[Bug 1862764] Re: add-apt-repository should use signed-by

[Marcos Ferreira]

I started using Ubuntu 22.04 and this issue started to occour.

The 'add-apt-repository' command adds the gpg key of the PPA repository
in the trusted.gpg file (/etc/apt/trusted.gpg)

As commented above, the PPA repositories are not being included in the
sources.list file (/etc/apt/sources.list) or in the directory
/etc/apt/sources.list.d/<repo-name> with the parameter [signed-by=]

Workaround:
While the fix doesn't come, the way is to adapt the repository in this way:
1- $ sudo add-apt-repository ppa:author/project
2- $ apt-key list
3- $ gpg --export <repository-fingerprint> | sudo tee /etc/apt/trusted.gpg.d/<repo-name>.gpg
4- $ sudo nano /etc/apt/sources.list.d/repository-name.list
5- Find & Replace:
deb http://ppa.launchpad.net/author/project/ubuntu jammy main
by
deb [signed-by=/etc/apt/trusted.gpg.d/<repo-name>.gpg http://ppa.launchpad.net/author/project/ubuntu jammy main

6- Save the changes and run 'sudo apt update' again

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to python-apt in Ubuntu.
https://bugs.launchpad.net/bugs/1862764

Title:
  add-apt-repository should use signed-by

Status in python-apt package in Ubuntu:
  Confirmed
Status in software-properties package in Ubuntu:
  Confirmed
Status in software-properties package in Debian:
  New

Bug description:
  add-apt-repository should use signed-by

  apt sources.list syntax supports limiting which keys are used to sign
  a given repo.

  It would be nice for add-apt-repository to import the key somewhere
  else but trusted.gpg.d and then specify path to it, using the "signed-
  by" field.

  ProblemType: Bug
  DistroRelease: Ubuntu 20.04
  Package: software-properties-common 0.98.6
  ProcVersionSignature: Ubuntu 5.4.0-1002.4-oem 5.4.8
  Uname: Linux 5.4.0-1002-oem x86_64
  NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
  ApportVersion: 2.20.11-0ubuntu16
  Architecture: amd64
  CurrentDesktop: ubuntu:GNOME
  Date: Tue Feb 11 12:01:49 2020
  InstallationDate: Installed on 2016-01-26 (1477 days ago)
  InstallationMedia: Ubuntu-Server 16.04 LTS "Xenial Xerus" - Alpha amd64 (20160125)
  PackageArchitecture: all
  ProcEnviron:
   TERM=xterm-256color
   PATH=(custom, no user)
   XDG_RUNTIME_DIR=<set>
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: software-properties
  UpgradeStatus: Upgraded to focal on 2019-01-15 (391 days ago)
  modified.conffile..etc.default.apport: [modified]
  mtime.conffile..etc.default.apport: 2020-01-10T16:24:15.968394

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-apt/+bug/1862764/+subscriptions