Modernize debian sources and add gpg v4 signature support to OBS

[Hasanhasan323]

1- Modernize debian sources syntax

source syntax is not in DEB822 type

When you go into a download debian package page in OBS
In Add repository and install manually

For example:

echo 'deb http://download.opensuse.org/repositories/home:/celenity/Debian_12/ /' | sudo tee /etc/apt/sources.list.d/home:celenity.list
curl -fsSL https://download.opensuse.org/repositories/home:celenity/Debian_12/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_celenity.gpg > /dev/null
sudo apt update
sudo apt install phoenix-esr

But it should be:

cat <<EOF | sudo tee /etc/apt/sources.list.d/home:celenity.sources
Types: deb
URIs: https://download.opensuse.org/repositories/home:/celenity/Debian_12/
Suites: /
Components: 
Signed-By: /etc/apt/trusted.gpg.d/home_celenity.gpg
EOF

curl -fsSL https://download.opensuse.org/repositories/home:celenity/Debian_12/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_celenity.gpg > /dev/null

sudo apt update

sudo apt install phoenix-esr

Notice changing the name of the source file from home:celenity.list to home:celenity.sources

2- Add gpg v4 signature support to OBS

kubernetes/release#3869

openSUSE/open-build-service#4174

[stbuehler]

Just to clarify a little: DEB822 isn't urgent - apt complains a little, but that can be disabled. I don't think it will break in trixie. After all it says "Some sources can be modernized", not "must be immediately modernized" - not even "should".
Also see: https://daniel-lange.com/archives/192-Make-apt-shut-up-about-modernize-sources-in-Trixie.html (or probably any other result of your favorite search engine).

v3-signatures and sha1-usage in gpg keys on the other hand are probably going to break 2026-02-01.

[Hasanhasan323]

@stbuehler
Very bad very old.