Kochlabs apt repository

Debian and Ubuntu packages for Kochlabs open-source projects, built and published from their GitHub repositories. Every package here was built by its project's release workflow, which is checked through GitHub build attestations before it is published.

Packages

• tributary: self-hosted network flow analytics (NetFlow, IPFIX, sFlow). It also needs ClickHouse's repository: see its installation guide, or use its install.sh, which sets up both.

Set up

Fetch the signing key and check its fingerprint:

curl -fsSL https://apt.kochlabs.io/kochlabs.gpg -o kochlabs.gpg
gpg --show-keys --with-fingerprint kochlabs.gpg

It must show Kochlabs APT Repository with this fingerprint:

00C4 3332 28E1 7F91 DFD3 B7B9 CEE7 59FD 2335 DD30

Then add the repository, trusting the key for it alone, and allow only Kochlabs' packages from it:

sudo install -m 644 kochlabs.gpg /usr/share/keyrings/kochlabs.gpg
echo "deb [signed-by=/usr/share/keyrings/kochlabs.gpg] https://apt.kochlabs.io stable main" \
  | sudo tee /etc/apt/sources.list.d/kochlabs.list
sudo tee /etc/apt/preferences.d/kochlabs <<'EOF'
# Only Kochlabs' own packages may come from its repository.
Package: tributary
Pin: origin apt.kochlabs.io
Pin-Priority: 500

Package: *
Pin: origin apt.kochlabs.io
Pin-Priority: -1
EOF
sudo apt update

Files

• kochlabs.gpg and kochlabs.asc: the signing key (binary and armored)
• dists/stable/InRelease: the signed index
• github.com/kochlabs/apt.kochlabs.io: how this repository is built