Skip to main content

Sign Debian files with dpkg using GPG Smartcard Daemon (SCD)

You must set up GPG signing before continuing.

Install Debian package signing utility

sudo apt install -y dpkg-sig         

Download sample package

To demonstrate signing, we need a file to sign.

Install cURL

sudo apt install curl           

Download sample Debian package

curl -fSsl http://ftp.us.debian.org/debian/pool/main/h/hello/hello_2.10-2_amd64.deb -o hello_2.10-2_amd64.deb            

Embedded signing

dpkg-sig --sign builder hello_2.10-2_amd64.deb             

Verify signature

dpkg-sig --verify hello_2.10-2_amd64.deb