Suites and signing keys

Packages are stored as a flat pool with per-suite Release files. Deltas are not published; clients use apt-get update with Acquire-By-Hash enabled.

Archive keys

Keys are rotated annually in January. Fingerprints are also published in the internal wiki.

Layout

/debian/dists/<suite>/Release
/debian/dists/<suite>/main/binary-<arch>/Packages.xz
/debian/pool/main/<component>/<first-letter>/<package>/

Files are served read-only; write access is restricted to the sync job on the build host.