Install BastionGuard from the Official Linux Repositories

Use the instructions below to add the official BastionGuard package repository for your Linux distribution. All repository metadata and packages are signed with the official BastionGuard OpenPGP key.

Repository base URL: https://www.bastionguard.eu/repository/

Primary signing key fingerprint:
E33B 4BC4 CAC6 FA6F 1CCA 2397 68D0 8974 A276 CF8A

Repository signing subkey fingerprint:
BCAA D2BB 2605 509F 36DF 51DE A4C7 F6EE D612 CEAB

Public signing key: Download ASCII key  |  Download binary APT key

Debian 13 (Trixie)

Run the following commands as a user with sudo privileges:

sudo install -d -m 0755 /etc/apt/keyrings

sudo curl -fsSL \
  https://www.bastionguard.eu/repository/keys/bastionguard-archive-key.gpg \
  -o /etc/apt/keyrings/bastionguard-archive-key.gpg

sudo chmod 0644 \
  /etc/apt/keyrings/bastionguard-archive-key.gpg

sudo tee /etc/apt/sources.list.d/bastionguard.sources >/dev/null <<'EOF'
Types: deb
URIs: https://www.bastionguard.eu/repository/deb/debian/trixie
Suites: trixie
Components: main
Signed-By: /etc/apt/keyrings/bastionguard-archive-key.gpg
EOF

sudo apt update
sudo apt install bastionguard

Verify the configured package source:

apt-cache policy bastionguard

Back to distribution list

Ubuntu 25.10

Run the following commands as a user with sudo privileges:

sudo install -d -m 0755 /etc/apt/keyrings

sudo curl -fsSL \
  https://www.bastionguard.eu/repository/keys/bastionguard-archive-key.gpg \
  -o /etc/apt/keyrings/bastionguard-archive-key.gpg

sudo chmod 0644 \
  /etc/apt/keyrings/bastionguard-archive-key.gpg

sudo tee /etc/apt/sources.list.d/bastionguard.sources >/dev/null <<'EOF'
Types: deb
URIs: https://www.bastionguard.eu/repository/deb/ubuntu/25.10
Suites: ubuntu-25.10
Components: main
Signed-By: /etc/apt/keyrings/bastionguard-archive-key.gpg
EOF

sudo apt update
sudo apt install bastionguard

Verify the configured package source:

apt-cache policy bastionguard

Back to distribution list

Ubuntu 26.04

Run the following commands as a user with sudo privileges:

sudo install -d -m 0755 /etc/apt/keyrings

sudo curl -fsSL \
  https://www.bastionguard.eu/repository/keys/bastionguard-archive-key.gpg \
  -o /etc/apt/keyrings/bastionguard-archive-key.gpg

sudo chmod 0644 \
  /etc/apt/keyrings/bastionguard-archive-key.gpg

sudo tee /etc/apt/sources.list.d/bastionguard.sources >/dev/null <<'EOF'
Types: deb
URIs: https://www.bastionguard.eu/repository/deb/ubuntu/26.04
Suites: ubuntu-26.04
Components: main
Signed-By: /etc/apt/keyrings/bastionguard-archive-key.gpg
EOF

sudo apt update
sudo apt install bastionguard

Verify the configured package source:

apt-cache policy bastionguard

Back to distribution list

Ubuntu 26.10

Run the following commands as a user with sudo privileges:

sudo install -d -m 0755 /etc/apt/keyrings

sudo curl -fsSL \
  https://www.bastionguard.eu/repository/keys/bastionguard-archive-key.gpg \
  -o /etc/apt/keyrings/bastionguard-archive-key.gpg

sudo chmod 0644 \
  /etc/apt/keyrings/bastionguard-archive-key.gpg

sudo tee /etc/apt/sources.list.d/bastionguard.sources >/dev/null <<'EOF'
Types: deb
URIs: https://www.bastionguard.eu/repository/deb/ubuntu/26.10
Suites: ubuntu-26.10
Components: main
Signed-By: /etc/apt/keyrings/bastionguard-archive-key.gpg
EOF

sudo apt update
sudo apt install bastionguard

Verify the configured package source:

apt-cache policy bastionguard

Back to distribution list

Fedora 44

Create the BastionGuard DNF repository configuration:

sudo install -d -m 0755 /etc/yum.repos.d

sudo tee /etc/yum.repos.d/bastionguard.repo >/dev/null <<'EOF'
[bastionguard-fedora-44]
name=BastionGuard Official Repository - Fedora 44
baseurl=https://www.bastionguard.eu/repository/rpm/fedora/44/$basearch/
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://www.bastionguard.eu/repository/keys/RPM-GPG-KEY-BastionGuard
sslverify=1
metadata_expire=1h
EOF

sudo dnf clean metadata
sudo dnf -y makecache --refresh
sudo dnf install bastionguard

