← Back to issue list

Explain how to use local GPG keys for a repository

View original Github issue

Metadata

Project
snapcraft
Number
#5697
Type
issue
State
open
Author
lengau
Labels
Status: Triaged Type: Enhancement Type: Documentation
Created
Updated
Closed
—

Current evaluation

Triaged documentation gap remains: local GPG keys for custom package repositories lack guidance on the required key filename format and storage location.

Suggested action: keep open

Reason: docs/reference/package-repositories.rst still delegates configuration to Craft Archives, whose repository-properties page documents key-id and key-server but not local key assets. Craft Archives requires the asset filename to contain the uppercase final eight key-ID characters and selects the ASCII .asc format, so the reported documentation gap remains valid and well scoped.

Evaluated by: mr-cal-bot

Impact: 30 Quick Win: 19 Complexity: 24 Confidence: 95 Actionability: 82

Issue body

### What needs to get done [This page](https://documentation.ubuntu.com/snapcraft/stable/reference/package-repositories/) refers to the craft-archives docs for information about adding repositories, but craft-archives makes the local keyring location configurable. We should explain the format of the keyring and where it needs to be stored ### Why it needs to get done Prevent user confusion

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha
Impact: 30
Quick Win: 19
Complexity: 24
Confidence: 95
Actionability: 82
keep open Triaged documentation gap remains: local GPG keys for custom package repositories lack guidance on the required key filename format and storage location.
qwen/qwen3.6-35b-a3b
Impact: 30
Quick Win: 17
Complexity: 20
Confidence: 80
Actionability: 70
keep open Documentation enhancement to explain local GPG keyring format and storage location for craft-archives repository configuration.
qwen/qwen3.8-27b
Impact: 25
Quick Win: 21
Staleness: 72
Complexity: 15
Confidence: 78
Support Request: 5
keep open Docs enhancement: package-repositories reference page links to craft-archives but doesn't explain local GPG keyring format or storage location. Triaged, no activity in ~12.7 months, gap still present in docs.
qwen/qwen3.6-35b-a3b
Staleness: 80
Complexity: 20
Confidence: 85
Support Request: 25
keep open Documentation enhancement to explain local GPG keyring format and storage location for craft-archives to prevent user confusion. Currently triaged but inactive for nearly a year.
qwen3.6-35b-a3b-mtp-q6
Staleness: 80
Complexity: 15
Confidence: 85
Support Request: 5
keep open Documentation enhancement to explain local GPG keyring format and storage for repository configuration. Currently triaged but inactive for over a year.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#190 No explanation for using local GPG keys craft-archives open Docs gap: repo_properties.rst and how-to/add_repo.rst document key-id and key-server but never explain that local key assets (snap/keys/<last8upper>.asc) take priority over the keyserver. Triaged by lengau, still open.
75%