GitLab rotating Omnibus Linux package signing key
Apr 16, 2025GitLab

Summary
This post details the rotation of the GPG key used to sign Omnibus Linux packages. It explains the purpose of the signing key for package integrity, distinguishes it from repository metadata signing keys, and provides instructions for users who validate package signatures to update their key. It also specifies the new key fingerprint and provides a URL to download the new key.