Debian Archive Key Import

The current and the retired Debian archive "signing" keys are available from https://ftp-master.debian.org/keys.html.

gpg itself has a standard way to distribute keys, using a keyserver that gpg can download a key from and add it to its keyring. For example:

     $ pg --keyserver subkeys.pgp.net --recv-keys 55BE302B
     gpg: requesting key 55BE302B from hkp server subkeys.pgp.net
     gpg: key 55BE302B: public key "Debian Archive Automatic Signing Key (5.0/lenny) <ftpmaster@debian.org>" imported
     gpg: Total number processed: 1
     gpg:               imported: 1  (RSA: 1)

You can then export that key from your own keyring and move it to the apt trust directory. For example:

    $ gpg -a --export 55BE302B > /etc/apt/trusted.gpg.d/deblenny.gpg

Creating a GPG signing key for use with reprepro

Generating a password less GPG key can be a trial. I found the following switch combination to work.

    gpg --quick-generate-key \
      --batch \
      --pinentry-mode loopback \
      --passphrase '' \
      'Shelter Apt <shelter-apt@ca-zephyr.org>'