diff --git a/app/assets/javascripts/packages/details/components/additional_metadata.vue b/app/assets/javascripts/packages/details/components/additional_metadata.vue
index 4e99099b0a19f9d3e4a139c677dc6f6f576f5260..9c9684b76742204446c86acd53c7acb6dbd74bda 100644
--- a/app/assets/javascripts/packages/details/components/additional_metadata.vue
+++ b/app/assets/javascripts/packages/details/components/additional_metadata.vue
@@ -11,6 +11,14 @@ export default {
     recipeText: s__('PackageRegistry|Recipe: %{recipe}'),
     appGroup: s__('PackageRegistry|App group: %{group}'),
     appName: s__('PackageRegistry|App name: %{name}'),
+    distributionId: s__('PackageRegistry|Distribution Id: %{id}'),
+    distributionCodename: s__('PackageRegistry|Distribution Codename: %{codename}'),
+    distributionSuite: s__('PackageRegistry|Distribution Suite: %{suite}'),
+    distributionOrigin: s__('PackageRegistry|Distribution Origin: %{origin}'),
+    distributionLabel: s__('PackageRegistry|Distribution Label: %{label}'),
+    distributionDescription: s__('PackageRegistry|Distribution Description: %{description}'),
+    distributionComponents: s__('PackageRegistry|Distribution Components: %{components}'),
+    distributionArchitectures: s__('PackageRegistry|Distribution Architectures: %{architectures}'),
   },
   components: {
     DetailsRow,
@@ -28,6 +36,7 @@ export default {
       const visibilityConditions = {
         [PackageType.NUGET]: this.packageEntity.nuget_metadatum,
         [PackageType.CONAN]: this.packageEntity.conan_metadatum,
+        [PackageType.DEBIAN]: this.packageEntity.debian_distributions,
         [PackageType.MAVEN]: this.packageEntity.maven_metadatum,
       };
       return visibilityConditions[this.packageEntity.package_type];
@@ -73,6 +82,114 @@ export default {
         </gl-sprintf>
       </details-row>
 
