Ubuntu 22.04 更新后，密钥存储在旧版 trust.gpg 密钥环中

Question

在 Ubuntu 22.04 更新后，我在 Digital Ocean LAMP stack Droplet 上收到 3 条警告。

\n

W: http://repo.mysql.com/apt/ubuntu/dists/bionic/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.\nW: https://repos.insights.digitalocean.com/apt/do-agent/dists/main/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.\nW: http://pkg.cloudflare.com/dists/trusty/Release.gpg: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.\n

\n

如何将钥匙移动到正确的位置并删除旧钥匙？

\n

编辑

\n

W: http://repo.mysql.com/apt/ubuntu/dists/bionic/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.\nW: https://repos.insights.digitalocean.com/apt/do-agent/dists/main/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.\nW: http://pkg.cloudflare.com/dists/trusty/Release.gpg: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.\n

\n

pub   rsa2048 2016-02-17 [SC]\n      9FE3 B226 BD77 5196 D8C2  E599 DE88 104A A4C6 383F\nuid           [ unknown] DigitalOcean Insights Engineering <sonar-agent@digitalocean.com>\nsub   rsa2048 2016-02-17 [E]\n\npub   rsa2048 2015-01-28 [SC]\n      FBA8 C0EE 6361 7C5E ED69  5C43 254B 391D 8CAC CBF8\nuid           [ unknown] CloudFlare Software Packaging <help@cloudflare.com>\n\npub   dsa1024 2003-02-03 [SCA] [expired: 2022-02-16]\n      A4A9 4068 76FC BD3C 4567  70C8 8C71 8D3B 5072 E1F5\nuid           [ expired] MySQL Release Engineering <mysql-build@oss.oracle.com>\n\npub   rsa4096 2021-12-14 [SC] [expires: 2023-12-14]\n      859B E8D7 C586 F538 430B  19C2 467B 942D 3A79 BD29\nuid           [ unknown] MySQL Release Engineering <mysql-build@oss.oracle.com>\nsub   rsa4096 2021-12-14 [E] [expires: 2023-12-14]\n\n/etc/apt/trusted.gpg.d/certbot_ubuntu_certbot.gpg\n-------------------------------------------------\npub   rsa4096 2016-11-02 [SC]\n      7BF5 7606 6ADA 6572 8FC7  E70A 8C47 BE8E 75BC A694\nuid           [ unknown] Launchpad PPA for certbot\n\n/etc/apt/trusted.gpg.d/ondrej-ubuntu-apache2.gpg\n------------------------------------------------\npub   rsa1024 2009-01-26 [SC]\n      14AA 40EC 0831 7567 56D7  F66C 4F4E A0AA E526 7A6C\nuid           [ unknown] Launchpad PPA for Ond\xc5\x99ej Sur\xc3\xbd\n\n/etc/apt/trusted.gpg.d/ondrej_ubuntu_php.gpg\n--------------------------------------------\npub   rsa1024 2009-01-26 [SC]\n      14AA 40EC 0831 7567 56D7  F66C 4F4E A0AA E526 7A6C\nuid           [ unknown] Launchpad PPA for Ond\xc5\x99ej Sur\xc3\xbd\n\n/etc/apt/trusted.gpg.d/ubuntu-keyring-2012-cdimage.gpg\n------------------------------------------------------\npub   rsa4096 2012-05-11 [SC]\n      8439 38DF 228D 22F7 B374  2BC0 D94A A3F0 EFE2 1092\nuid           [ unknown] Ubuntu CD Image Automatic Signing Key (2012) <cdimage@ubuntu.com>\n\n/etc/apt/trusted.gpg.d/ubuntu-keyring-2018-archive.gpg\n------------------------------------------------------\npub   rsa4096 2018-09-17 [SC]\n      F6EC B376 2474 EDA9 D21B  7022 8719 20D1 991B C93C\nuid           [ unknown] Ubuntu Archive Automatic Signing Key (2018) <ftpmaster@ubuntu.com>\n

\n

sudo apt-key list\n

\n

-rw-r--r-- 1 root root 276 Apr  8 15:51 certbot-ubuntu-certbot-xenial.list\n-rw-r--r-- 1 root root 276 Apr  8 15:51 certbot-ubuntu-certbot-xenial.list.distUpgrade\n-rw-r--r-- 1 root root 274 Mar 13  2020 certbot-ubuntu-certbot-xenial.list.save\n-rw-r--r-- 1 root root  43 Apr  8 15:51 cloudflare-main.list\n-rw-r--r-- 1 root root  43 Apr  8 15:51 cloudflare-main.list.distUpgrade\n-rw-r--r-- 1 root root  43 Mar 13  2020 cloudflare-main.list.save\n-rw-r--r-- 1 root root  67 Apr  8 15:51 digitalocean-agent.list\n-rw-r--r-- 1 root root  67 Apr  8 15:51 digitalocean-agent.list.distUpgrade\n-rw-r--r-- 1 root root  67 Mar 13  2020 digitalocean-agent.list.save\n-rw-r--r-- 1 root root 501 Apr  8 15:51 mysql.list\n-rw-r--r-- 1 root root 501 Apr  8 15:51 mysql.list.distUpgrade\n-rw-r--r-- 1 root root 137 Apr  8 15:51 ondrej-ubuntu-apache2-hirsute.list\n-rw-r--r-- 1 root root 135 Apr  8 15:51 ondrej-ubuntu-apache2-hirsute.list.distUpgrade\n-rw-r--r-- 1 root root 123 Apr  8 15:51 ondrej-ubuntu-php-xenial.list\n-rw-r--r-- 1 root root 124 Apr  8 15:51 ondrej-ubuntu-php-xenial.list.distUpgrade\n-rw-r--r-- 1 root root 125 Apr  8 19:11 signal-xenial.list\n

\n

Answer 1

该答案是对 matigo 用户提供的答案的定制。您需要从已弃用的密钥环中导出 GPG 密钥并将其存储在/usr/share/keyrings每个存储库中。

0. 让我们从 DigitalOcean 密钥开始。打开终端并导出9FE3 B226 BD77 5196 D8C2 E599 DE88 104A A4C6 383F密钥：

   apt-key export A4C6383F | sudo gpg --dearmour -o /usr/share/keyrings/digitalocean-agent.gpg

   注意：该A4C6383F值来自pub输出代码的最后 8 个字符apt-key list。

1. 现在我们可以更新我们的 apt 源文件/etc/apt/sources.list.d/digitalocean-agent.list），添加一个signed-by标签。通过以下方式打开它：

   sudo -H gedit /etc/apt/sources.list.d/digitalocean-agent.list

   并将标签添加到关键字[arch=amd64 signed-by=/usr/share/keyrings/digitalocean-agent.gpg]之后deb和 URL 之前。

   我不知道 的确切内容digitalocean-agent.list，但最终应该类似于：

   deb [arch=amd64 signed-by=/usr/share/keyrings/microsoft.gpg] packages.microsoft.com/repos/edge stable main
   

2. 运行sudo apt update以确认消息已消失

3. 如果消息消失，请删除原始签名：

   sudo apt-key del A4C6383F

4. 重复 的步骤cloudflare-main.list，cloudflare-main.gpg从8CACCBF8key 开始生成密钥。

5. 重复 的步骤mysql.list，mysql.gpg从5072E1F5key 开始生成密钥。

请考虑您收到的消息只是警告：如果出现问题，请按原样恢复文件并保留警告，它们没有害处。