doc/apt-key.8.xml

   1 <?xml version="1.0" encoding="utf-8" standalone="no"?>
   2 <!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
   3   "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
   4
   5 <!ENTITY % aptent SYSTEM "apt.ent">
   6 %aptent;
   7
   8 <!ENTITY % aptverbatiment SYSTEM "apt-verbatim.ent">
   9 %aptverbatiment;
  10
  11 <!ENTITY % aptvendor SYSTEM "apt-vendor.ent">
  12 %aptvendor;
  13 ]>
  14
  15 <refentry>
  16  <refentryinfo>
  17    &apt-author.jgunthorpe;
  18    &apt-author.team;
  19    &apt-email;
  20    &apt-product;
  21    <!-- The last update date -->
  22    <date>2012-06-09T00:00:00Z</date>
  23  </refentryinfo>
  24
  25  <refmeta>
  26    <refentrytitle>apt-key</refentrytitle>
  27    <manvolnum>8</manvolnum>
  28    <refmiscinfo class="manual">APT</refmiscinfo>
  29  </refmeta>
  30
  31  <!-- Man page title -->
  32  <refnamediv>
  33     <refname>apt-key</refname>
  34     <refpurpose>APT key management utility</refpurpose>
  35  </refnamediv>
  36
  37  &synopsis-command-apt-key;
  38
  39  <refsect1><title>Description</title>
  40    <para>
  41    <command>apt-key</command> is used to manage the list of keys used
  42    by apt to authenticate packages.  Packages which have been
  43    authenticated using these keys will be considered trusted.
  44    </para>
  45 </refsect1>
  46
  47 <refsect1><title>Commands</title>
  48    <variablelist>
  49      <varlistentry><term><option>add</option> <option>&synopsis-param-filename;</option></term>
  50      <listitem>
  51      <para>
  52        Add a new key to the list of trusted keys.
  53        The key is read from the filename given with the parameter
  54        &synopsis-param-filename; or if the filename is <literal>-</literal>
  55        from standard input.
  56      </para>
  57
  58      </listitem>
  59      </varlistentry>
  60
  61      <varlistentry><term><option>del</option> <option>&synopsis-param-keyid;</option></term>
  62      <listitem>
  63      <para>
  64
  65        Remove a key from the list of trusted keys.
  66
  67      </para>
  68
  69      </listitem>
  70      </varlistentry>
  71
  72      <varlistentry><term><option>export</option> <option>&synopsis-param-keyid;</option></term>
  73      <listitem>
  74      <para>
  75
  76         Output the key &synopsis-param-keyid; to standard output.
  77
  78      </para>
  79
  80      </listitem>
  81      </varlistentry>
  82
  83      <varlistentry><term><option>exportall</option></term>
  84      <listitem>
  85      <para>
  86
  87         Output all trusted keys to standard output.
  88
  89      </para>
  90
  91      </listitem>
  92      </varlistentry>
  93
  94      <varlistentry><term><option>list</option></term>
  95      <listitem>
  96      <para>
  97
  98        List trusted keys.
  99
 100      </para>
 101
 102      </listitem>
 103      </varlistentry>
 104
 105      <varlistentry><term><option>finger</option></term>
 106      <listitem>
 107      <para>
 108
 109      List fingerprints of trusted keys.
 110
 111      </para>
 112
 113      </listitem>
 114      </varlistentry>
 115
 116      <varlistentry><term><option>adv</option></term>
 117      <listitem>
 118      <para>
 119
 120      Pass advanced options to gpg. With adv --recv-key you can download the
 121          public key.
 122
 123      </para>
 124
 125      </listitem>
 126      </varlistentry>
 127
 128      <varlistentry><term><option>update</option></term>
 129      <listitem>
 130      <para>
 131
 132        Update the local keyring with the archive keyring and remove from
 133        the local keyring the archive keys which are no longer valid.
 134        The archive keyring is shipped in the <literal>archive-keyring</literal> package of your
 135        distribution, e.g. the &keyring-package; package in &keyring-distro;.
 136
 137      </para>
 138
 139      </listitem>
 140      </varlistentry>
 141
 142      <varlistentry><term><option>net-update</option></term>
 143      <listitem>
 144      <para>
 145
 146        Perform an update working similarly to the <command>update</command> command above,
 147        but get the archive keyring from a URI instead and validate it against a master key.
 148
 149        This requires an installed &wget; and an APT build configured to have
 150        a server to fetch from and a master keyring to validate.
 151
 152        APT in Debian does not support this command, relying on
 153        <command>update</command> instead, but Ubuntu's APT does.
 154
 155      </para>
 156
 157      </listitem>
 158      </varlistentry>
 159    </variablelist>
 160 </refsect1>
 161
 162  <refsect1><title>Options</title>
 163 <para>Note that options need to be defined before the commands described in the previous section.</para>
 164    <variablelist>
 165       <varlistentry><term><option>--keyring</option> <option>&synopsis-param-filename;</option></term>
 166       <listitem><para>With this option it is possible to specify a particular keyring
 167       file the command should operate on. The default is that a command is executed
 168       on the <filename>trusted.gpg</filename> file as well as on all parts in the
 169       <filename>trusted.gpg.d</filename> directory, though <filename>trusted.gpg</filename>
 170       is the primary keyring which means that e.g. new keys are added to this one.
 171       </para></listitem>
 172       </varlistentry>
 173    </variablelist>
 174  </refsect1>
 175
 176  <refsect1><title>Files</title>
 177    <variablelist>
 178
 179      &file-trustedgpg;
 180
 181      <varlistentry><term><filename>/etc/apt/trustdb.gpg</filename></term>
 182      <listitem><para>Local trust database of archive keys.</para></listitem>
 183      </varlistentry>
 184
 185      <varlistentry><term>&keyring-filename;</term>
 186      <listitem><para>Keyring of &keyring-distro; archive trusted keys.</para></listitem>
 187      </varlistentry>
 188
 189      <varlistentry><term>&keyring-removed-filename;</term>
 190      <listitem><para>Keyring of &keyring-distro; archive removed trusted keys.</para></listitem>
 191      </varlistentry>
 192
 193    </variablelist>
 194
 195 </refsect1>
 196
 197 <refsect1><title>See Also</title>
 198 <para>
 199 &apt-get;, &apt-secure;
 200 </para>
 201 </refsect1>
 202
 203  &manbugs;
 204  &manauthor;
 205
 206 </refentry>
 207