HostSeal APT repository

This is a Debian package repository, not a page to read. Point apt at it rather than a browser.

Installing the agent

curl -fsSL https://hostseal.io/apt/hostseal-archive-keyring.gpg \
  | sudo tee /usr/share/keyrings/hostseal-archive-keyring.gpg > /dev/null
curl -fsSL https://hostseal.io/apt/hostseal.sources \
  | sudo tee /etc/apt/sources.list.d/hostseal.sources > /dev/null
sudo apt-get update && sudo apt-get install hostseal-agent

The agent installs with no keys in /etc/hostseal/trusted-signers and a policy that permits security updates and nothing else.

What this repository is

One suite covers every supported release: the agent is a static Go binary with no distribution-specific dependencies, so per-codename suites would be copies of the same file and as many chances for one of them to go stale.

Files

• dists/stable/InRelease — the signed index
• dists/stable/Release.gpg — the detached signature
• hostseal-archive-keyring.gpg (armoured) — the archive signing key
• dists/stable/Release — the index itself
• hostseal.sources — the deb822 source, with Signed-By: naming that keyring and nothing wider

Packages

• hostseal-agent_0.1.11_amd64.deb
• hostseal-agent_0.1.11_arm64.deb