First did instructions in --> INIT.TXT Then make sure you have an "empty" repo. reprepro -b /repo remove bionic whatever # if needed Until it's empty, then, if you didn't already at some point: ssh-keygen -f keys/ssh < <(echo "\n\n") Then: sudo tar -czf secret.tar.gz keys gnupg repo # might print some errors on special files, can be ignored. Upload that thing to some secret URL you can use during CI. --- Usage after all this: # install key sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 5CE16B7B # install repo sudo add-apt-repository "deb https://cppse.nl/repo/ $(lsb_release -cs) main" # enjoy sudo apt-get install whatever --- adding new distro. we need to edit the secret file. FIND IT: find ./ -name '*secret.tar.gz' untar into a temp dir.. 1) open conf/distributions add a block for the new thing, e.g., focal or jammy. 2) recreate tar with same file. that should do it.