Verify the repository:

dnf repolist | grep -i bastionguard
dnf info bastionguard

Back to distribution list

Mageia 10

These instructions use DNF and the RPM-MD repository format. Install DNF first if it is not already available on the system. 

if ! command -v dnf >/dev/null 2>&1; then
  sudo urpmi --auto dnf
fi

sudo install -d -m 0755 /etc/yum.repos.d

sudo tee /etc/yum.repos.d/bastionguard.repo >/dev/null <<'EOF'
[bastionguard-mageia-10]
name=BastionGuard Official Repository - Mageia 10
baseurl=https://www.bastionguard.eu/repository/rpm/mageia/10/$basearch/
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://www.bastionguard.eu/repository/keys/RPM-GPG-KEY-BastionGuard
sslverify=1
metadata_expire=1h
EOF

sudo dnf clean metadata
sudo dnf -y makecache --refresh
sudo dnf install bastionguard

Verify the repository:

dnf repolist | grep -i bastionguard
dnf info bastionguard

Back to distribution list

OpenMandriva Lx 6.0 Rock

Create the BastionGuard DNF repository configuration:

sudo install -d -m 0755 /etc/yum.repos.d

sudo tee /etc/yum.repos.d/bastionguard.repo >/dev/null <<'EOF'
[bastionguard-openmandriva-6-rock]
name=BastionGuard Official Repository - OpenMandriva Lx 6.0 Rock
baseurl=https://www.bastionguard.eu/repository/rpm/openmandriva/6.0-rock/$basearch/
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://www.bastionguard.eu/repository/keys/RPM-GPG-KEY-BastionGuard
sslverify=1
metadata_expire=1h
EOF

sudo dnf clean metadata
sudo dnf -y makecache --refresh
sudo dnf install bastionguard

Verify the repository:

dnf repolist | grep -i bastionguard
dnf info bastionguard

Back to distribution list

openSUSE Leap 16.0

Import the official signing key and add the repository:

KEY_FILE="$(mktemp)"

curl -fsSL \
  https://www.bastionguard.eu/repository/keys/RPM-GPG-KEY-BastionGuard \
  -o "$KEY_FILE"

sudo rpm --import "$KEY_FILE"
rm -f "$KEY_FILE"

sudo zypper removerepo bastionguard-opensuse-leap16 \
  >/dev/null 2>&1 || true

sudo zypper addrepo \
  --refresh \
  'https://www.bastionguard.eu/repository/rpm/opensuse/leap/16.0/$basearch/' \
  bastionguard-opensuse-leap16

sudo zypper refresh bastionguard-opensuse-leap16
sudo zypper install bastionguard

Verify the repository:

zypper repos -d | grep -i bastionguard
zypper info bastionguard

Back to distribution list

openSUSE Tumbleweed

Import the official signing key and add the repository:

KEY_FILE="$(mktemp)"

curl -fsSL \
  https://www.bastionguard.eu/repository/keys/RPM-GPG-KEY-BastionGuard \
  -o "$KEY_FILE"

sudo rpm --import "$KEY_FILE"
rm -f "$KEY_FILE"

sudo zypper removerepo bastionguard-opensuse-tumbleweed \
  >/dev/null 2>&1 || true

sudo zypper addrepo \
  --refresh \
  'https://www.bastionguard.eu/repository/rpm/opensuse/tumbleweed/$basearch/' \
  bastionguard-opensuse-tumbleweed

sudo zypper refresh bastionguard-opensuse-tumbleweed
sudo zypper install bastionguard

Verify the repository:

zypper repos -d | grep -i bastionguard
zypper info bastionguard

Back to distribution list

Verify the BastionGuard signing key

Download the public key and display its fingerprints:

curl -fsSLo /tmp/bastionguard-archive-key.gpg \
  https://www.bastionguard.eu/repository/keys/bastionguard-archive-key.gpg

gpg \
  --show-keys \
  --with-fingerprint \
  --with-subkey-fingerprint \
  /tmp/bastionguard-archive-key.gpg

The output must include the following primary fingerprint:

E33B 4BC4 CAC6 FA6F 1CCA 2397 68D0 8974 A276 CF8A

It must also include the dedicated repository signing subkey:

BCAA D2BB 2605 509F 36DF 51DE A4C7 F6EE D612 CEAB

Do not continue if the fingerprints do not match exactly.

Back to distribution list

Security notice

Do not disable package or repository signature verification. The supplied APT, DNF and Zypper configurations keep GPG verification enabled.

Official BastionGuard repository keys are published only under:
https://www.bastionguard.eu/repository/keys/

Published on:
Last updated on: