At the moment when we install third-party apt repos we put their key in /etc/apt/trusted.gpg.d/ whereas we should be putting their key in /usr/share/keyrings and adding a [signed-by=<path/to/gpg/key>] part to each source line in the corrosponding sources file.
See https://wiki.debian.org/DebianRepository/UseThirdParty for more information
Some packages which use third party apt repos (non-exhaustive)
At the moment when we install third-party apt repos we put their key in
/etc/apt/trusted.gpg.d/whereas we should be putting their key in/usr/share/keyringsand adding a[signed-by=<path/to/gpg/key>]part to each source line in the corrosponding sources file.See https://wiki.debian.org/DebianRepository/UseThirdParty for more information
Some packages which use third party apt repos (non-exhaustive)
ansible ??? - if Consider installing Ansible from PPA?! #1048 is implemented(Consider installing Ansible from PPA?! #1048 not implemented)mediaserver (Emby)(Emby no longer installed via repo)(Note Odoo does not of this writing use a third-party repo but likely will before this issue is closed).