Ubuntu 21.04:删除Debian密钥环GPG文件安全吗？

Question

我刚刚注意到，在我的Ubuntu 21.04安装的/usr/share/keyrings/目录中有很多Debian文件(这些文件已经从以前的版本定期升级)。

$ ls -lsh /usr/share/keyrings/
total 32M
 12K -rw-r--r-- 1 root root 8.5K Mar 26 16:41 debian-archive-bullseye-automatic.gpg
 12K -rw-r--r-- 1 root root 8.6K Mar 26 16:41 debian-archive-bullseye-security-automatic.gpg
4.0K -rw-r--r-- 1 root root 2.4K Mar 26 16:41 debian-archive-bullseye-stable.gpg
8.0K -rw-r--r-- 1 root root 8.0K Mar 26 16:41 debian-archive-buster-automatic.gpg
8.0K -rw-r--r-- 1 root root 8.0K Mar 26 16:41 debian-archive-buster-security-automatic.gpg
4.0K -rw-r--r-- 1 root root 2.3K Mar 26 16:41 debian-archive-buster-stable.gpg
 56K -rw-r--r-- 1 root root  55K Mar 26 16:41 debian-archive-keyring.gpg
 40K -rw-r--r-- 1 root root  37K Mar 26 16:41 debian-archive-removed-keys.gpg
8.0K -rw-r--r-- 1 root root 7.3K Mar 26 16:41 debian-archive-stretch-automatic.gpg
8.0K -rw-r--r-- 1 root root 7.3K Mar 26 16:41 debian-archive-stretch-security-automatic.gpg
4.0K -rw-r--r-- 1 root root 2.3K Mar 26 16:41 debian-archive-stretch-stable.gpg
 28M -rw-r--r-- 1 root root  28M Mar 25 02:40 debian-keyring.gpg
2.6M -rw-r--r-- 1 root root 2.6M Mar 25 02:40 debian-maintainers.gpg
772K -rw-r--r-- 1 root root 771K Mar 25 02:40 debian-nonupload.gpg
 28K -rw-r--r-- 1 root root  26K Mar 25 02:40 debian-role-keys.gpg

4.0K -rw-r--r-- 1 root root 2.3K May 11 15:49 ubuntu-advantage-cis.gpg
4.0K -rw-r--r-- 1 root root 2.2K May 11 15:49 ubuntu-advantage-esm-apps.gpg
4.0K -rw-r--r-- 1 root root 2.3K May 11 15:49 ubuntu-advantage-esm-infra-trusty.gpg
4.0K -rw-r--r-- 1 root root 2.3K May 11 15:49 ubuntu-advantage-fips.gpg
8.0K -rw-r--r-- 1 root root 7.3K Sep 18  2018 ubuntu-archive-keyring.gpg
8.0K -rw-r--r-- 1 root root 6.6K Oct 27  2016 ubuntu-archive-removed-keys.gpg
4.0K -rw-r--r-- 1 root root 3.0K Mar 27 05:04 ubuntu-cloudimage-keyring.gpg
   0 -rw-r--r-- 1 root root    0 Jan 17  2018 ubuntu-cloudimage-removed-keys.gpg
4.0K -rw-r--r-- 1 root root 1.2K May 27  2010 ubuntu-master-keyring.gpg
$

当我将它与Ubuntu 21.04的新的虚拟安装进行比较时，它只有Ubuntu键环文件。

那么，删除那些Debian密钥环文件安全吗？谢谢。

编辑-1：

dpkg -S /usr/share/keyrings/debian-* | awk -F: '{print $1}' | sort -u

debian-archive-keyring
debian-keyring

aptitude why debian-archive-keyring

i   packaging-dev    Recommends ubuntu-dev-tools      
i A ubuntu-dev-tools Recommends debian-archive-keyring

aptitude why debian-keyring

i   packaging-dev    Recommends ubuntu-dev-tools
i A ubuntu-dev-tools Recommends debian-keyring  

Answer 1

直接删除文件是个坏主意。

你可以移除他们的包裹-通过

dpkg -S '/usr/share/keyrings/debian-*' | awk -F: '{print $1}' | sort -u

然后移除

sudo apt-get purge $(dpkg -S '/usr/share/keyrings/debian-*' | awk -F: '{print $1}' | sort -u)

例如，在我的18.04 LTS中，我看到了两个包debian-归档-keyring和debian。能力倾向说，它们是作为建议来安装的：

$智能为什么debian-归档-keyring i bikeshed建议ubuntu-dev-tools i ubuntu-dev-tools推荐debian-存档-keyring$ aptitude为什么debian-keyring i bikeshed建议ubuntu-dev-tools i ubuntu-dev-tools推荐debian-keyring -keyring

您可以尝试在您的计算机上执行上述所有命令，然后决定。

对于我的机器来说，删除这些键环是安全的，我将节省大约35，6MB。