Skip to content

/config/apt/sources-list-deb822

apt sources in deb822 format: .sources files and Signed-By

The commands on this page have not been executed by our verification runner yet.updated 2026-10-20
tool
apt
file
/etc/apt/sources.list.d/*.sources
key
Types / URIs / Suites / Components / Signed-By
type
deb822 stanzas (Key: value)
default
distribution sources only

The one-line deb http://… suite component format still works, but apt also reads deb822 files, *.sources, in /etc/apt/sources.list.d/. Ubuntu 24.04 ships its own sources as /etc/apt/sources.list.d/ubuntu.sources, and Debian documents deb822 as the preferred format. Each stanza is a block of Key: value lines.

Example: the distribution

/etc/apt/sources.list.d/ubuntu.sources
Types: deb
URIs: http://archive.ubuntu.com/ubuntu/
Suites: noble noble-updates noble-backports
Components: main restricted universe multiverse
Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg

Example: a third-party repository

bash
sudo install -d -m 0755 /etc/apt/keyrings
curl -fsSL https://example.com/apt/key.gpg | sudo gpg --dearmor -o /etc/apt/keyrings/example.gpg
/etc/apt/sources.list.d/example.sources
Types: deb
URIs: https://example.com/apt/
Suites: stable
Components: main
Architectures: amd64 arm64
Signed-By: /etc/apt/keyrings/example.gpg

Signed-By ties the repository to its own key, so a key added for one vendor cannot sign packages for another (the old apt-key add trusted every key for every repository).

Fields

FieldMeaning
Typesdeb (binary packages) and/or deb-src (source packages)
URIsbase URL of the repository
Suitesrelease names or codenames: bookworm, noble-updates, stable
Componentsmain, contrib, non-free, universe …
Signed-Bykey file (or inline key) allowed to sign this repository
Architectureslimit to some architectures
Enabledno disables the stanza without deleting it

Run sudo apt update after any change; errors in the file are reported with the file name and line.

Sources