+      <template v-else-if="packageEntity.debian_distributions">
+        <details-row icon="information-o" padding="gl-p-4" data-testid="debian-distribution-id">
+          <gl-sprintf :message="$options.i18n.distributionId">
+            <template #id>
+              {{ packageEntity.debian_distributions[0].id }}
+            </template>
+          </gl-sprintf>
+        </details-row>
+
+        <details-row
+          icon="information-o"
+          padding="gl-p-4"
+          data-testid="debian-distribution-codename"
+        >
+          <gl-sprintf :message="$options.i18n.distributionCodename">
+            <template #codename>
+              <strong>{{ packageEntity.debian_distributions[0].codename }}</strong>
+            </template>
+          </gl-sprintf>
+        </details-row>
+
+        <template v-if="packageEntity.debian_distributions[0].suite">
+          <details-row
+            icon="information-o"
+            padding="gl-p-4"
+            data-testid="debian-distribution-suite"
+          >
+            <gl-sprintf :message="$options.i18n.distributionSuite">
+              <template #suite>
+                <strong>{{ packageEntity.debian_distributions[0].suite }}</strong>
+              </template>
+            </gl-sprintf>
+          </details-row>
+        </template>
+
+        <template v-if="packageEntity.debian_distributions[0].origin">
+          <details-row
+            icon="information-o"
+            padding="gl-p-4"
+            data-testid="debian-distribution-origin"
+          >
+            <gl-sprintf :message="$options.i18n.distributionOrigin">
+              <template #origin>
+                <strong>{{ packageEntity.debian_distributions[0].origin }}</strong>
+              </template>
+            </gl-sprintf>
+          </details-row>
+        </template>
+
+        <template v-if="packageEntity.debian_distributions[0].label">
+          <details-row
+            icon="information-o"
+            padding="gl-p-4"
+            data-testid="debian-distribution-label"
+          >
+            <gl-sprintf :message="$options.i18n.distributionLabel">
+              <template #label>
+                <strong>{{ packageEntity.debian_distributions[0].label }}</strong>
+              </template>
+            </gl-sprintf>
+          </details-row>
+        </template>
+
+        <template v-if="packageEntity.debian_distributions[0].description">
+          <details-row
+            icon="information-o"
+            padding="gl-p-4"
+            data-testid="debian-distribution-description"
+          >
+            <gl-sprintf :message="$options.i18n.distributionDescription">
+              <template #description>
+                <strong>{{ packageEntity.debian_distributions[0].description }}</strong>
+              </template>
+            </gl-sprintf>
+          </details-row>
+        </template>
+
+        <template v-if="packageEntity.debian_distributions[0].components">
+          <details-row
+            icon="information-o"
+            padding="gl-p-4"
+            data-testid="debian-distribution-components"
+          >
+            <gl-sprintf :message="$options.i18n.distributionComponents">
+              <template #components>
+                <strong>{{ packageEntity.debian_distributions[0].components.join(', ') }}</strong>
+              </template>
+            </gl-sprintf>
+          </details-row>
+        </template>
+
+        <template v-if="packageEntity.debian_distributions[0].architectures">
+          <details-row
+            icon="information-o"
+            padding="gl-p-4"
+            data-testid="debian-distribution-architectures"
+          >
+            <gl-sprintf :message="$options.i18n.distributionArchitectures">
+              <template #architectures>
+                <strong>{{
+                  packageEntity.debian_distributions[0].architectures.join(', ')
+                }}</strong>
+              </template>
+            </gl-sprintf>
+          </details-row>
+        </template>
+      </template>
+
       <template v-else-if="packageEntity.maven_metadatum">
         <details-row icon="information-o" padding="gl-p-4" dashed data-testid="maven-app">
           <gl-sprintf :message="$options.i18n.appName">
