InfluxData - Package Repository

Instructions

This package repository contains RPM and DEB builds of the InfluxData products, including InfluxDB, Telegraf, Chronograf, Kapacitor, etc. Below are instructions on how to add this package repo to both RPM and DEB based systems.

GPG Keys

NOTICE 2026-01-06: InfluxData updated its signing subkey. For details, see our blog post.

The key used for package signing uses a primary key with signing subkeys that have an expiration. When needed, new signing subkeys with expiry are added to the GPG key. In this manner, users may consistently fetch the GPG key and verify the primary key's fingerprint to ensure the correct key is being used. This approach allows for a consistent and secure user experience even in the event of key rotations.

Users should always use the influxdata-archive.key key unless using a very old distribution that doesn't have support for verifying subkeys in APT and RPM (e.g. CentOS/RHEL 7, Ubuntu 18.04 LTS, or Debian Buster), where the influxdata-archive_compat-exp2029.key is required for use.

• influxdata-archive.key: preferred key

  
    $ wget -q https://repos.influxdata.com/influxdata-archive.key
    $ gpg --no-default-keyring --show-keys --with-subkey-fingerprints ./influxdata-archive.key
    pub   rsa4096 2023-01-18 [SC]
          24C975CBA61A024EE1B631787C3D57159FC2F927
    uid                      InfluxData Package Signing Key 
    sub   rsa4096 2023-01-18 [S] [expires: 2026-01-17]
          9D539D90D3328DC7D6C8D3B9D8FF8E1F7DF8B07E
    sub   rsa4096 2025-07-10 [S] [expires: 2029-01-17]
          AC10D7449F343ADCEFDDC2B6DA61C26A0585BD3B
          

• influxdata-archive_compat-exp2029.key: compatibility key for very old distributions

  
    $ wget -q https://repos.influxdata.com/influxdata-archive_compat-exp2029.key
    $ gpg --no-default-keyring --show-keys --with-subkey-fingerprints ./influxdata-archive_compat-exp2029.key
    pub   rsa4096 2025-07-10 [SC] [expires: 2029-01-17]
          AC10D7449F343ADCEFDDC2B6DA61C26A0585BD3B
    uid                      InfluxData Package Signing Key 
          

• influxdata-archive_compat.key: obsolete (expired) compatibility key, do not use

  
    $ wget -q https://repos.influxdata.com/influxdata-archive_compat.key
    $ gpg --no-default-keyring --show-keys --with-subkey-fingerprints ./influxdata-archive_compat.key
    pub   rsa4096 2023-01-18 [SC] [expires: 2026-01-17]
          9D539D90D3328DC7D6C8D3B9D8FF8E1F7DF8B07E
    uid                      InfluxData Package Signing Key 
          

• influxdb.key: obsolete (revoked), do not use
• influxdb2.key: obsolete (revoked), do not use

Fingerprint verification with old GnuPG versions

gpg --show-keys is only supported in GnuPG 2.2.8 and later. To verify the fingerprint with older releases (this assumes also having to use the compat key):

• GnuPG 2.2.x < 2.2.8:

  
    $ gpg --version
    gpg (GnuPG) 2.2.4
    libgcrypt 1.8.1
    Copyright (C) 2017 Free Software Foundation, Inc.
  
    $ wget -q https://repos.influxdata.com/influxdata-archive_compat-exp2029.key
    $ gpg --homedir /tmp --no-default-keyring --keyring /dev/null --trust-model always --with-fingerprint --import-options show-only --import ./influxdata-archive_compat-exp2029.key
    pub   rsa4096 2025-07-10 [SC] [expires: 2029-01-17]
          AC10 D744 9F34 3ADC EFDD  C2B6 DA61 C26A 0585 BD3B
    uid                      InfluxData Package Signing Key 
  
    gpg: Total number processed: 1
          

• GnuPG 1.4.x:

  
    $ gpg --version
    gpg (GnuPG) 1.4.23
    Copyright (C) 2015 Free Software Foundation, Inc.
  
    $ wget -q https://repos.influxdata.com/influxdata-archive_compat-exp2029.key
    $ TMPGNUPGHOME=$(mktemp -d) ; gpg --home "$TMPGNUPGHOME" --no-default-keyring --keyring /dev/null --with-fingerprint ./influxdata-archive_compat-exp2029.key && rm -f "$TMPGNUPGHOME"/*.gpg && rmdir "$TMPGNUPGHOME"
    gpg: keyring `/tmp/tmp.3LKzqpOohr/secring.gpg' created
    pub  4096R/0585BD3B 2025-07-10 InfluxData Package Signing Key 
          Key fingerprint = AC10 D744 9F34 3ADC EFDD  C2B6 DA61 C26A 0585 BD3B
          

DEB Repository

For DEB-based platforms (e.g. Ubuntu, Debian):

  $ wget -q https://repos.influxdata.com/influxdata-archive.key
  $ gpg --show-keys --with-fingerprint --with-colons ./influxdata-archive.key 2>&1 | grep -q '^fpr:\+24C975CBA61A024EE1B631787C3D57159FC2F927:$' && cat influxdata-archive.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/influxdata-archive.gpg > /dev/null
  $ echo 'deb [signed-by=/etc/apt/trusted.gpg.d/influxdata-archive.gpg] https://repos.influxdata.com/debian stable main' | sudo tee /etc/apt/sources.list.d/influxdata.list
    

RPM Repository

For RPM-based platforms (e.g. RHEL, CentOS):

  $ cat <<EOF | sudo tee /etc/yum.repos.d/influxdata.repo
  [influxdata]
  name = InfluxData Repository - Stable
  baseurl = https://repos.influxdata.com/stable/\$basearch/main
  enabled = 1
  gpgcheck = 1
  gpgkey = https://repos.influxdata.com/influxdata-archive.key
  EOF