• 1Password

Installing on Debian or Ubuntu

This assumes a modern system, I'm using Pop OS 22.04 LTS. The "modern" component is here a new style of apt repo config, handling the repo pubkeys a bit differently and defining the repo with a new file format.

We'll use the official guide as a basis for it: https://support.1password.com/install-linux/#debian-or-ubuntu

1. Become root

2. Fetch the repo pubkey

   curl -sS https://downloads.1password.com/linux/keys/1password.asc | gpg --dearmor --output /etc/apt/trusted.gpg.d/1password-archive-keyring.gpg

   This places it in a standalone file rather than importing it into a GPG keyring.

3. Define the apt repo for 1Password

   cat <<EOF > /etc/apt/sources.list.d/1password.sources
   X-Repolib-Name: 1Password
   Enabled: yes
   Types: deb
   URIs: https://downloads.1password.com/linux/debian/amd64/
   Suites: stable
   Architectures: amd64
   Components: main
   Signed-By: /etc/apt/trusted.gpg.d/1password-archive-keyring.gpg
   X-Repolib-ID: 1password
   EOF

4. Install it now

   apt update && apt install 1password

5. Neuter the old-style repo definition, because the package creates that and it'll conflict with the new-style definition

   mv /etc/apt/sources.list.d/1password.list /etc/apt/sources.list.d/1password.list.disabled

That's it, go sign into the app now and be happy.

NB: the package apparently also installs a depsig keyring in /usr/share/debsig/keyrings/AC2D62742012EA22/debsig.gpg and policy definition in /etc/debsig/policies/AC2D62742012EA22/1password.pol. The official guide would have us do that ourselves, but I'm not sure it's necessary because we installed the .deb from an online repo, and we got the pubkey of the repo from their https URL, so it should be secure as per normal Secure Apt methodology.