kolla/releasenotes/notes/apt-keys-bb7c8678fc6d908b.yaml
Marcin Juszkiewicz ffaf102fec Debian/Ubuntu: handle APT keys in proper way
apt-key is deprecated and in Debian 'bullseye' it complain when we use
it the way we did.

The right way is to store key files in separate directory and then, for
each repo source file, point to proper key. And this is what this patch
does.

Both distros use the same keys now.

More info: https://michael-prokop.at/blog/2021/02/16/how-to-properly-use-3rd-party-debian-repository-signing-keys-with-apt/

Change-Id: Ie19bf46236907d79cb42a5e94cd1067e952b8cbb
2021-08-24 12:46:52 +00:00

13 lines
428 B
YAML

---
upgrade:
- |
Format of APT keys has changed from simple list into dictionary. For
``base_apt_keys`` we now use name and key ids and for ``remote_apt_keys``
names and URLs.
This allows to instruct APT to use those keys only for their repositories
instead of trusting them for all possible packages.
If you override ``base_apt_keys`` or ``remote_apt_keys`` then please adapt
to the new format.