# GPG signing built-in Debian .deb package Registry **URL:** \ **Category:** Install/Maintain/Configure\ **Created:** [December 11, 2023, 12:16pm UTC](https://forum.gitea.com/t/gpg-signing-built-in-debian-deb-package-registry/8263 "2023-12-11T12:16:25Z")\ **Posts on this page:** 1\ **Showing post:** 4
**Author:** ![retif](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.gitea.com/retif/32/7142_2.png) [@retif](https://forum.gitea.com/u/retif)\ **Post date:** [October 20, 2025, 9:17am UTC](https://forum.gitea.com/t/gpg-signing-built-in-debian-deb-package-registry/8263/4 "2025-10-20T09:17:34Z")
> [https://docs.gitea.com/next/usage/packages/packages/debian](https://docs.gitea.com/next/usage/packages/packages/debian) That link leads to 404 now, and the one that seems to be a “live” variant of the previous - [https://docs.gitea.com/usage/packages/debian](https://docs.gitea.com/usage/packages/debian) - does not contain instructions for uploading one’s own PGP key to be used for signing packages. And by default the Debian packages registry uses some auto-generated(?) key, as it seems. The Gitea’s web GUI also does not provide instructions for setting a custom PGP key for signing `.deb` packages. It may already be documented somewhere, but unfortunately I couldn’t find it. Can someone please point me to the right place? I’d be totally fine with not having it in the GUI, a bare cURL upload of the `.asc` is no problem for me, but I just don’t know what is the uploading route/URL (_if there is one at all_). --- _[View the full topic](https://forum.gitea.com/t/gpg-signing-built-in-debian-deb-package-registry/8263)._