Kubling APT repository
======================

Repository signing-key fingerprint:
EE4EB1C333FE0B8015B51551183C6C107C768DAB

Bootstrap a Debian/Ubuntu client only after verifying this fingerprint through
an independent trusted channel:

  curl --fail --silent --show-error \
    https://apt.kubling.com/kubling-archive-keyring.pgp \
    --output /tmp/kubling-archive-keyring.pgp
  gpg --show-keys --with-colons \
    /tmp/kubling-archive-keyring.pgp
  sudo install -o root -g root -m 0644 \
    /tmp/kubling-archive-keyring.pgp \
    /usr/share/keyrings/kubling-archive-keyring.pgp
  curl --fail --silent --show-error \
    https://apt.kubling.com/kubling.sources \
    --output /tmp/kubling.sources
  sudo install -o root -g root -m 0644 \
    /tmp/kubling.sources \
    /etc/apt/sources.list.d/kubling.sources
  curl --fail --silent --show-error \
    https://apt.kubling.com/kubling.pref \
    --output /tmp/kubling.pref
  sudo install -o root -g root -m 0644 \
    /tmp/kubling.pref \
    /etc/apt/preferences.d/kubling.pref
  sudo apt-get update

Only signed repository metadata, binary package pools, this public key and the
client source definition are exposed. There is no remote publishing API.