fix: apt signing

script/_utils.sh

@@ -1,5 +1,7 @@
 # Utility functions for common tasks
 
+ARCH=$(dpkg --print-architecture)
+
 # @arg $1 URL to download
 # @arg $2 Path to file
 function download_file {
@@ -52,14 +54,23 @@ function install {
 #   * components - apt components
 function add_repository {
     key=$(jq -r ".key" <<<"$1")
-    repository=$(jq -r ".repository" <<<"$1")
+    echo "Updating apt repository ${key}..."
+
     signingKey=$(jq -r ".signingKey" <<<"$1")
+    repository=$(jq -r ".repository" <<<"$1")
     components=$(jq -r ".components" <<<"$1")
-    source="deb [arch=$(dpkg --print-architecture)] ${repository} ${components}"
-    echo "$source" | sudo tee "/etc/apt/sources.list.d/${key}.list" >/dev/null
+
+    signingKeyPath="/etc/apt/keyrings/${key}.gpg"
+    sourcesListPath="/etc/apt/sources.list.d/${key}.list"
+    source="deb [signed-by=${signingKeyPath} arch=${ARCH}] ${repository} ${components}"
+
+    sudo mkdir -p /etc/apt/keyrings
+    sudo mkdir -p /etc/apt/sources.list.d
+
+    echo "$source" | sudo tee "$sourcesListPath" >/dev/null
     wget -O- "$signingKey" |
         gpg --dearmor |
-        sudo tee "/etc/apt/keyrings/${key}.gpg" >/dev/null
+        sudo tee "$signingKeyPath" >/dev/null
 }
 
 # @arg $1 package list file to install