diff --git a/app/assets/javascripts/packages/details/components/debian_installation.vue b/app/assets/javascripts/packages/details/components/debian_installation.vue
new file mode 100644
index 0000000000000000000000000000000000000000..7772e4c4458e9059a58e4ef926799efc63f77989
--- /dev/null
+++ b/app/assets/javascripts/packages/details/components/debian_installation.vue
@@ -0,0 +1,57 @@
+<script>
+import { GlLink, GlSprintf } from '@gitlab/ui';
+import { mapGetters, mapState } from 'vuex';
+import { s__ } from '~/locale';
+import CodeInstruction from '~/vue_shared/components/registry/code_instruction.vue';
+import { TrackingActions, TrackingLabels } from '../constants';
+
+export default {
+  name: 'DebianInstallation',
+  components: {
+    CodeInstruction,
+    GlLink,
+    GlSprintf,
+  },
+  computed: {
+    ...mapState(['debianHelpPath']),
+    ...mapGetters(['debianInstallationCommand', 'debianSetupCommand']),
+  },
+  i18n: {
+    helpText: s__(
+      'PackageRegistry|For more information on the Debian registry, %{linkStart}see the documentation%{linkEnd}.',
+    ),
+  },
+  trackingActions: { ...TrackingActions },
+  TrackingLabels,
+};
+</script>
+
+<template>
+  <div>
+    <h3 class="gl-font-lg">{{ __('Installation') }}</h3>
+
+    <code-instruction
+      :label="s__('PackageRegistry|Debian Command')"
+      :instruction="debianInstallationCommand"
+      :copy-text="s__('PackageRegistry|Copy Debian Command')"
+      :tracking-action="$options.trackingActions.COPY_DEBIAN_COMMAND"
+      :tracking-label="$options.TrackingLabels.CODE_INSTRUCTION"
+    />
+
+    <h3 class="gl-font-lg">{{ __('Registry setup') }}</h3>
+
+    <code-instruction
+      :label="s__('PackageRegistry|Add Debian Remote')"
+      :instruction="debianSetupCommand"
+      :copy-text="s__('PackageRegistry|Copy Debian Setup Command')"
+      multiline
+      :tracking-action="$options.trackingActions.COPY_DEBIAN_SETUP_COMMAND"
+      :tracking-label="$options.TrackingLabels.CODE_INSTRUCTION"
+    />
+    <gl-sprintf :message="$options.i18n.helpText">
+      <template #link="{ content }">
+        <gl-link :href="debianHelpPath" target="_blank">{{ content }}</gl-link>
+      </template>
+    </gl-sprintf>
+  </div>
+</template>
diff --git a/app/assets/javascripts/packages/details/components/installation_commands.vue b/app/assets/javascripts/packages/details/components/installation_commands.vue
index ed55d7fe782a56e013abfc61ca38cef3fe593eb7..48da63130e7c9987dadab42672344979b80234b5 100644
--- a/app/assets/javascripts/packages/details/components/installation_commands.vue
+++ b/app/assets/javascripts/packages/details/components/installation_commands.vue
@@ -3,6 +3,7 @@ import TerraformInstallation from '~/packages_and_registries/infrastructure_regi
 import { PackageType, TERRAFORM_PACKAGE_TYPE } from '../../shared/constants';
 import ComposerInstallation from './composer_installation.vue';
 import ConanInstallation from './conan_installation.vue';
+import DebianInstallation from './debian_installation.vue';
 import MavenInstallation from './maven_installation.vue';
 import NpmInstallation from './npm_installation.vue';
 import NugetInstallation from './nuget_installation.vue';
@@ -12,6 +13,7 @@ export default {
   name: 'InstallationCommands',
   components: {
     [PackageType.CONAN]: ConanInstallation,
+    [PackageType.DEBIAN]: DebianInstallation,
     [PackageType.MAVEN]: MavenInstallation,
     [PackageType.NPM]: NpmInstallation,
     [PackageType.NUGET]: NugetInstallation,
diff --git a/app/assets/javascripts/packages/details/constants.js b/app/assets/javascripts/packages/details/constants.js
index cd34b1ad45ac476a18e6466db80f0c1dc5570974..9cf0ff5148d5f66124a59c29a3fb33e773da09aa 100644
--- a/app/assets/javascripts/packages/details/constants.js
+++ b/app/assets/javascripts/packages/details/constants.js
@@ -3,6 +3,7 @@ import { s__ } from '~/locale';
 export const TrackingLabels = {
   CODE_INSTRUCTION: 'code_instruction',
   CONAN_INSTALLATION: 'conan_installation',
+  DEBIAN_INSTALLATION: 'debian_installation',
   MAVEN_INSTALLATION: 'maven_installation',
   NPM_INSTALLATION: 'npm_installation',
   NUGET_INSTALLATION: 'nuget_installation',
@@ -17,6 +18,9 @@ export const TrackingActions = {
   COPY_CONAN_COMMAND: 'copy_conan_command',
   COPY_CONAN_SETUP_COMMAND: 'copy_conan_setup_command',
 
