Quiblu APT repository
====================================

Ubuntu 22.04+ / Debian 12+, amd64.
Repository: https://quiblu.de/downloads/apt/
AppImage and Debian packages: https://quiblu.de/

The archive signing key is available without authentication:
https://quiblu.de/downloads/quiblu-archive-keyring.asc

Archive key fingerprint:
21DB35566C27F6707ED143FB972F598C6D92F73A

Install the repository (requires curl):

  sudo install -d -m 0755 /etc/apt/keyrings
  curl -fsSL https://quiblu.de/downloads/quiblu-archive-keyring.asc | sudo tee /etc/apt/keyrings/quiblu.asc >/dev/null
  curl -fsSL https://quiblu.de/downloads/apt/quiblu.sources | sudo tee /etc/apt/sources.list.d/quiblu.sources >/dev/null
  curl -fsSL https://quiblu.de/downloads/apt/quiblu.pref | sudo tee /etc/apt/preferences.d/quiblu >/dev/null
  sudo apt update
  sudo apt install quiblu

Signed-By limits the archive key to Quiblu's source. Origin pinning permits
only the quiblu package from this repository. Never use apt-key or trusted=yes.

Updates are installed through the system software updater or:
  sudo apt update
  sudo apt install --only-upgrade quiblu
Quiblu checks for updates at startup and hourly; it does not run sudo itself.

To remove the package:
  sudo apt remove quiblu
To remove the repository configuration:
  sudo rm /etc/apt/sources.list.d/quiblu.sources
  sudo rm /etc/apt/preferences.d/quiblu
  sudo rm /etc/apt/keyrings/quiblu.asc
Local user preferences/history remain in your account until you remove them.

Indexes expire after 89 days and are refreshed with each release or an offline
metadata refresh. If APT reports expiration, contact Quiblu support;
do not disable signature or expiry checking.

The archive signing key is held offline and is independent of the application's
update-feed signing key. No private signing material is stored on this server.