rtdMao
-----END PGP PUBLIC KEY BLOCK-----</nowiki>

Note that a single dot <code>.</code> must be used to replace the empty line, otherwise the empty line will split the file into multiple entries.





== Pinning ==

Add a <code>.pref</code> file in <code>/etc/apt/preferences.d/</code> to allow only specified packages to be installed by using pinning.

See "Standard pinning" in the linked Debian Wiki page.

For example, to disable packages from <code>contrib</code> and <code>non-free</code>, but allow installation of <code>libdvd-pkg</code>:

<nowiki>Explanation: Disable packages from debian contrib and non-free components by default
Package: *
Pin: release o=Debian,a=/^(stable|stable-updates|stable-security)$/,l=/^(Debian|Debian-Security)$/,c=/^(contrib|non-free)$/
Pin-Priority: -1

Explanation: Install libdvd-pkg from contrib
Package: libdvd-pkg
Pin: release o=Debian,a=stable,l=Debian,c=contrib
Pin-Priority: 500</nowiki>

Or alternatively <code>Pin: origin repo.url</code>

Managing and Adding APT Repositories - Revision history

Mxl at 03:36, 15 January 2025

Mxl at 03:35, 15 January 2025