Linux Repositories

Debian, Ubuntu, and derivatives

Both commands are required: the first stores the signing key, the second points apt at the repository and binds it to that key.

sudo mkdir -p /etc/apt/keyrings
sudo curl -fsSL https://kubeli.dev/apt/kubeli-archive-keyring.gpg \
  -o /etc/apt/keyrings/kubeli-archive-keyring.gpg

echo "Types: deb
URIs: https://kubeli.dev/apt
Suites: stable
Components: main
Architectures: amd64
Signed-By: /etc/apt/keyrings/kubeli-archive-keyring.gpg" \
  | sudo tee /etc/apt/sources.list.d/kubeli.sources

Then install:

sudo apt update
sudo apt install kubeli

Updates arrive with sudo apt upgrade.

Fedora, RHEL, Rocky, AlmaLinux

Import the key before adding the repository — dnf verifies the repository metadata signature on the first refresh and fails if the key is unknown. On that first refresh dnf also asks you to confirm the key; the fingerprint it shows is listed below.

sudo rpm --import https://kubeli.dev/rpm/RPM-GPG-KEY-kubeli

echo "[kubeli]
name=Kubeli
baseurl=https://kubeli.dev/rpm
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://kubeli.dev/rpm/RPM-GPG-KEY-kubeli" \
  | sudo tee /etc/yum.repos.d/kubeli.repo

Then install:

sudo dnf install kubeli

Updates arrive with sudo dnf upgrade.

Verifying the key

Every package and every repository index is signed with this key:

584A D889 E8F1 3AB8 618B  6419 AD8D 146E 6F18 94D2

To confirm what you downloaded matches:

gpg --show-keys /etc/apt/keyrings/kubeli-archive-keyring.gpg