The CH-J repository publishes the official amd64 DEB package of CH-J Tools (ch-j-tools). It is intended for Ubuntu 24.04 and compatible desktop systems; compatibility with every Debian release is not guaranteed. The repository metadata is signed with the CH-J OpenPGP signing subkey held on a YubiKey. The private key is never uploaded to the webserver.
Verify the key and enable the repository
The expected primary fingerprint is:
0D92 778A D8EC F85C 80E3 9248 48F2 433A D9CD F453
Download the public key and inspect its fingerprint before installing it. Obtain the expected fingerprint independently from the CH-J README or an already trusted application copy.
curl -fsSLo ch-j-archive-keyring.gpg https://tools.ch-j.cz/apt/ch-j-archive-keyring.gpg
gpg --show-keys --with-fingerprint ch-j-archive-keyring.gpg
sudo install -d -m 0755 /etc/apt/keyrings
sudo install -m 0644 ch-j-archive-keyring.gpg /etc/apt/keyrings/ch-j-archive-keyring.gpg
Create /etc/apt/sources.list.d/ch-j.sources:
Types: deb
URIs: https://tools.ch-j.cz/apt/
Suites: beta
Components: main
Architectures: amd64
Signed-By: /etc/apt/keyrings/ch-j-archive-keyring.gpg
Then install:
sudo apt update
sudo apt install ch-j-tools
If you installed the earlier ch-j-server-manager package from this repository, change Suites to beta and run the same commands. ch-j-tools replaces the old package, and the application moves its data folder on first launch.
Later updates use sudo apt update followed by sudo apt upgrade. The version in the DEB control file increases for each release; prerelease identifiers use ~ so a later stable version sorts correctly. Each release also retains its unique application build ID.
alpha |
beta |
stable |
|---|---|---|
ch-j-server-manager 0.1.1 |
ch-j-tools 0.1.2 |
— |
Guidance and license
APT cannot reliably display an interactive license before installation. On first launch and after an update, the application displays full CS/DE/EN operational guidance, followed by CH-J Proprietary Software License 1.14 and a required checkbox acknowledging the license terms and the data-loss/backup notice. Declining the license or closing its window exits the application. The operational guidance remains informational and non-binding.
Use APT for updating repository installations. Do not start the application's separate installer during an APT transaction. The internal updater continues to support installations outside this repository.
Repository metadata uses InRelease and Release.gpg, SHA-256/SHA-512 indexes, and content-addressed indexes for consistent updates. Signed-By confines trust to this repository. Do not use global apt-key trust. Never disable signature verification. Debian's third-party repository guidance.