[Bug 52439] apt-key is deprecated (bookworm/Debian)

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=52439

Sveinar Søpler  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #4 from Sveinar Søpler  ---
(In reply to jkfloris from comment #3)
> According to the Debian Wiki [1] the key should be placed in
>  /usr/share/keyrings/
> with the name
>  winehq-archive-keyring.gpg
>
> This also requires the sources.list(.d/winehq.list) file to be changed to:
> deb [signed-by=/usr/share/keyrings/winehq-archive-keyring.gpg] ...
>
> Or create a DEB822 format winehq.sources file in /etc/apt/sources.list.d/
> '''
> Types: deb
> URIs: https://dl.winehq.org/wine-builds/debian/
> Suites: bookworm
> Components: main
> Signed-By: /usr/share/keyrings/winehq-archive-keyring.gpg
> '''
>
> The question is how these steps can be done in a simple, fail-safe, easy and
> foolproof way.
>
> [1] https://wiki.debian.org/DebianRepository/UseThirdParty

I think it would be well worth looking into providing a DEB822 format file for
each distro that can be downloaded and put into /etc/apt/sources.list.d/
instead of adding it to the system sources.list file.

I think it is possible to actually add the PGP key to the .sources file when
using DEB822 format like this:

Types: deb
URIs: https://dl.winehq.org/wine-builds/debian/
Suites: bookworm
Components: main
Signed-By:
-----BEGIN PGP PUBLIC KEY BLOCK-----

XXXXX
-----END PGP PUBLIC KEY BLOCK-----

So it will possibly only be:
wget -nc https://dl.winehq.org/wine-builds/winehq-bookworm.sources
sudo mv winehq-bookworm.sources /etc/apt/sources.list.d/

Needs some testing tho..