This brief tutorial explains what is a software repository, how to delete a repository along with its GPG key in Ubuntu and its derivatives like Elementary OS, Linux Mint, and Pop OS.
Table of Contents
1. What is Ubuntu software repository?
For those wondering, a software repository (shortly repo) is a central place where the developers keep the software packages.
The packages in the repositories are thoroughly tested and built specifically for each version by Ubuntu developers. The users can download and install these packages on their Ubuntu system using either Apt
package manager or via Software center.
Ubuntu has four official repositories namely Main, Universe, Restricted and Multiverse.
Apart from the official repositories, there are many unofficial repositories maintained by developers (or package maintainers). The unofficial repositories usually have the packages which are not available in the official repositories.
All packages are signed with pair of keys, a public and private key, by the package maintainer. As you already know, the public key is given out to the users and the private must be kept secret.
Whenever you add a new repository in the sources list, you should also add the repository key to allow Apt package manager to trust the newly added repository.
Using the repository keys, you can ensure that you're getting the packages from the right person. Hope you got a basic idea about software repositories and repository keys.
Now let us go ahead and see how to delete a repository along with its GPG key in Ubuntu and its derivatives.
1. Delete A Repository In Ubuntu
1. Whenever you add a repository using add-apt-repository
command, it will be stored in /etc/apt/sources.list
file.
2. To delete a software repository from Ubuntu and its derivatives, just open the /etc/apt/sources.list
file and look for the repository entry and delete it.
$ sudo nano /etc/apt/sources.list
As you can see in the below screenshot, I have added Oracle Virtualbox repository in my Ubuntu system.
To delete this repository, simply remove the entry. Save and close the file.
3. If you have added PPA repositories, look into /etc/apt/sources.list.d/
directory and delete the respective entry.
4. Alternatively, you can delete the repository using add-apt-repository
command. For example, I am deleting the Systemback repository like below.
$ sudo add-apt-repository -r ppa:nemh/systemback
5. Finally, update the software sources list using command:
$ sudo apt update
2. Delete Repository keys in Ubuntu
1. We use apt-key
command to add and manage the repository keys. First, let us list the added keys using command:
$ sudo apt-key list
This command will list all added repository keys.
/etc/apt/trusted.gpg -------------------- pub rsa1024 2010-10-31 [SC] 3820 03C2 C8B7 B4AB 813E 915B 14E4 9429 73C6 2A1B uid [ unknown] Launchpad PPA for Kendek pub rsa4096 2016-04-22 [SC] B9F8 D658 297A F3EF C18D 5CDF A2F6 83C5 2980 AECF uid [ unknown] Oracle Corporation (VirtualBox archive signing key) <info@virtualbox.org> sub rsa4096 2016-04-22 [E] /etc/apt/trusted.gpg.d/ubuntu-keyring-2012-archive.gpg ------------------------------------------------------ pub rsa4096 2012-05-11 [SC] 790B C727 7767 219C 42C8 6F93 3B4F E6AC C0B2 1F32 uid [ unknown] Ubuntu Archive Automatic Signing Key (2012) <ftpmaster@ubuntu.com> /etc/apt/trusted.gpg.d/ubuntu-keyring-2012-cdimage.gpg ------------------------------------------------------ pub rsa4096 2012-05-11 [SC] 8439 38DF 228D 22F7 B374 2BC0 D94A A3F0 EFE2 1092 uid [ unknown] Ubuntu CD Image Automatic Signing Key (2012) <cdimage@ubuntu.com> /etc/apt/trusted.gpg.d/ubuntu-keyring-2018-archive.gpg ------------------------------------------------------ pub rsa4096 2018-09-17 [SC] F6EC B376 2474 EDA9 D21B 7022 8719 20D1 991B C93C uid [ unknown] Ubuntu Archive Automatic Signing Key (2018) <ftpmaster@ubuntu.com>
2. As you can see in the above output, the long (40 characters) hex value is the repository key. If you want APT package manager to stop trusting the key, simply delete it using command:
$ sudo apt-key del "3820 03C2 C8B7 B4AB 813E 915B 14E4 9429 73C6 2A1B"
3. Or, specify the last 8 characters only:
$ sudo apt-key del 73C62A1B
Done! The repository key has been deleted. Run the following command to update the repository lists:
$ sudo apt update
Resource:
3 comments
nice
tnk u so much
Not terribly useful. Attempting to upgrade Ubuntu from 18.04 to 20.04 and apparently there is a Repository problem with 2 of approx 42 repositiories. the /etc/apt/sources.list does not have a listing of all the Repositories: only a few commands about bionics main repositories.
That was helpful! I’ve been having many problems upgrading Ubuntu to a newer version and it helped me solve one.