{"id":13935554,"url":"https://github.com/microsoft/linux-package-repositories","last_synced_at":"2025-04-04T18:10:41.976Z","repository":{"id":37850064,"uuid":"465892108","full_name":"microsoft/linux-package-repositories","owner":"microsoft","description":"Microsoft Packaged Linux Software (DEBs, RPMs, etc) are hosted on packages.microsoft.com (PMC) made available as native Linux repositories for use with package managers like APT, YUM, etc.","archived":false,"fork":false,"pushed_at":"2025-03-11T18:26:05.000Z","size":92,"stargazers_count":84,"open_issues_count":14,"forks_count":17,"subscribers_count":19,"default_branch":"main","last_synced_at":"2025-03-28T17:06:48.952Z","etag":null,"topics":["linux","microsoft","packages","repository"],"latest_commit_sha":null,"homepage":"https://packages.microsoft.com","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/microsoft.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-03-03T21:36:03.000Z","updated_at":"2025-03-11T18:26:09.000Z","dependencies_parsed_at":"2023-01-25T16:00:31.042Z","dependency_job_id":"5b06ad73-7e7d-4dd7-98eb-e7445e24c118","html_url":"https://github.com/microsoft/linux-package-repositories","commit_stats":{"total_commits":41,"total_committers":10,"mean_commits":4.1,"dds":0.6341463414634146,"last_synced_commit":"755accd673ab662a91c143ec067a9879e0f2e585"},"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Flinux-package-repositories","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Flinux-package-repositories/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Flinux-package-repositories/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Flinux-package-repositories/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","download_url":"https://codeload.github.com/microsoft/linux-package-repositories/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247226215,"owners_count":20904465,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["linux","microsoft","packages","repository"],"created_at":"2024-08-07T23:01:52.551Z","updated_at":"2025-04-04T18:10:41.949Z","avatar_url":"https://github.com/microsoft.png","language":"Python","readme":"# Microsoft Linux Package Repositories\n\n\u003e [!IMPORTANT]\n\u003e As of October 17, 2024, packages.microsoft.com has dropped all support for mariner 1.0 packages at the request of the Azure Linux (CBL-Mariner) team.\n\u003e This entailed the deletion of all `cbl-mariner-1.0-.*` repositories along with their associated distribution endpoints.\n\u003e Any 1.0 packages were EOL over a year ago, with support from the Mariner team ending shortly after.\n\u003e If you have any issues pertaining 1.0 packages, please [report an issue](#report-an-issue) to the Azure Linux GitHub repo show below.\n\n## Overview \n\nThe Microsoft Linux Package Repositories are hosted on PMC ([packages.microsoft.com](https://packages.microsoft.com)) service. The PMC service is intended to support package hosting for customers with clients running a distribution of Linux. Microsoft builds and supports a variety of software products for Linux systems and makes them available via standard APT and YUM package repositories.  \n\n## Report an issue\n\nThe package.microsoft.com team (PMC) maintains the infrastructure and metadata at\npackages.microsoft.com.\nIssues reported against this repo should involve problems downloading packages such as network\nconnection errors, unexpected http response codes, etc.\nIf you are having trouble installing or using a packaging due to missing dependencies, etc. we\nrecommend contacting the team that maintains the software.\nHere is a list of some teams along with their issue trackers:\n\n| Team | Issue tracker |\n| -------- | ------- |\n| Azure Linux (CBL-Mariner) | https://github.com/microsoft/azurelinux/issues |\n| dotnet  | https://github.com/dotnet/sdk/issues |\n| Microsoft Defender (mdtap) | https://github.com/microsoft/mdatp-xplat/issues |\n| Open Management Infrastructure (omi) | https://github.com/microsoft/omi/issues |\n| PowerShell | https://github.com/PowerShell/PowerShell/issues |\n| Visual Studio Code | https://github.com/microsoft/vscode/issues |\n\n## Rate limiting\n\nRequests to packages.microsoft.com are limited to 4,000 requests per 5 minutes.