The intended approach right now is as documented in https://curtin.readthedocs.io/en/latest/topics/apt_source.html#using-templates
If you supply valid apt config this should work. I suggest you prototype this not with curtin config but by manipulating the deb822 sources to contain the "embedded GPG public key block". I was able to play with this for instance, supply the wrong Signed-By key and see the "The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 871920D1991BC93C" error. If I then replaced that with the output of `gpg --export --armor 871920D1991BC93C` things work as expected, and this should also work with a version of deb822 sources written to the system by curtin. -- https://code.launchpad.net/~bryanfraschetti/curtin/+git/curtin/+merge/476864 Your team curtin developers is subscribed to branch curtin:master. -- Mailing list: https://launchpad.net/~curtin-dev Post to : curtin-dev@lists.launchpad.net Unsubscribe : https://launchpad.net/~curtin-dev More help : https://help.launchpad.net/ListHelp