devsetup1-2  Exercise 1: Reading debian.sources
================================================

STEPS
-----
    cat /etc/apt/sources.list.d/debian.sources
    apt policy

Your file will differ in the mirror you chose, but the shape is:

    Types: deb
    URIs: https://deb.debian.org/debian
    Suites: trixie trixie-updates
    Components: main non-free-firmware
    Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg

    Types: deb
    URIs: https://security.debian.org/debian-security
    Suites: trixie-security
    Components: main non-free-firmware
    Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg

WHAT EACH FIELD DOES
--------------------
Types        deb = binary packages (what you install). deb-src would add
             source packages; not needed unless you build packages yourself.
URIs         Where to download from. The first stanza is a mirror of the
             main archive; the second is Debian's security archive.
Suites       trixie          the release as it was published (and its point
                             releases)
             trixie-updates  non-security fixes that should not wait for the
                             next point release
             trixie-security security fixes (in the second stanza, from the
                             security archive)
Components   main               free software that is part of Debian proper
             non-free-firmware  firmware blobs for hardware such as network
                                cards
             (contrib and non-free are not listed, so they are not enabled.)
Signed-By    The keyring apt uses to verify packages came from Debian.

READING apt policy
------------------
The output lists each archive apt knows about, with a priority number
(usually 500) and the origin, suite and component. Look for lines such as:

    500 https://deb.debian.org/debian trixie/main amd64 Packages
    500 https://deb.debian.org/debian trixie-updates/main amd64 Packages
    500 https://security.debian.org/debian-security trixie-security/main amd64 Packages

The first is the release, the second is the updates suite, and the third is
the security suite. If a line for a component or suite you expected is
missing, check that it is in the Suites/Components fields above and run
sudo apt update again.

WHY THIS WORKS AS AN ANSWER
---------------------------
Every package you install on this machine arrives through one of these
stanzas, so being able to read them is the difference between knowing where
software comes from and guessing. Matching apt policy back to the file also
shows you that the file and apt's own view agree.