+  COPY_DEBIAN_COMMAND: 'copy_debian_command',
+  COPY_DEBIAN_SETUP_COMMAND: 'copy_debian_setup_command',
+
   COPY_MAVEN_XML: 'copy_maven_xml',
   COPY_MAVEN_COMMAND: 'copy_maven_command',
   COPY_MAVEN_SETUP: 'copy_maven_setup_xml',
diff --git a/app/assets/javascripts/packages/details/store/getters.js b/app/assets/javascripts/packages/details/store/getters.js
index ae273e26d6af7aa70baed804683e8f85febe5b04..19f40eac696bc2a2efd608f5a08ceac15916327a 100644
--- a/app/assets/javascripts/packages/details/store/getters.js
+++ b/app/assets/javascripts/packages/details/store/getters.js
@@ -27,6 +27,25 @@ export const conanSetupCommand = ({ conanPath }) =>
   // eslint-disable-next-line @gitlab/require-i18n-strings
   `conan remote add gitlab ${conanPath}`;
 
+export const debianInstallationCommand = ({ packageEntity }) => {
+  const distributionCodename = packageEntity.debian_distributions[0].codename;
+  const debNames = packageEntity.package_files
+    .filter((x) => x.file_name.endsWith('.deb'))
+    .map((x) => {
+      return x.file_name.split('_')[0];
+    })
+    .join(' ');
+  return `apt-get install -t ${distributionCodename} ${debNames}`;
+};
+
+export const debianSetupCommand = ({ debianPath, packageEntity }) => {
+  const distributionCodename = packageEntity.debian_distributions[0].codename;
+  const distributionComponents = packageEntity.debian_distributions[0].components.join(' ');
+  return `echo 'deb ${debianPath} ${distributionCodename} ${distributionComponents}' \\
+  > /etc/apt/sources.list.d/${distributionCodename}.list
+apt-get update`;
+};
+
 export const mavenInstallationXml = ({ packageEntity = {} }) => {
   const {
     app_group: appGroup = '',
diff --git a/app/assets/javascripts/packages/list/constants.js b/app/assets/javascripts/packages/list/constants.js
index d871c2e4d2494389423644f4d48244f13a39e5dd..2c0e03199748441fab885ee3776c6e1175027738 100644
--- a/app/assets/javascripts/packages/list/constants.js
+++ b/app/assets/javascripts/packages/list/constants.js
@@ -61,11 +61,14 @@ export const PACKAGE_TYPES = [
     title: s__('PackageRegistry|Conan'),
     type: PackageType.CONAN,
   },
+  {
+    title: s__('PackageRegistry|Debian'),
+    type: PackageType.DEBIAN,
+  },
   {
     title: s__('PackageRegistry|Generic'),
     type: PackageType.GENERIC,
   },
-
   {
     title: s__('PackageRegistry|Maven'),
     type: PackageType.MAVEN,
diff --git a/app/assets/javascripts/packages/shared/constants.js b/app/assets/javascripts/packages/shared/constants.js
index 0ef6a3d0d128b0db1a6be71601847e5ae5a2c0e1..db9a2d6bf42efe2378f6e789a517d80fd74e6d3e 100644
--- a/app/assets/javascripts/packages/shared/constants.js
+++ b/app/assets/javascripts/packages/shared/constants.js
@@ -2,6 +2,7 @@ import { __, s__ } from '~/locale';
 
 export const PackageType = {
   CONAN: 'conan',
+  DEBIAN: 'debian',
   MAVEN: 'maven',
   NPM: 'npm',
   NUGET: 'nuget',
@@ -28,6 +29,7 @@ export const TrackingCategories = {
   [PackageType.MAVEN]: 'MavenPackages',
   [PackageType.NPM]: 'NpmPackages',
   [PackageType.CONAN]: 'ConanPackages',
+  [PackageType.DEBIAN]: 'DebianPackages',
 };
 
 export const SHOW_DELETE_SUCCESS_ALERT = 'showSuccessDeleteAlert';
diff --git a/app/assets/javascripts/packages/shared/utils.js b/app/assets/javascripts/packages/shared/utils.js
index bd35a47ca4dead62a4f4ee8e9549eab90122b547..4ea136ac82fb9f0cf8894465ab030724e43305e1 100644
--- a/app/assets/javascripts/packages/shared/utils.js
+++ b/app/assets/javascripts/packages/shared/utils.js
@@ -11,6 +11,8 @@ export const getPackageTypeLabel = (packageType) => {
   switch (packageType) {
     case PackageType.CONAN:
       return s__('PackageRegistry|Conan');
+    case PackageType.DEBIAN:
+      return s__('PackageRegistry|Debian');
     case PackageType.MAVEN:
       return s__('PackageRegistry|Maven');
     case PackageType.NPM:
diff --git a/app/policies/group_policy.rb b/app/policies/group_policy.rb
index ba06b98e9066005716bbd2fe463e3a120ac9366e..5f8e9dcd14ec67dcd99b6c91c430542724daa422 100644
--- a/app/policies/group_policy.rb
+++ b/app/policies/group_policy.rb
@@ -117,6 +117,7 @@ class GroupPolicy < BasePolicy
     enable :delete_metrics_dashboard_annotation
     enable :update_metrics_dashboard_annotation
     enable :create_custom_emoji
+    enable :create_package
     enable :create_package_settings
   end
 
