From 6ba22c82d76765bb706b40e865bf067eade1cf5f Mon Sep 17 00:00:00 2001
From: "CanbiZ (MickLesk)" <47820557+MickLesk@users.noreply.github.com>
Date: Mon, 23 Feb 2026 12:59:42 +0100
Subject: [PATCH] Add Signed-By to Debian APT source entries

Update misc/tools.func to include Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg on multiple Debian repository blocks (bullseye, bookworm, trixie/sid and their -security entries) for non-free and non-free-firmware components. This ensures APT uses the specified keyring to verify repository metadata and improves reproducible/secure apt configuration.
---
 misc/tools.func | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/misc/tools.func b/misc/tools.func
index 5fbdfa740..7f810a744 100644
--- a/misc/tools.func
+++ b/misc/tools.func
@@ -4085,6 +4085,7 @@ Types: deb
 URIs: http://deb.debian.org/debian
 Suites: bullseye bullseye-updates
 Components: non-free
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 EOF
     ;;
   bookworm)
@@ -4093,6 +4094,7 @@ Types: deb
 URIs: http://deb.debian.org/debian
 Suites: bookworm bookworm-updates
 Components: non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 EOF
     ;;
   trixie | sid)
@@ -4101,11 +4103,13 @@ Types: deb
 URIs: http://deb.debian.org/debian
 Suites: trixie trixie-updates
 Components: non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 
 Types: deb
 URIs: http://deb.debian.org/debian-security
 Suites: trixie-security
 Components: non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 EOF
     ;;
   esac
@@ -4128,11 +4132,13 @@ Types: deb
 URIs: http://deb.debian.org/debian
 Suites: bullseye bullseye-updates
 Components: non-free
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 
 Types: deb
 URIs: http://deb.debian.org/debian-security
 Suites: bullseye-security
 Components: non-free
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 EOF
     ;;
   bookworm)
@@ -4141,11 +4147,13 @@ Types: deb
 URIs: http://deb.debian.org/debian
 Suites: bookworm bookworm-updates
 Components: non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 
 Types: deb
 URIs: http://deb.debian.org/debian-security
 Suites: bookworm-security
 Components: non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 EOF
     ;;
   trixie | sid)
@@ -4154,11 +4162,13 @@ Types: deb
 URIs: http://deb.debian.org/debian
 Suites: trixie trixie-updates
 Components: non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 
 Types: deb
 URIs: http://deb.debian.org/debian-security
 Suites: trixie-security
 Components: non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 EOF
     ;;
   esac