[Bug 53554] New: Compliance with Deb822: package archive keyring location

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=53554

Bug ID: 53554
           Summary: Compliance with Deb822: package archive keyring
                    location
           Product: WineHQ.org
           Version: unspecified
          Hardware: Other
                OS: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: www-unknown
          Assignee: [e-mail]
          Reporter: [e-mail]
      Distribution: ---

concerns: https://wiki.winehq.org/Debian

sources.list(5) says /usr/share/keyrings for keyrings managed by packages and
/etc/apt/keyrings for keyrings managed by the system operator. This was added
2022-05-23 to the https://wiki.debian.org/DebianRepository/UseThirdParty guide
"Recommend /etc/apt/keyrings for locally-managed keys, as per apt 2.4.0
changelog".

Also starting with apt version 2.4.0 is when /etc/apt/keyrings directory gets
introduced to be installed/created by the apt package itself. This corresponds
to Debian 12/Ubuntu 22. Previous to Debian 12/Ubuntu 22 the user will have to
create this directory. There was previously /etc/apt/trusted.gpg.d but that has
special meaning (as does /usr/share/keyrings itself being a system directory
not something for the system operator). The recommendation is /etc/apt/keyrings
so add to the WineHQ install instructions:

sudo mkdir -m755 -p /etc/apt/keyrings # not needed since apt version 2.4.0 like
Debian 12 and Ubuntu 22 or newer

The .sources files will need to be updated.

Alternatively if there was a package generated to manage installation of the
key to /usr/share/keyrings that could be a valid option.