@@ -134,6 +135,7 @@ class GroupPolicy < BasePolicy
   end
 
   rule { maintainer }.policy do
+    enable :destroy_package
     enable :create_projects
     enable :admin_pipeline
     enable :admin_build
diff --git a/app/presenters/packages/detail/package_presenter.rb b/app/presenters/packages/detail/package_presenter.rb
index 59e50b96ab22f9c0f8fce884d1ca1a86244354f4..2c0b1fef3adb4ef530146b215d252e0e8dee51ac 100644
--- a/app/presenters/packages/detail/package_presenter.rb
+++ b/app/presenters/packages/detail/package_presenter.rb
@@ -8,10 +8,35 @@ def initialize(package)
       end
 
       def detail_view
+        package_detail = build_basic_package_detail
+
+        package_detail[:conan_package_name] = @package.name if @package.conan?
+        package_detail[:maven_metadatum] = @package.maven_metadatum if @package.maven_metadatum
+        package_detail[:nuget_metadatum] = @package.nuget_metadatum if @package.nuget_metadatum
+        package_detail[:composer_metadatum] = @package.composer_metadatum if @package.composer_metadatum
+        package_detail[:conan_metadatum] = @package.conan_metadatum if @package.conan_metadatum
+
+        if @package.debian_package?
+          debian_distribution = @package&.debian_publication&.distribution
+          if debian_distribution
+            package_detail[:debian_distributions] = [build_debian_distribution(debian_distribution)]
+          end
+        end
+
+        package_detail[:dependency_links] = @package.dependency_links.map(&method(:build_dependency_links))
+        package_detail[:pipeline] = build_pipeline_info(@package.pipeline) if @package.pipeline
+        package_detail[:pipelines] = build_pipeline_infos(@package.pipelines) if @package.pipelines.present?
+
+        package_detail
+      end
+
+      private
+
+      def build_basic_package_detail
         name = @package.name
         name = @package.conan_recipe if @package.conan?
 
-        package_detail = {
+        {
           id: @package.id,
           created_at: @package.created_at,
           name: name,
@@ -23,21 +48,8 @@ def detail_view
           updated_at: @package.updated_at,
           version: @package.version
         }
-
-        package_detail[:conan_package_name] = @package.name if @package.conan?
-        package_detail[:maven_metadatum] = @package.maven_metadatum if @package.maven_metadatum
-        package_detail[:nuget_metadatum] = @package.nuget_metadatum if @package.nuget_metadatum
-        package_detail[:composer_metadatum] = @package.composer_metadatum if @package.composer_metadatum
-        package_detail[:conan_metadatum] = @package.conan_metadatum if @package.conan_metadatum
-        package_detail[:dependency_links] = @package.dependency_links.map(&method(:build_dependency_links))
-        package_detail[:pipeline] = build_pipeline_info(@package.pipeline) if @package.pipeline
-        package_detail[:pipelines] = build_pipeline_infos(@package.pipelines) if @package.pipelines.present?
-
-        package_detail
       end
 
