First did instructions in --> INIT.TXT THEN, this is new: gpg --output public.pgp --export 83345E54 // optional I guess; gpg --keyring ./public.pgp --no-default-keyring --export -a > public.asc we need that public.pgp file!! let's upload it to somewhere, such as: https://cppse.nl/public.pgp !! Then make sure you have an "empty" repo. reprepro -b /repo remove bionic whatever # if needed Until it's empty, then, if you didn't already at some point: ssh-keygen -f keys/ssh < <(echo "\n\n") Then: sudo tar -czf secret.tar.gz keys gnupg repo # might print some errors on special files, can be ignored. Upload that thing to some secret URL you can use during CI. --- Usage after all this: # install key ## THIS NO LONGER WORKS sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 5CE16B7B # install repo ## THIS NO LONGER WORKS sudo add-apt-repository "deb https://cppse.nl/repo/ $(lsb_release -cs) main" # NEW APPROACH: curl -qs https://cppse.nl/public.pgp | sudo tee /etc/apt/keyrings/public.pgp echo "deb [arch=amd64 signed-by=/etc/apt/keyrings/public.pgp] https://cppse.nl/repo/ $(lsb_release -cs) main" | sudo tee -a /etc/apt/sources.list # enjoy sudo apt-get install whatever --- adding new distro. we need to edit the secret file. FIND IT: find ./ -name '*secret.tar.gz' untar into a temp dir.. 1) open conf/distributions add a block for the new thing, e.g., focal or jammy. 2) recreate tar with same file. that should do it.