Debian artifact
Written by
Updated at July 29, 2026
A Debian artifact is a *.deb package file containing compiled software, metadata, dependencies, and other resources for Debian
Package format
DEB
- Compiled executables and libraries.
- Package metadata (name, version, description, dependencies).
- Installation and deletion scripts.
- Configuration files.
Debian artifacts are used to distribute software you can install and manage using the APT
Metadata signing
Cloud Registry supports signing Debian registry metadata with a GPG key. The signature allows clients to verify the authenticity of packages before the installation.
When creating a registry with a metadata signature:
- The secret part of the GPG key is stored in Yandex Lockbox.
- Cloud Registry automatically signs registry metadata on every update.
- Clients use the public part of the GPG key to verify the signature.
For more information on signature settings, see Preparing a GPG key.