Episode Details

A zip file in a shared Drive folder is a software release process with no mechanism for the second release. So how do you run your own APT repository — and keep it private — without turning into your family's unpaid update service? This episode walks through the modern client-side setup: the new deb822 .sources format, why Signed-By matters more than ever, and the Sequoia-based signature strictness in Debian 13 that quietly broke a lot of third-party repos this year. Then the privacy question gets split in two — hidden versus authenticated — with honest verdicts on Cloudflare Access (stock apt can't use it), a Worker-plus-R2 basic-auth pattern, and the Tailscale serve route that works right up until someone's client is switched off. Plus the setup-package trick that makes key rotation a normal update, and how to get silent third-party updates via Origins-Pattern. Episode 6182 — myweirdprompts.com/n/6182 (permanent short link: myweirdprompts.com/035544)