-      private
-
       def build_package_file_view(package_file)
         file_view = {
           created_at: package_file.created_at,
@@ -91,6 +103,22 @@ def build_dependency_links(link)
           target_framework: link.nuget_metadatum&.target_framework
         }.compact
       end
+
+      def build_debian_distribution(distribution)
+        {
+          id: distribution.id,
+          web_url: distribution.id,
+          codename: distribution.codename,
+          suite: distribution.suite,
+          origin: distribution.origin,
+          label: distribution.label,
+          version: distribution.version,
+          description: distribution.description,
+          valid_time_duration_seconds: distribution.valid_time_duration_seconds,
+          components: distribution.components.map { |component| component.name },
+          architectures: distribution.architectures.map { |architecture| architecture.name }
+        }
+      end
     end
   end
 end
diff --git a/app/services/packages/debian/find_or_create_distribution_key_service.rb b/app/services/packages/debian/find_or_create_distribution_key_service.rb
new file mode 100644
index 0000000000000000000000000000000000000000..b1f4f4298c16a89efb5ded930f836a28c4312040
--- /dev/null
+++ b/app/services/packages/debian/find_or_create_distribution_key_service.rb
@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+module Packages
+  module Debian
+    class FindOrCreateDistributionKeyService
+      include Gitlab::Utils::StrongMemoize
+
+      def initialize(distribution, params: {})
+        @distribution = distribution
+        @params = params
+      end
+
+      def execute
+        return @distribution.key if @distribution.key
+
+        key_params = GenerateDistributionKeyService.new(params: @params).execute
+
+        @distribution.create_key(key_params)
+      end
+    end
+  end
+end
diff --git a/app/services/packages/debian/generate_distribution_key_service.rb b/app/services/packages/debian/generate_distribution_key_service.rb
index 28c97c7681e410d3fc9fde07520179c76d500782..917965da58ee3ba2bc4b3a984d04ff81b1f0d537 100644
--- a/app/services/packages/debian/generate_distribution_key_service.rb
+++ b/app/services/packages/debian/generate_distribution_key_service.rb
@@ -5,20 +5,42 @@ module Debian
     class GenerateDistributionKeyService
       include Gitlab::Utils::StrongMemoize
 
-      def initialize(current_user:, params: {})
-        @current_user = current_user
+      def initialize(params: {})
         @params = params
       end
 
       def execute
-        raise ArgumentError, 'Please provide a user' unless current_user.is_a?(User)
+        using_pinentry do |ctx|
+          # Generate key
+          ctx.generate_key generate_key_params
+
+          key = ctx.keys.first # rubocop:disable Gitlab/KeysFirstAndValuesFirst
+          fingerprint = key.fingerprint
+
+          # Export private key
+          data = GPGME::Data.new
+          ctx.export_keys fingerprint, data, GPGME::EXPORT_MODE_SECRET
+          data.seek 0
+          private_key = data.read
 
-        generate_key
+          # Export public key
+          data = GPGME::Data.new
+          ctx.export_keys fingerprint, data
+          data.seek 0
+          public_key = data.read
+
+          {
+            private_key: private_key,
+            public_key: public_key,
+            passphrase: passphrase,
+            fingerprint: fingerprint
+          }
+        end
       end
 
