This package repository contains RPM and DEB builds of the InfluxData products, including InfluxDB, Telegraf, Chronograf, Kapacitor, etc. Below are instructions on how to add this package repo to both RPM and DEB based systems.
NOTICE 2026-01-06: InfluxData updated its signing subkey. For details, see our blog post.
The key used for package signing uses a primary key with signing subkeys that have an expiration. When needed, new signing subkeys with expiry are added to the GPG key. In this manner, users may consistently fetch the GPG key and verify the primary key's fingerprint to ensure the correct key is being used. This approach allows for a consistent and secure user experience even in the event of key rotations.
Users should always use the influxdata-archive.key key
unless using a very old distribution that doesn't have support for
verifying subkeys in APT and RPM (e.g. CentOS/RHEL 7, Ubuntu 18.04 LTS,
or Debian Buster), where the influxdata-archive_compat-exp2029.key
is required for use.
influxdata-archive.key: preferred key
$ wget -q https://repos.influxdata.com/influxdata-archive.key
$ gpg --no-default-keyring --show-keys --with-subkey-fingerprints ./influxdata-archive.key
pub rsa4096 2023-01-18 [SC]
24C975CBA61A024EE1B631787C3D57159FC2F927
uid InfluxData Package Signing Key
sub rsa4096 2023-01-18 [S] [expires: 2026-01-17]
9D539D90D3328DC7D6C8D3B9D8FF8E1F7DF8B07E
sub rsa4096 2025-07-10 [S] [expires: 2029-01-17]
AC10D7449F343ADCEFDDC2B6DA61C26A0585BD3B
influxdata-archive_compat-exp2029.key: compatibility key for very old distributions
$ wget -q https://repos.influxdata.com/influxdata-archive_compat-exp2029.key
$ gpg --no-default-keyring --show-keys --with-subkey-fingerprints ./influxdata-archive_compat-exp2029.key
pub rsa4096 2025-07-10 [SC] [expires: 2029-01-17]
AC10D7449F343ADCEFDDC2B6DA61C26A0585BD3B
uid InfluxData Package Signing Key
influxdata-archive_compat.key: obsolete (expired) compatibility key, do not use
$ wget -q https://repos.influxdata.com/influxdata-archive_compat.key
$ gpg --no-default-keyring --show-keys --with-subkey-fingerprints ./influxdata-archive_compat.key
pub rsa4096 2023-01-18 [SC] [expires: 2026-01-17]
9D539D90D3328DC7D6C8D3B9D8FF8E1F7DF8B07E
uid InfluxData Package Signing Key
influxdb.key: obsolete (revoked), do not useinfluxdb2.key: obsolete (revoked), do not use
gpg --show-keys is only supported in GnuPG 2.2.8 and later. To
verify the fingerprint with older releases (this assumes also having to use
the compat key):
$ gpg --version
gpg (GnuPG) 2.2.4
libgcrypt 1.8.1
Copyright (C) 2017 Free Software Foundation, Inc.
$ wget -q https://repos.influxdata.com/influxdata-archive_compat-exp2029.key
$ gpg --homedir /tmp --no-default-keyring --keyring /dev/null --trust-model always --with-fingerprint --import-options show-only --import ./influxdata-archive_compat-exp2029.key
pub rsa4096 2025-07-10 [SC] [expires: 2029-01-17]
AC10 D744 9F34 3ADC EFDD C2B6 DA61 C26A 0585 BD3B
uid InfluxData Package Signing Key
gpg: Total number processed: 1
$ gpg --version
gpg (GnuPG) 1.4.23
Copyright (C) 2015 Free Software Foundation, Inc.
$ wget -q https://repos.influxdata.com/influxdata-archive_compat-exp2029.key
$ TMPGNUPGHOME=$(mktemp -d) ; gpg --home "$TMPGNUPGHOME" --no-default-keyring --keyring /dev/null --with-fingerprint ./influxdata-archive_compat-exp2029.key && rm -f "$TMPGNUPGHOME"/*.gpg && rmdir "$TMPGNUPGHOME"
gpg: keyring `/tmp/tmp.3LKzqpOohr/secring.gpg' created
pub 4096R/0585BD3B 2025-07-10 InfluxData Package Signing Key
Key fingerprint = AC10 D744 9F34 3ADC EFDD C2B6 DA61 C26A 0585 BD3B
For DEB-based platforms (e.g. Ubuntu, Debian):
$ wget -q https://repos.influxdata.com/influxdata-archive.key
$ gpg --show-keys --with-fingerprint --with-colons ./influxdata-archive.key 2>&1 | grep -q '^fpr:\+24C975CBA61A024EE1B631787C3D57159FC2F927:$' && cat influxdata-archive.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/influxdata-archive.gpg > /dev/null
$ echo 'deb [signed-by=/etc/apt/trusted.gpg.d/influxdata-archive.gpg] https://repos.influxdata.com/debian stable main' | sudo tee /etc/apt/sources.list.d/influxdata.list
For RPM-based platforms (e.g. RHEL, CentOS):
$ cat <<EOF | sudo tee /etc/yum.repos.d/influxdata.repo
[influxdata]
name = InfluxData Repository - Stable
baseurl = https://repos.influxdata.com/stable/\$basearch/main
enabled = 1
gpgcheck = 1
gpgkey = https://repos.influxdata.com/influxdata-archive.key
EOF