Skip to content

raspbian11: Use signed-by style on GPG key for apt repo #1147

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 1 commit into
base: master
Choose a base branch
from
Draft

raspbian11: Use signed-by style on GPG key for apt repo #1147

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 10 additions & 2 deletions installation/linux/raspbian-raspberry-pi.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,14 +5,20 @@ Fluent Bit is distributed as **fluent-bit** package and is available for the Ras
* Raspbian Bullseye \(11\)
* Raspbian Buster \(10\)

## Server GPG key
## Server GPG key (old style)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'd say this is confusing, let's just do it one way - the old docs are always around if people want the old way.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yup. I understand. Personally, I wanted to add common section to handle apt-key deprecation.


The first step is to add our server GPG key to your keyring, on that way you can get our signed packages:

```text
curl https://packages.fluentbit.io/fluentbit.key | sudo apt-key add -
```

## Server GPG key (new style)

```text
sudo bash -lc "curl https://packages.fluentbit.io/fluentbit.key | gpg --dearmor > /usr/share/keyrings/fluentbit-keyring.gpg"
```

### Updated key from March 2022

From the 1.9.0 and 1.8.15 releases please note that the GPG key has been updated at [https://packages.fluentbit.io/fluentbit.key](https://packages.fluentbit.io/fluentbit.key) so ensure this new one is added.
Expand Down Expand Up @@ -40,8 +46,10 @@ On Debian and derivative systems such as Raspbian, you need to add our APT serve

### Raspbian 11 \(Bullseye\)

For Raspbian 11, we recommend to use new style of storing GPG key and:

```text
deb https://packages.fluentbit.io/raspbian/bullseye bullseye main
deb [signed-by=/usr/share/keyrings/fluentbit-keyring.gpg] https://packages.fluentbit.io/raspbian/bullseye bullseye main
```

### Raspbian 10 \(Buster\)
Expand Down