Home Ubuntu How To Delete A Repository And GPG Key In Ubuntu

How To Delete A Repository And GPG Key In Ubuntu

By sk
Published: Updated: 281.6K views

This brief tutorial explains what is a software repository, how to delete a repository along with its GPG key in Ubuntu and its derivatives like Elementary OS, Linux Mint, and Pop OS.

1. What is Ubuntu software repository?

For those wondering, a software repository (shortly repo) is a central place where the developers keep the software packages.

The packages in the repositories are thoroughly tested and built specifically for each version by Ubuntu developers. The users can download and install these packages on their Ubuntu system using either Apt package manager or via Software center.

Ubuntu has four official repositories namely Main, Universe, Restricted and Multiverse.

Apart from the official repositories, there are many unofficial repositories maintained by developers (or package maintainers). The unofficial repositories usually have the packages which are not available in the official repositories.

All packages are signed with pair of keys, a public and private key, by the package maintainer. As you already know, the public key is given out to the users and the private must be kept secret.

Whenever you add a new repository in the sources list, you should also add the repository key to allow Apt package manager to trust the newly added repository.

Using the repository keys, you can ensure that you're getting the packages from the right person. Hope you got a basic idea about software repositories and repository keys.

Now let us go ahead and see how to delete a repository along with its GPG key in Ubuntu and its derivatives.

1. Delete A Repository In Ubuntu

1. Whenever you add a repository using add-apt-repository command, it will be stored in /etc/apt/sources.list file.

2. To delete a software repository from Ubuntu and its derivatives, just open the /etc/apt/sources.list file and look for the repository entry and delete it.

$ sudo nano /etc/apt/sources.list

As you can see in the below screenshot, I have added Oracle Virtualbox repository in my Ubuntu system.

The contents of /etc/apt/sources.list file
The contents of /etc/apt/sources.list file

To delete this repository, simply remove the entry. Save and close the file.

3. If you have added PPA repositories, look into /etc/apt/sources.list.d/ directory and delete the respective entry.

4. Alternatively, you can delete the repository using add-apt-repository command. For example, I am deleting the Systemback repository like below.

$ sudo add-apt-repository -r ppa:nemh/systemback

5. Finally, update the software sources list using command:

$ sudo apt update

2. Delete Repository keys in Ubuntu

1. We use apt-key command to add and manage the repository keys. First, let us list the added keys using command:

$ sudo apt-key list

This command will list all added repository keys.

/etc/apt/trusted.gpg
--------------------
pub rsa1024 2010-10-31 [SC]
3820 03C2 C8B7 B4AB 813E 915B 14E4 9429 73C6 2A1B
uid [ unknown] Launchpad PPA for Kendek

pub rsa4096 2016-04-22 [SC]
B9F8 D658 297A F3EF C18D 5CDF A2F6 83C5 2980 AECF
uid [ unknown] Oracle Corporation (VirtualBox archive signing key) <info@virtualbox.org>
sub rsa4096 2016-04-22 [E]

/etc/apt/trusted.gpg.d/ubuntu-keyring-2012-archive.gpg
------------------------------------------------------
pub rsa4096 2012-05-11 [SC]
790B C727 7767 219C 42C8 6F93 3B4F E6AC C0B2 1F32
uid [ unknown] Ubuntu Archive Automatic Signing Key (2012) <ftpmaster@ubuntu.com>

/etc/apt/trusted.gpg.d/ubuntu-keyring-2012-cdimage.gpg
------------------------------------------------------
pub rsa4096 2012-05-11 [SC]
8439 38DF 228D 22F7 B374 2BC0 D94A A3F0 EFE2 1092
uid [ unknown] Ubuntu CD Image Automatic Signing Key (2012) <cdimage@ubuntu.com>

/etc/apt/trusted.gpg.d/ubuntu-keyring-2018-archive.gpg
------------------------------------------------------
pub rsa4096 2018-09-17 [SC]
F6EC B376 2474 EDA9 D21B 7022 8719 20D1 991B C93C
uid [ unknown] Ubuntu Archive Automatic Signing Key (2018) <ftpmaster@ubuntu.com>

2. As you can see in the above output, the long (40 characters) hex value is the repository key. If you want APT package manager to stop trusting the key, simply delete it using command:

$ sudo apt-key del "3820 03C2 C8B7 B4AB 813E 915B 14E4 9429 73C6 2A1B"

3. Or, specify the last 8 characters only:

$ sudo apt-key del 73C62A1B

Done! The repository key has been deleted. Run the following command to update the repository lists:

$ sudo apt update

Resource:

You May Also Like

3 comments

ali November 14, 2019 - 2:03 pm

nice
tnk u so much

Reply
John Krawczyk February 28, 2021 - 2:26 am

Not terribly useful. Attempting to upgrade Ubuntu from 18.04 to 20.04 and apparently there is a Repository problem with 2 of approx 42 repositiories. the /etc/apt/sources.list does not have a listing of all the Repositories: only a few commands about bionics main repositories.

Reply
A October 17, 2023 - 9:50 pm

That was helpful! I’ve been having many problems upgrading Ubuntu to a newer version and it helped me solve one.

Reply

Leave a Comment

* By using this form you agree with the storage and handling of your data by this website.

This site uses Akismet to reduce spam. Learn how your comment data is processed.

This website uses cookies to improve your experience. By using this site, we will assume that you're OK with it. Accept Read More