Ubuntu keys are stored in /etc/apt/trusted.gpg and I don't know how to link tham to /usr/share/keyrings

Question

When I update the repositories (apt update) I get the following message:

    diego@diego-ubuntu:~$ sudo apt update 
    Hit:1 http://br.archive.ubuntu.com/ubuntu jammy InRelease
    Hit:2 http://br.archive.ubuntu.com/ubuntu jammy-updates InRelease
    Hit:3 http://br.archive.ubuntu.com/ubuntu jammy-backports InRelease
    Hit:4 http://security.ubuntu.com/ubuntu jammy-security InRelease
    Reading package lists... Done
    Building dependency tree... Done
    Reading state information... Done
    All packages are up to date.
    W: http://br.archive.ubuntu.com/ubuntu/dists/jammy/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.
    W: http://br.archive.ubuntu.com/ubuntu/dists/jammy-updates/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.
    W: http://br.archive.ubuntu.com/ubuntu/dists/jammy-backports/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.
    W: http://security.ubuntu.com/ubuntu/dists/jammy-security/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.

Well, I didn't know exactly what the problem was and I decided to research. So I read some posts and noticed that I needed to change the place keys and then point them in the sources.list, which seemed easy with 3rd party repositories (like in this post, and in this one as well).

However, here's my problem: my affected repositories are Ubuntu's own, and I don't know how to push them to /usr/share/keyrings with the correct links. The keys in /etc/apt/trusted.gpg are these (output of apt-key list):

diego@diego-ubuntu:~$ apt-key list
Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)).
/etc/apt/trusted.gpg
--------------------
pub   rsa4096 2012-05-11 [SC]
      790B C727 7767 219C 42C8  6F93 3B4F E6AC C0B2 1F32
uid           [ unknown] Ubuntu Archive Automatic Signing Key (2012) <ftpmaster@ubuntu.com>

pub   rsa4096 2012-05-11 [SC]
      8439 38DF 228D 22F7 B374  2BC0 D94A A3F0 EFE2 1092
uid           [ unknown] Ubuntu CD Image Automatic Signing Key (2012) <cdimage@ubuntu.com>

pub   rsa4096 2018-09-17 [SC]
      F6EC B376 2474 EDA9 D21B  7022 8719 20D1 991B C93C
uid           [ unknown] Ubuntu Archive Automatic Signing Key (2018) <ftpmaster@ubuntu.com>

Finally, my keys in /usr/share/keyrings are these:

diego@diego-ubuntu:~$ ls /usr/share/keyrings/
ubuntu-advantage-cc-eal.gpg    ubuntu-advantage-esm-infra-trusty.gpg  ubuntu-archive-keyring.gpg       ubuntu-cloudimage-removed-keys.gpg
ubuntu-advantage-cis.gpg       ubuntu-advantage-fips.gpg              ubuntu-archive-removed-keys.gpg  ubuntu-keyring-2012-cdimage.gpg
ubuntu-advantage-esm-apps.gpg  ubuntu-advantage-ros.gpg               ubuntu-cloudimage-keyring.gpg    ubuntu-master-keyring.gpg

I hope someone can help me solve this. If any more output is needed, just ask. Thank you very much!

If I were you, I would leave this to the developers of your distribution: this is a transition, and while the current system in the future will stop working, for now, I would, as a user, leave things as they are. The idea otherwise is not that you link the keys, but move them away and refer to them in the sources.list, which you would need to do manually one by one. — vanadium, Apr 25 '22 at 08:21

Ubuntu keys are stored in /etc/apt/trusted.gpg and I don't know how to link tham to /usr/share/keyrings

0 Answers0