Package Repositories

Devuan package repositories are exclusive. Other repositories, including Debian, Ubuntu, Mint etc, should NOT be used directly.

Devuan recommends using the codename (jessie, ascii, beowulf, ceres) rather than the suite (oldstable, stable, testing, unstable) in /etc/apt/sources.list entries. Please go to Devuan Release Information for a detailed explanation.

Devuan has a network of package repository mirrors in place. The mirror network is accessible using the FQDN “deb.devuan.org” via http NOT https. Country Codes (CC) are currently unavailable but a specific mirror from the list can be accessed using the corresponding BaseURL.

IMPORTANT NOTE: auto.mirror is now deprecated and will eventually be decomissioned.

Please make sure you have the latest devuan-keyring package and then point your /etc/apt/sources.list to deb.devuan.org. To use deb.devuan.org, you must have devuan-keyring_2017.10.03 or higher.

Default configurations

Devuan 3.0.0 Beowulf (stable)

deb http://deb.devuan.org/merged beowulf          main
        deb http://deb.devuan.org/merged beowulf-updates  main
        deb http://deb.devuan.org/merged beowulf-security main

Devuan 2.1 ASCII (oldstable)

deb http://deb.devuan.org/merged ascii          main
        deb http://deb.devuan.org/merged ascii-updates  main
        deb http://deb.devuan.org/merged ascii-security main

Devuan 1.0.0 Jessie (oldoldstable)

deb http://auto.mirror.devuan.org/merged jessie          main
        deb http://auto.mirror.devuan.org/merged jessie-updates  main
        deb http://auto.mirror.devuan.org/merged jessie-security main

Access via Tor

We also provide access to our package repositories via Tor. Install apt-transport-tor and then use the following hidden services:

deb tor+http://devuanfwojg73k6r.onion/merged <release codename>          main
        deb tor+http://devuanfwojg73k6r.onion/merged <release codename>-updates  main
        deb tor+http://devuanfwojg73k6r.onion/merged <release codename>-security main

Note that all software shipped with Devuan in the main component is free software. But if needed, non-free software is also available. Just add the non-free and contrib components to the appropriate line(s) in /etc/apt/sources.list like this:

deb http://deb.devuan.org/merged beowulf main non-free contrib

Additional repositories

Add security updates (default: yes)

Security updates are strongly recommended as they provide fixes to identified vulnerabilities. Security updates automatically enter the stable release as they appear. You should activate this repository if your system can connect to the internet.

# /etc/apt/sources.list

        deb     http://deb.devuan.org/merged <release codename>-security main
        deb-src http://deb.devuan.org/merged <release codename>-security main

Add stable updates for fast release packages (default: no)

updates integrate important changes from upstream. Packages in updates will be part of the next stable point release, but are safe to upgrade right away. If you’re using an antivirus and other similar packages that require up-to-date information, you should activate this repository.

# /etc/apt/sources.list

        deb     http://deb.devuan.org/merged <release codename>-updates main
        deb-src http://deb.devuan.org/merged <release codename>-updates main

Add stable proposed-updates (default: no)

proposed-updates are packages that will become part of the next stable point release but are not fully tested yet. It is usually safe to use them, but we recommend not using them on production systems.

# /etc/apt/sources.list

        deb     http://deb.devuan.org/devuan <release codename>-proposed-updates main
        deb-src http://deb.devuan.org/devuan <release codename>-proposed-updates main

Add backports (default: no)

backports provides newer versions of packages already in the testing suite but linked to stable dependencies. This is useful if you prefer using newer software versions over well-tested stable versions. It is advised to disable backports and only enable to install specific packages.

# /etc/apt/sources.list

        deb     http://deb.devuan.org/merged <release codename>-backports main
        deb-src http://deb.devuan.org/merged <release codename>-backports main

Add experimental (default: no)

experimental is for testing very new software. Use at your own risk.

# /etc/apt/sources.list

        deb     http://deb.devuan.org/devuan experimental main
        deb-src http://deb.devuan.org/devuan experimental main

Primary Signing Keys

Devuan repositories are cryptographically signed using OpenPGP. The keys used to sign Devuan repositories are available in the package devuan-keyring. The current keys are reported below:

# gpg --no-default-keyring --keyring /usr/share/keyrings/devuan-archive-keyring.gpg  --list-keys
        /usr/share/keyrings/devuan-archive-keyring.gpg
        ----------------------------------------------
        pub   2048R/541922FB 2014-12-02
        uid                  Devuan Repository (Primary Devuan signing key) <repository@devuan.org>
        sub   2048R/4A07DF74 2014-12-02
        sub   4096R/19D58C5D 2016-04-26

        pub   4096R/B1FB3B59 2016-10-06
        uid                  Devuan ISO Toaster (Devuan GNU+Linux) <onelove@devuan.org>
        sub   4096R/DF41AD47 2016-10-06

        pub   4096R/61FC752C 2017-09-04 [expires: 2022-09-03]
        uid                  Devuan Repository (Amprolla3 on Nemesis) <repository@devuan.org>
        sub   4096R/716A235C 2017-09-04 [expires: 2022-09-03]

Featured