Securely install repo with gpg instead of apt-key add

apt-repo-install-secure.sh

#!/bin/bash

### Usage ###
# bash ./apt-repo-install-secure.sh "${NAME}" "${GPGKEY}" "${REPO}"

# Set your vars here:
NAME="$1"  # name of package (e.g. "opensearch")
GPGKEY="$2"  # url to repo gpg key
REPO="$3"  # url to repo plus args (e.g. "stable main")

# Install prereqs:
sudo apt install -y gnupg

# Create home for apt gpg keyring:
[ ! -d /etc/apt/keyrings ] && sudo mkdir /etc/apt/keyrings || echo -e "apt keyring directory already exists, skipping...\n"

# Install repo pgp key:
curl -o- ${GPGKEY} | gpg --dearmor | sudo tee /etc/apt/keyrings/${NAME}.gpg > /dev/null

# Add repo to apt sources:
echo "deb [signed-by=/etc/apt/keyrings/${NAME}.gpg] ${REPO}" | sudo tee -a /etc/apt/sources.list.d/${NAME}.list > /dev/null