Archive URL change for upcoming v3.3 release

[khos2ow]

For the Regolith v3.3 release, the host name of the URL from which apt pulls packages as well as the structure of package archive repositories have changed. The new hostname is archive.regolith-desktop.com. In order to update to Regolith v3.3 and get fixes and upgrades going forward kindly update your apt configuration.

For more information check out:

• Unifying archive package structure #1109
• https://regolith-desktop.com/posts/repo-url-change-3.3/
• https://regolith-desktop.com/docs/using-regolith/install/#release-change-policy

TLDR

The old apt URL:

deb [arch=amd64] https://regolith-desktop.org/release-current-ubuntu-noble-amd64 noble main

The new apt URL:

deb [arch=amd64] https://archive.regolith-desktop.com/ubuntu/stable noble main
          |                                           |      |      |     |
          |                                           |      |      |     * Repo Component
          |                                           |      |      * Distro Version/Codename
          |                                           |      * Repo Suite
          |                                           * Distro Name
          * Architecture

Note

All other aspects of the package configuration remain the same including the key used to verify packages.

Architecture

Name	Description
amd64	The 64-bit x86 architecture
arm64	The 64-bit Arm architecture

Distro Names

Name	Description
ubuntu	The Ubuntu Linux Distribution
debian	The Debian Linux Distribution

Repo Suites and Components

Regolith Stage	Repo Suite	Repo Component	Description
Experimental	experimental	main	Stage for testing experiments
Unstable	unstable	main	Stage for early development testing
Testing	testing	main	Stage for late development testing
Release X.Y	stable	vX.Y	Stage for specific official release
Current Release	stable	main	Stage for latest release (floating from release to release)

Distro Version/Codename

These labels are determined by their respective upstream communities. Examples are noble, bookworm, focal.

Examples

Description	APT Line
The 3.2 release of Regolith on Ubuntu Jammy for amd64	deb [arch=amd64] https://archive.regolith-desktop.com/ubuntu/stable jammy v3.2
The latest release of Regolith on Debian Bookworm for amd64	deb [arch=amd64] https://archive.regolith-desktop.com/debian/stable bookworm main
Testing repo for Regolith on Debian Testing for arm64	deb [arch=arm64] https://archive.regolith-desktop.com/debian/testing testing main

[rassie]

Could you please make sure archive.regolith-desktop.com gets a correct TLS certificate? Currently, it's using the one from regolith-desktop.com, which fails to verify.

Also, this article and the corresponding blog article are missing information about the repository signing key, which is included in the installation instructions.

[khos2ow]

I'm not sure if I understand your point about TLS certificate. The SSL certificate for archive.regolith-desktop.com was generated by Let's Encrypt and only belongs to archive.regolith-desktop.com. It's not a wildcard certificate.

[khos2ow]

Regarding the other point, I just updated the blog post and the article above to emphasis the part about the repo key.

All other aspects of the package configuration remain the same including the key used to verify packages.

The key used to sign the packages was not changed in the migration. That means you don't need to import the key to the keryings if you've already done that in the past for old repos.

In other words this is not necessary for migration and start using the new archives. It is only needed if you are installing Regolith on a new machine for the very first time:

wget -qO - https://archive.regolith-desktop.com/regolith.key | \
gpg --dearmor | sudo tee /usr/share/keyrings/regolith-archive-keyring.gpg > /dev/null

The regolith.key in the old and new archive repos are exactly the same.

[rassie]

I'm not sure if I understand your point about TLS certificate. The SSL certificate for archive.regolith-desktop.com was generated by Let's Encrypt and only belongs to archive.regolith-desktop.com. It's not a wildcard certificate.

Thanks for getting back, I've rechecked and happy to say that the mistake has been all mine -- I've managed to use regolith-desktop.org instead of .com, probably by muscle memory or something like that. The .com domain works perfectly!

Thanks for updating the posts too!