I'm currently running Debian 12 and am trying to download some .deb packages for a Debian 8.7 machine that has no access to the internet. To do this, I've configured a new apt repo that targets the Debian 8.7 archive branch (Jessie). My /etc/apt/sources.list now includes:

deb https://archive.debian.org/debian/ jessie main

When I run `apt update' I get a GPG missing public key.

enter image description here

My questions:

  1. Where do I find the public key for this archived repo?
  2. How do I apply this key to apt in Debian 12?

Most search results reference arcane 3rd party key servers or Ubuntu results. I'm hoping I can just find a Debian webpage that features that key, and then manually add that key to a some trusted key sources in Debian 12.

  • 1
    perhaps you can download the last dvd image of jessie , mount it on the right machine in loop, add a local repo from the mounted dvd and upgrade the machine or the packet that you need. Commented Feb 24 at 15:53

1 Answer 1


You can retrieve the keys from the Debian archive:

wget http://archive.debian.org/debian/pool/main/d/debian-archive-keyring/debian-archive-keyring_2017.5~deb8u1_all.deb

To make them available to apt, you need to extract the package’s contents, and move the relevant keys to /etc/apt/trusted.gpg.d:

dpkg-deb -x debian-archive-keyring_2017.5~deb8u1_all.deb keyring
sudo mv keyring/etc/apt/trusted.gpg.d/*jessie* /etc/apt/trusted.gpg.d/
rm -rf keyring

The keys have all expired so you might need to trust the repository anyway (I haven’t tried setting up a Debian 8 repository in this way).

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .