Where Are APT Sources Stored?
APT sources.list and sources.list.d files on Debian and Ubuntu with repo URLs and keys.
Last updated
APT learns package repositories from sources.list plus drop-in files in sources.list.d, with signing keys managed separately. PPAs and third-party repos each add one file, which keeps removals surgical.
A broken line here errors every apt operation until fixed. Back up the files before adding repos and confirm keys or updates warn loudly.
Where Linux stores this, by platform
/etc/apt/sources.list
Main repo list with one deb line per source. Drop-ins live in /etc/apt/sources.list.d as one file per repo, and keys in /etc/apt/trusted.gpg.d or keyrings. Edit with sudo and run apt update to validate; syntax errors block all installs until fixed.
Frequently asked questions
How do I add a PPA on Ubuntu?
Use add-apt-repository, which writes a file into sources.list.d above plus its key. Hand-edit the same files to remove or pin it later.
APT warns about unsigned repos. Why?
The repo's key is missing from the trusted keyrings next to the sources above. Add the vendor key properly instead of bypassing verification.
Notice an outdated path? Let us know.