Add gpg files into /usr/share/ostree/trusted.gpg.d

#1

How to add gpg files into /usr/share/ostree/trusted.gpg.d?
Is there any spesific ostree command?

#2

Not to that particular location since it’s read-only, but for gpg keys in general you can use ostree remote gpg-import to associate them with a remote. I believe they go in /etc.

1 Like
#3

That directory should be considered deprecated; the new model for libostree is to have “per-remote” GPG keys. Probably we should have a default directory for that in /etc so you can use gpgkeypath= nicely. @refi64’s suggestion is also fine, that will store them in the repository.

Can you be more precise on why you want to add a key? For the Fedora remotes we recommend doing gpgkeypath=/etc/pki/rpm-gpg/ to import all keys there.

2 Likes
#4

Just trying to add gpg from Endless OS, so that i can install Endless apps from Endless flatpak repositories.

#5

I believe Flatpak gpg keys are stored separately, they should be part of the .flatpakrepo file you use to import the repository, or you could run ostree gpg-import, passing --repo=/var/lib/flatpak/repo (or ~/.local/share/flatpak/repo for user installs).

2 Likes