[Yandex Cloud documentation](../../../index.md) > [Yandex Cloud Registry](../../index.md) > [Concepts](../index.md) > [Artifacts](index.md) > Debian artifact

# Debian artifact

A _Debian artifact_ is a `*.deb` package file containing compiled software, metadata, dependencies, and other resources for [Debian](https://en.wikipedia.org/wiki/Debian) and [Ubuntu](https://en.wikipedia.org/wiki/Ubuntu)-based systems.

## Package format {#package-format}

[DEB](https://en.wikipedia.org/wiki/Deb_(file_format)) is a package format used in Debian-based systems. A DEB package is an archive containing:

* Compiled executables and libraries.
* Package metadata (name, version, description, dependencies).
* Installation and deletion scripts.
* Configuration files.

Debian artifacts are used to distribute software you can install and manage using the [APT](https://en.wikipedia.org/wiki/APT_(software)) (Advanced Package Tool) and [dpkg](https://en.wikipedia.org/wiki/Dpkg) package managers.

## Metadata signing {#metadata-signing}

Cloud Registry supports signing Debian registry metadata with a GPG key. The signature allows clients to verify the authenticity of packages before the installation.

When creating a registry with a metadata signature:

* The secret part of the GPG key is stored in [Yandex Lockbox](https://yandex.cloud/en/lockbox/).
* Cloud Registry automatically signs registry metadata on every update.
* Clients use the public part of the GPG key to verify the signature.

For more information on signature settings, see [Preparing a GPG key](../../operations/debian/installation.md#prepare-gpg-key).

#### Useful links {#see-also}

* [Supported artifact types](index.md#artifacts)
* [Configuring the APT package manager](../../operations/debian/installation.md)
* [Pushing a Debian package to a registry](../../operations/debian/push.md)
* [Pulling a Debian package from a registry](../../operations/debian/pull.md)