I have Embedded Linux devices and also I host a third-party repository created with reprepro and signed with GPG key. The myrepo.list inside the devices look like this
deb [signed-by=/usr/share/keyrings/myrepo-archive-keyring.gpg] https://repository.example.com xenial main"
The problem that I am facing is that the key have expiration date and I don't know how to set the devices to update the key before it expires. It will be not possible to take all devices back, so it has to be done automatically. I have one idea: To create script with cronjob to periodically download the key that will be hosted somewhere in the repo
wget -q https://repository.example.com/files/apt-key.gpg -O /usr/share/keyrings/myrepo-archive-keyring.gpg
Is it possible to do it with gpg and keyservers?