When I run sudo apt update I see this: W: https://download.docker.com/linux/ubuntu/dists/noble/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details. As it’s only a warning I’m tempted to do nothing, but what do you advise? Thanks.

Hi, it appears to just mean that your gpg keys are not in the right place. apt-key(8) — apt — Debian testing — Debian Manpages *Recommended:* Instead of placing keys into the /etc/apt/trusted.gpg.d directory, you can place them anywhere on your filesystem by using the Signed-By option in your sources.list and pointing to the filename of the key. See [sources.list(5)](https://manpages.debian.org/testing/apt/sources.list.5.en.html) for details. Since APT 2.4, /etc/apt/keyrings is provided as the recommended location for keys not managed by packages. When using a deb822-style sources.list, and with apt version >= 2.4, the Signed-By option can also be used to include the full ASCII armored keyring directly in the sources.list without an additional file. However, it is only a recommendation (despite the deprecated apt-key tool) so it’s entirely safe to ignore at the moment. I’m not sure what the correct steps are to suppress this (I’m more of an Arch person) but simply ignoring it shouldn’t cause problems especially if you’re on a LTS release or not bumping your major versions You could certainly try just clearing the trusted directory (rm -rf /etc/apt/trusted.gpg.d/*) but in my opinion it isn’t worth risking breaking your packages to get rid of a message like this.

[image] darkpixlz: rm -rf /etc/apt/trusted.gpg.d/* A word of caution to anyone visiting this in future, this is not the solution to your problem and improper handling of rm -rf commands can potentially nuke your whole system beyond repair. So please exercise caution. There is ample documentation available online on how to get rid of the warning about key depreciation, but the issue is not discourse specific so I’ll leave a link and advise reading it twice before blindly executing any commands there. [dibery] Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead apt, apt-key asked by dibery on 04:14AM - 31 Aug 21 UTC

[image] itsbhanusharma: but the issue is not discourse specific In my case it arguably is Discourse specific (though not in the way you mean) as I only have the server for a Discourse installation that followed the standard installation instructions. But I’ll read the link you provided. Thank you. Though an idiot’s guide would be much appreciated.

[image] Jonathan5: Though an idiot’s guide would be much appreciated. Take a full backup, set up a fresh instance of discourse and restore your backup there. That way you don’t need to mess with anything and in 99% of cases your issue will be gone.

I’d need an idiot’s guide for that too! For instance, I only learnt recently that a full backup includes not only the backup you get using the Discourse website but also the app.yml file.

[image] Jonathan5: I’d need an idiot’s guide for that too! If you’re not familiar with a shell, I would recommend downloading the backup off your current site and following standard restore procedure. However, if you’re even a little comfortable in the shell or don’t want to deal with configuring a temporary site then I would recommend doing a CLI restore.

There are pretty elaborate guides already available for that: [image] Backup discourse from the command line Self-Hosting bookmark This guide covers how to back up and restore your Discourse site using command line tools, specifically designed for self-hosted environments. person_raising_hand Required user level: Administrator information_source You can use the below placeholders to automatically fill out the command line prompts in this guide: Backing up To create a backup of your Discourse site, follow these steps: Enter the container: ./launcher enter app Run the backup: discourse backu… [image] Restore a backup from the command line Self-Hosting bookmark This guide explains how to restore a Discourse backup from the command line without using the Discourse web UI. person_raising_hand Required user level: Administrator wrench Console access required Here’s how to restore a Discourse backup from the command line, without ever booting the Discourse web UI. This is handy when you’re moving servers. Prerequisites Before you start, make sure you complete the following steps: Download the latest backup file from the source Disco…

[image] darkpixlz: However, if you’re even a little comfortable in the shell or don’t want to deal with configuring a temporary site then I would recommend doing a CLI restore. This look simple, thanks. I’d be using a Digital Ocean droplet so imagine would have to update the DNS “A” record afterwards to the new IP address. I could reduce the TTL beforehand too. What about Amazon SES – I can’t remember but apart from re-enabling email (as in the guide) would there be any further steps to take?

[image] Jonathan5: I’d be using a Digital Ocean droplet so imagine would have to update the DNS “A” record afterwards to the new IP address. Correct, if the machine has a new public IP you need to update the A record to point to the new server. [image] Jonathan5: What about Amazon SES – I can’t remember but apart from re-enabling email (as in the guide) would there be any further steps to take? Email configuration shouldn’t change as long as your containers/app.yml file stays the same. If Amazon is limiting the IP that can send mail through the key then that’s different but otherwise nothing changes.

Thanks. I might do this soon then. I upgraded Ubuntu to 24.04 with Discourse in situ. It seemed to work all right, but this must just be an unforeseen consequence.

"Key is stored in legacy trusted.gpg keyring" warning

Product Support

itsbhanusharma (Bhanu Sharma) March 5, 2026, 2:58am 8

There are pretty elaborate guides already available for that:

Topic		Replies	Views
"ignoring file '50unattended-upgrades.wcf-dist' in directory '/etc/apt/apt.conmf.d/' as it has an invalid filename extension Self-hosting	18	3732	February 20, 2017
Updating I get a "Configuring openssh-server" message about the "sshd_config" file Self-hosting	2	3448	August 20, 2023
Discourse update error Self-hosting	35	2682	January 30, 2023
Trying to update Docker on DigitalOcean; stuck on Docker 19.03.13 😔 Product Support	17	520	February 10, 2025
Apt-get update fails inside container yarn repo not signed Bug	26	9591	February 20, 2023

"Key is stored in legacy trusted.gpg keyring" warning

Related topics