---
title: "Debian Setup Script Improvements"
description: ""
canonical_url: "https://cloudsmith.com/changelog/debian-setup-script-improvements"
last_updated: "2022-05-18T08:21:00.000Z"
---
# Debian Setup Script Improvements

This is a heads up for our Debian users! As of today, we have updated our repository setup script and documentation to no longer rely on the recently deprecated _apt-key_ binary.

## What does this mean?

The _apt-key_ binary was previously used within the Cloudsmith setup script for Debian systems to install the repository GPG key to the system keyring. This method is no longer recommended and is deprecated from Debian Stretch and Ubuntu 22.04 onwards. Debian encourages user keyrings for repository signing keys, and we have taken note!

## What is the impact?

For <u>most users, there should be no material impact</u>. Existing repository installations will continue to function as usual. Users who leverage the generated script will notice that this now installs repository keys via the more secure and recommended approach. We have also tailored this to ensure that our users on legacy systems remain unaffected.

If, however you or your users leverage the _config.deb.txt_ endpoint, please note that this now automatically includes the _signed-by_ directive, expecting the GPG key to be installed to _/usr/share/keyrings_.

## I don't use the setup script. How do I add my repository now?

You can now use the following manual steps to install Debian repositories:

```json
{
  "_key": "2eb716454ca2",
  "_type": "code",
  "code": "# For Debian Stretch, Ubuntu 16.04 and later\nkeyring_location=/usr/share/keyrings/<owner>-<repo>-archive-keyring.gpg \n\n# For Debian Jessie, Ubuntu 15.10 and earlier\nkeyring_location=/etc/apt/trusted.gpg.d/<owner>-<repo>.gpg curl -1sLf 'https://dl.cloudsmith.io/public/<owner>/<repo>/gpg.<fingerprint>.key' |  gpg --dearmor > curl -1sLf 'https://dl.cloudsmith.io/public/<owner>/<repo>/config.deb.txt?distro=<distro>&codename=<version>' > /etc/apt/sources.list.d/<owner>-<repo>.list \napt-get update",
  "filename": null,
  "language": "sh",
  "markDefs": null
}
```

### These steps are also available in the contextual documentation for each of your repositories under the 'Set Me Up' button.

[Debian Repository Documentation]()