github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #5469] PPA installation: Key is stored in legacy trusted.gpg keyring (Linux Mint) #3009

New issue

Closed

opened 2026-05-05 09:39:41 -06:00 by gitea-mirror · 4 comments

gitea-mirror commented

2026-05-05 09:39:41 -06:00

Owner

Originally created by @Frostbyte4664 on GitHub (Nov 11, 2022).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5469

Adding the PPA with sudo add-apt-repository ppa:deki/firejail stores the key in the legacy trusted.gpg keyring, which has been depreciated in favor of separating individual keys.

I wrote a small bash script to download the key and add the repository properly.
Something like this should be used in place of of add-apt-repository.

# Get codename of distro for list entry
codename=$( awk -F= '/UBUNTU_CODENAME/{print $2}' /etc/os-release )

# Add gpg key
wget -qO- "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x60537cdcf684460c" |\
gpg --dearmor |\
sudo tee /usr/share/keyrings/firejail-keyring.gpg > /dev/null

# Add repository
echo -e "deb [ signed-by=/usr/share/keyrings/firejail-keyring.gpg ] https://ppa.launchpadcontent.net/deki/firejail/ubuntu $codename main" |\
sudo tee /etc/apt/sources.list.d/firejail.list > /dev/null

Originally created by @Frostbyte4664 on GitHub (Nov 11, 2022). Original GitHub issue: https://github.com/netblue30/firejail/issues/5469 Adding the PPA with `sudo add-apt-repository ppa:deki/firejail` stores the key in the legacy trusted.gpg keyring, which has been depreciated in favor of separating individual keys. ![image](https://user-images.githubusercontent.com/72130297/201266192-f90ca8d0-8f66-437e-a09e-81dfed44de2e.png) I wrote a small bash script to download the key and add the repository properly. Something like this should be used in place of of `add-apt-repository`. ~~~ # Get codename of distro for list entry codename=$( awk -F= '/UBUNTU_CODENAME/{print $2}' /etc/os-release ) # Add gpg key wget -qO- "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x60537cdcf684460c" |\ gpg --dearmor |\ sudo tee /usr/share/keyrings/firejail-keyring.gpg > /dev/null # Add repository echo -e "deb [ signed-by=/usr/share/keyrings/firejail-keyring.gpg ] https://ppa.launchpadcontent.net/deki/firejail/ubuntu $codename main" |\ sudo tee /etc/apt/sources.list.d/firejail.list > /dev/null ~~~

gitea-mirror

2026-05-05 09:39:41 -06:00

closed this issue
added the
notourbug

installation
labels

gitea-mirror commented

2026-05-05 09:39:45 -06:00

Author

Owner

@reinerh commented on GitHub (Nov 11, 2022):

Thanks for the heads-up. Interestingly the add-apt-repository method is still the one recommended by launchpad.

I would expect that the ubuntu developers fix add-apt-repository to use the new way of storing keys.

@reinerh commented on GitHub (Nov 11, 2022): Thanks for the heads-up. Interestingly the `add-apt-repository` method is still the one recommended by [launchpad](https://launchpad.net/~deki/+archive/ubuntu/firejail). I would expect that the ubuntu developers fix add-apt-repository to use the new way of storing keys.

gitea-mirror commented

2026-05-05 09:39:46 -06:00

Author

Owner

@Frostbyte4664 commented on GitHub (Nov 11, 2022):

I'm dumb. This problem is not present in the latest release of Ubuntu, but it is present in the latest release of Linux Mint.

@Frostbyte4664 commented on GitHub (Nov 11, 2022): I'm dumb. This problem is not present in the latest release of Ubuntu, but it is present in the latest release of Linux Mint.

gitea-mirror commented

2026-05-05 09:39:47 -06:00

Author

Owner

@reinerh commented on GitHub (Nov 12, 2022):

I'll close the issue then. It sounds like add-apt-repository is still the recommended way. I assume that it will fix itself once Mint updates their tools.

@reinerh commented on GitHub (Nov 12, 2022): I'll close the issue then. It sounds like `add-apt-repository` is still the recommended way. I assume that it will fix itself once Mint updates their tools.

gitea-mirror commented

2026-05-05 09:39:47 -06:00

Author

Owner

@kmk3 commented on GitHub (Nov 13, 2022):

(Re-closing as "not planned" since nothing was changed in firejail)

@kmk3 commented on GitHub (Nov 13, 2022): (Re-closing as "not planned" since nothing was changed in firejail)

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3009

No description provided.

Rows
Columns