Yaya

The YayaOS package archive

This host serves one thing: a signed apt archive of the packages Yaya builds itself. It is a static file tree — no application, no database, nothing dynamic. Debian's own archives are untouched by any of it.

Adding it on Debian 13

Released YayaOS images will ship with this preconfigured. Elsewhere:

# Fetch the key, then check it against the fingerprint below.
curl -fsSL https://repo.yaya.sh/yayaos-archive-2026.asc \
  | sudo gpg --dearmor -o /usr/share/keyrings/yayaos-archive-keyring.gpg

gpg --show-keys /usr/share/keyrings/yayaos-archive-keyring.gpg

# Bind the archive to that key and nothing else.
echo "deb [signed-by=/usr/share/keyrings/yayaos-archive-keyring.gpg] \
https://repo.yaya.sh/debian trixie main" \
  | sudo tee /etc/apt/sources.list.d/yayaos.list

sudo apt update

Verify the key

Published here so you can check the key you fetched against a second source.

YayaOS Archive Signing Key (repo.yaya.sh) <andre@yaya.sh> · ed25519 · created 2026-07-23 · expires 2028-07-22

Scope

This key authenticates this archive and nothing else. Packages from Debian keep being verified by Debian's own keys, and YayaOS deliberately excludes this archive from unattended upgrades — our packages are not security-critical, and an archive we control should not be installing itself onto your machine unattended.