diff -Nru debian-archive-keyring-2021.1.1ubuntu1/debian/changelog debian-archive-keyring-2021.1.1ubuntu2/debian/changelog --- debian-archive-keyring-2021.1.1ubuntu1/debian/changelog 2021-03-26 11:11:13.000000000 +0000 +++ debian-archive-keyring-2021.1.1ubuntu2/debian/changelog 2022-01-25 17:51:18.000000000 +0000 @@ -1,3 +1,10 @@ +debian-archive-keyring (2021.1.1ubuntu2) jammy; urgency=medium + + * Document the fact that the keys are disabled in APT for Ubuntu + (LP: #1820586) + + -- Simon Chopin Tue, 25 Jan 2022 18:51:18 +0100 + debian-archive-keyring (2021.1.1ubuntu1) hirsute; urgency=low * Merge from Debian unstable. Remaining changes: diff -Nru debian-archive-keyring-2021.1.1ubuntu1/debian/control debian-archive-keyring-2021.1.1ubuntu2/debian/control --- debian-archive-keyring-2021.1.1ubuntu1/debian/control 2021-03-26 11:08:02.000000000 +0000 +++ debian-archive-keyring-2021.1.1ubuntu2/debian/control 2022-01-25 17:49:30.000000000 +0000 @@ -1,7 +1,8 @@ Source: debian-archive-keyring Priority: important Section: misc -Maintainer: Debian Release Team +Maintainer: Ubuntu Developers +XSBC-Original-Maintainer: Debian Release Team Uploaders: Niels Thykier , Jonathan Wiltshire , Build-Depends: debhelper (>= 10), jetring, gnupg @@ -17,6 +18,8 @@ Description: GnuPG archive keys of the Debian archive The Debian project digitally signs its Release files. This package contains the archive keys used for that. + . + In Ubuntu, those keys are disabled by default. Package: debian-archive-keyring-udeb Package-Type: udeb diff -Nru debian-archive-keyring-2021.1.1ubuntu1/README debian-archive-keyring-2021.1.1ubuntu2/README --- debian-archive-keyring-2021.1.1ubuntu1/README 2021-02-25 22:00:16.000000000 +0000 +++ debian-archive-keyring-2021.1.1ubuntu2/README 2022-01-25 17:39:02.000000000 +0000 @@ -25,3 +25,15 @@ More information about the archive authentication feature can be found in the manpage apt-secure(8). + +Note for Ubuntu users +--------------------- + +The Ubuntu package does NOT place the keys in the APT keystore by default, +as enabling the Debian repositories on an Ubuntu system can easily lead to +breakage. + +Assuming you know what you are doing, you can re-enable the Debian keyring in +APT using the following command: + +ln -s /usr/share/keyrings/debian-archive-keyring.gpg /etc/apt/trusted.gpg.d/