# distribution-gpg-keys

GPG keys used by various Linux distributions to sign packages.

## Keys for

 * AlmaLinux
 * Amazon Linux
 * Anolis OS
 * Azure Linux/CBL-Mariner
 * CentOS
 * Circle Linux
 * EPEL
 * EuroLinux
 * Fedora
 * FreeBSD
 * Mageia
 * openEuler
 * OpenMandriva
 * OpenSuse
 * OpenWRT
 * Oracle Linux
 * Qubes
 * Red Hat
 * Rocky Linux
 * RosaLinux
 * RPM Fusion
 * Navy Linux
 * Scientific Linux
 * United RPMs
 * Ultramarine

and for third parties repos:

 * Adobe
 * AnyDesk
 * Bacula
 * Brave
 * BlueJeans
 * CalcForge
 * COPR repositories
 * Datto
 * Dell
 * Docker
 * Dropbox
 * Elastic
 * Element
 * Google
 * Google Cloud
 * IUS
 * Jenkins
 * JPackage
 * Kubernetes
 * MariaDB
 * MySQL
 * Microsoft
 * Mullvad
 * PostgreSQL RPM Building Project
 * Remi's
 * Skype
 * SME Server
 * TeamViewer
 * Terra
 * UnitedRPMs
 * VeraCrypt
 * VirtualBox
 * Zimbra
 * Zoom


it intentionally does not include keys for Ubuntu as there exists the package `ubu-keyring`, for Debian as there exists the package `debian-keyring`, for ArchLinux as there exists the package `archlinux-keyrings`.

For up to date list of keys see [SOURCES.md](SOURCES.md).

## Storing keys in DNS

If you are owner of the GPG key, you can [generate TYPE 61 DNS records](http://miroslav.suchy.cz/blog/archives/2021/02/13/how_to_generate_openpgp_record_for_dns_type61/index.html) and clients [can verify it using DNSSEC](http://miroslav.suchy.cz/blog/archives/2021/02/11/verify_package_gpg_signature_using_dnssec/index.html) and [Different OpenGPG DNS entries for the same email](http://miroslav.suchy.cz/blog/archives/2021/02/18/different_opengpg_dns_entries_for_the_same_email/index.html).

Here is overview of availability of DNS entries for GPG keys:

| Provider | DNS entry | DNSSEC |
| -------- | --------- | ------ |
| Fedora   | :heavy_check_mark: | :heavy_check_mark: |
| Epel     | :heavy_check_mark: | :heavy_check_mark: |
| Red Hat  | :heavy_check_mark: | :x: |
| CentOS   | requested          | :x: |
| OpenSuse | :heavy_check_mark:          | :heavy_check_mark: |
| RPM Fusion | [requested](https://bugzilla.rpmfusion.org/show_bug.cgi?id=5927)        | :x: |
| Dropbox    | requested        | :x: |

The keys can be fetched using `resolvectl openpgp EMAIL`. e.g. `resolvectl openpgp security@redhat.com`

## Packaging status
 
![distribution-gpg-keys versions](https://repology.org/badge/vertical-allrepos/distribution-gpg-keys.svg?exclude_unsupported=1&header=distribution-gpg-keys)

[Ubuntu 20.04 LTS (Focal Fossa), Ubuntu 22.04 LTS (Jammy Jellyfish)](https://launchpad.net/~andykimpe/+archive/ubuntu/mock)


[Debian 11 Bullseye Stable](https://software.opensuse.org/download.html?project=home%3Aandykimpe%3Adebian-buster&package=distribution-gpg-keys)

## Downstream packaging

If you are going to package this project, then consider packaging Copr keys as subpackage as it is quite big.

This project is available as a package in Fedora, EPEL, openSUSE, archLinux, Mageia, OpenMandriva.

## Releasing

To get tar.gz:

    dnf install tito
    git clone git://github.com/xsuchy/distribution-gpg-keys.git
    cd distribution-gpg-keys
    tito build --tgz

To get SRPM:

    tito build --srpm

To get RPM:

    tito build --rpm

To create new release:

    # do NOT create changelog entries
    git commit
    tito tag
    git push && git push --tags
    
    
    
## Report a bug

For Report a bug or Problem to the original project or rpm packages use

Github Issues

https://github.com/xsuchy/distribution-gpg-keys/issues

For Report a bug or Problem to the Debian/Ubuntu Package use online

Launchpad Bugzilla

https://bugs.launchpad.net/ubuntu/+source/distribution-gpg-keys/+filebug