\nTriggering our rate limiting rule will result in 429 responses being returned.\nIf you run into issues with rate limiting, you can report a new issue.\n\n## Configuring the repository on your Linux system \n\nSee how to [host/install/upgrade](https://docs.microsoft.com/en-us/windows-server/administration/linux-package-repository-for-microsoft-software) Microsoft's Linux software using your distribution's standard package management tools.  \nIn short you may enable Microsoft's Production repository for your distribution / version by installing the `packages-microsoft-prod.[rpm|deb]` package found at the appropriate [/config/](https://packages.microsoft.com/config/) subdirectory, and there may be additional / alternate repositories you can enable by making the `.repo|.list` files available to your package manager.\n\nMicrosoft's Linux Software Repository is comprised of multiple repositories: \n\n* **prod** – These Production repositories (e.g. Ubuntu, Fedora, RHEL, etc.) are designated for packages intended to be used in production.\n  These packages are commercially supported by Microsoft under the terms of the applicable support agreement or program that you have with Microsoft.\n  The prod repositories can be located via hierarchical folder structure (e.g. https://packages.microsoft.com/fedora/36/prod/).\n\n* **insiders-fast/insiders-slow** – These repositories provide a way to preview upcoming features for software released into the Production repos.\n  Packages generally flow from `insiders-fast` -\u003e `insiders-slow` -\u003e `prod`, but note that some software in the prod repos may not use these repos, and not all versions released here will be promoted to the next stage.\n  _NOTE: Not intended for production use._\n\n* **product-specific** – These repositories contain packages for specific products, for example [Microsoft SQL Server on Linux.](https://docs.microsoft.com/en-us/sql/linux/sql-server-linux-overview) \n  Consult the product's documentation for installation instructions, as there may be additional setup required.\n\n_Note_: Packages in the Linux software repositories are subject to the license terms located in the packages. Please read the license terms prior to using the package. Your installation and use of the package constitutes your acceptance of these terms. If you do not agree with the license terms, do not use the package. \n\n## IP Addresses/Service Tags\n\nThe packages.microsoft.com infrastructure uses Azure Front Door to serve a majority of its packages.\nMicrosoft publishes a list of Azure IP Ranges with the Front Door IPs listed under the\n`AzureFrontDoor.Frontend` service tag:\n\n\u003chttps://www.microsoft.com/en-us/download/details.aspx?id=56519\u003e\n\nSQL packages are served from different regions so depending on your location you will receive\nSQL packages from an IP address in one of the following Service Tags:\n\n* AzureCloud.eastasia\n* AzureCloud.eastus2\n* AzureCloud.northeurope\n* AzureCloud.southeastasia\n* AzureCloud.westeurope\n* AzureCloud.westus2\n\n## Signature Verification\nIn general in rpm-based distributions it is common to sign the individual rpms but not the repository metadata, and in deb-based distributions it is common to sign the repository metadata but not the individual debs.\nMicrosoft signs **both** the individual packages and the repository metadata for both types of distributions.\nThe public keys used for verifying Microsoft signatures can be found at [/keys/](https://packages.microsoft.com/keys/).\n\n### Enabling Repository Metadata Signature Checking on RPM-Based Systems\nSet `repo_gpgcheck=1` in your repo file.\n\n### Verify the Signature of an Individual DEB.\n`debsig-verify` can be used to manually check the signature of an individual DEB.\n`dpkg-sig` is a competing individual-DEB signing standard with a different internal implementation, and it will not work for verifying Microsoft DEBs.\n\nTo use `debsig-verify` you must first create a policy file for it and provide Microsoft's public key.\n\n1. Install `debsig-verify`.  \n   ```\n   $ sudo apt install debsig-verify\n   ```\n1. Install the binary formatted (not ascii-armored) version of Microsoft's public key.  \n   ```\n   $ wget https://packages.microsoft.com/keys/microsoft.asc -O /tmp/microsoft.asc\n   $ sudo mkdir -p /usr/share/debsig/keyrings/EB3E94ADBE1229CF/\n   $ sudo gpg -o /usr/share/debsig/keyrings/EB3E94ADBE1229CF/microsoft.gpg --dearmor /tmp/microsoft.asc\n   ```\n1. Create a `debsig-verify` policy file.  \n   ```\n   $ sudo mkdir -p /etc/debsig/policies/EB3E94ADBE1229CF/\n   $ sudo tee /etc/debsig/policies/EB3E94ADBE1229CF/microsoft.pol \u003e /dev/null \u003c\u003c'EOF'\n   \u003c?xml version=\"1.0\"?\u003e\n   \u003c!DOCTYPE Policy SYSTEM \"https://www.debian.org/debsig/1.0/policy.dtd\"\u003e\n   \u003cPolicy xmlns=\"https://www.debian.org/debsig/1.0/\"\u003e\n\n     \u003cOrigin Name=\"Microsoft\" id=\"EB3E94ADBE1229CF\" Description=\"gpgsecurity@microsoft.com\"/\u003e\n\n     \u003cSelection\u003e\n       \u003cRequired Type=\"origin\" File=\"microsoft.gpg\" id=\"EB3E94ADBE1229CF\"/\u003e\n     \u003c/Selection\u003e\n\n     \u003cVerification MinOptional=\"0\"\u003e\n       \u003cRequired Type=\"origin\" File=\"microsoft.gpg\" id=\"EB3E94ADBE1229CF\"/\u003e\n     \u003c/Verification\u003e\n\n   \u003c/Policy\u003e\n   EOF\n   ```\n1. You can now verify individual DEBs.\n   ```\n   $ wget https://packages.microsoft.com/config/ubuntu/22.04/packages-microsoft-prod.deb -O /tmp/packages-microsoft-prod.deb\n   $ debsig-verify /tmp/packages-microsoft-prod.deb\n   debsig: Verified package from 'gpgsecurity@microsoft.com' (Microsoft)\n   ```\n\n## How can we make PMC service work for you? \n\n[Report an issue](https://github.com/microsoft/linux-package-repositories/issues/new?assignees=\u0026labels=\u0026template=report-an-issue.md\u0026title=Report+an+issue): Help us improve our service by reporting issues you are experiencing \n\n[Request a feature](https://github.com/microsoft/linux-package-repositories/issues/new?assignees=\u0026labels=enhancement\u0026template=request-a-feature.md): Request a new feature or enhancement \n\n[Report a security vulnerability](https://github.com/microsoft/linux-package-repositories/security/policy): Please review our security policy for more details \n\n## Contributing  \n\nThis project welcomes contributions and suggestions.  Most contributions require you to agree to a\nContributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us\nthe rights to use your contribution. For details, visit https://cla.opensource.microsoft.com.\n\nWhen you submit a pull request, a CLA bot will automatically determine whether you need to provide\na CLA and decorate the PR appropriately (e.g., status check, comment). Simply follow the instructions\nprovided by the bot. You will only need to do this once across all repos using our CLA.\n\nThis project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/).\nFor more information see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/) or\ncontact [opencode@microsoft.com](mailto:opencode@microsoft.com) with any additional questions or comments.\n\n## Trademarks \n\nThis project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft \ntrademarks or logos is subject to and must follow \n[Microsoft's Trademark \u0026 Brand Guidelines](https://www.microsoft.com/en-us/legal/intellectualproperty/trademarks/usage/general).\nUse of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship.\nAny use of third-party trademarks or logos are subject to those third-party's policies.\n","funding_links":[],"categories":["Python"],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmicrosoft%2Flinux-package-repositories","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmicrosoft%2Flinux-package-repositories","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmicrosoft%2Flinux-package-repositories/lists"}