Jamie Cameron

Aren't some of those directories like `/etc/apt/trusted.gpg.d` and `/etc/apt/sources.list.d` only existing in newer Ubuntu / Debian versions?

Does `/etc/apt/sources.list` not exist at all on Debian 11 though?

Ok, I will update the install docs to reflect this.

Thanks, I'll add that

> I think we should create a script to install Webmin repos for users. Sure, go for it!

Did you add that DNSKEY record on line 10 yourself, or did Virtualmin add them?

Is there a way to validate that the salt is in the expected format, and has the correct hex encoding?

Is a regexp good enough though? Seems like the string can be in hex, but still not valid.

Ok, it looks like what we really need validate is that in the DNSKEY record value, it's in a valid base64 format.

The thing is, those `NSEC3PARAM` and `DNSKEY` records were created by BIND's own tools - Webmin doesn't even allow you to enter those record values.