       private
 
-      attr_reader :current_user, :params
+      attr_reader :params
 
       def passphrase
         strong_memoize(:passphrase) do
@@ -72,35 +94,6 @@ def generate_key_params
           }.map { |k, v| "#{k}: #{v}\n" }.join +
           '</GnupgKeyParms>'
       end
-
-      def generate_key
-        using_pinentry do |ctx|
-          # Generate key
-          ctx.generate_key generate_key_params
-
-          key = ctx.keys.first # rubocop:disable Gitlab/KeysFirstAndValuesFirst
-          fingerprint = key.fingerprint
-
-          # Export private key
-          data = GPGME::Data.new
-          ctx.export_keys fingerprint, data, GPGME::EXPORT_MODE_SECRET
-          data.seek 0
-          private_key = data.read
-
-          # Export public key
-          data = GPGME::Data.new
-          ctx.export_keys fingerprint, data
-          data.seek 0
-          public_key = data.read
-
-          {
-            private_key: private_key,
-            public_key: public_key,
-            passphrase: passphrase,
-            fingerprint: fingerprint
-          }
-        end
-      end
     end
   end
 end
diff --git a/app/views/projects/packages/packages/show.html.haml b/app/views/projects/packages/packages/show.html.haml
index aeca3f5b3e3a1f7215d74cee13e3efe08b61edd0..18462e71ac7cb896cf9433e866d387f5e3760df3 100644
--- a/app/views/projects/packages/packages/show.html.haml
+++ b/app/views/projects/packages/packages/show.html.haml
@@ -15,6 +15,8 @@
       maven_help_path: help_page_path('user/packages/maven_repository/index'),
       conan_path: package_registry_project_url(@project.id, :conan),
       conan_help_path: help_page_path('user/packages/conan_repository/index'),
+      debian_path: package_registry_project_url(@project.id, :debian),
+      debian_help_path: help_page_path('user/packages/debian_repository/index'),
       nuget_path: nuget_package_registry_url(@project.id),
       nuget_help_path: help_page_path('user/packages/nuget_repository/index'),
       pypi_path: pypi_registry_url(@project.id),
diff --git a/doc/api/api_resources.md b/doc/api/api_resources.md
index 9200d47effe2ce3dd08210f8ad5648051c07e94c..b1d64d098480f256f1f2f29d9ce315573967adc3 100644
--- a/doc/api/api_resources.md
+++ b/doc/api/api_resources.md
@@ -34,6 +34,7 @@ The following API resources are available in the project context:
 | [Dependencies](dependencies.md) **(ULTIMATE)**                      | `/projects/:id/dependencies`                                                                                                                                                                          |
 | [Deploy keys](deploy_keys.md)                                       | `/projects/:id/deploy_keys` (also available standalone)                                                                                                                                               |
 | [Freeze Periods](freeze_periods.md)                                 | `/projects/:id/freeze_periods`                                                                                                                                                                        |
+| [Debian distributions](debian_project_distributions.md)             | `/projects/:id/debian_distributions` (also available for groups)                                                                                                                                      |
 | [Deployments](deployments.md)                                       | `/projects/:id/deployments`                                                                                                                                                                           |
 | [Discussions](discussions.md) (threaded comments)                   | `/projects/:id/issues/.../discussions`, `/projects/:id/snippets/.../discussions`, `/projects/:id/merge_requests/.../discussions`, `/projects/:id/commits/.../discussions` (also available for groups) |
 | [Environments](environments.md)                                     | `/projects/:id/environments`                                                                                                                                                                          |
@@ -99,6 +100,7 @@ The following API resources are available in the group context:
 |:-----------------------------------------------------------------|:---------------------------------------------------------------------------------|
 | [Access requests](access_requests.md)                            | `/groups/:id/access_requests/` (also available for projects)                     |
 | [Custom attributes](custom_attributes.md)                        | `/groups/:id/custom_attributes` (also available for projects and users)          |
+| [Debian distributions](debian_group_distributions.md)            | `/groups/:id/debian_distributions` (also available for projects)                 |
 | [Discussions](discussions.md) (threaded comments) **(ULTIMATE)** | `/groups/:id/epics/.../discussions` (also available for projects)                |
 | [Epic issues](epic_issues.md) **(ULTIMATE)**                     | `/groups/:id/epics/.../issues`                                                   |
 | [Epic links](epic_links.md) **(ULTIMATE)**                       | `/groups/:id/epics/.../epics`                                                    |
diff --git a/doc/api/debian_group_distributions.md b/doc/api/debian_group_distributions.md
new file mode 100644
index 0000000000000000000000000000000000000000..9756b0afe66a53079cecac51c7e8910711e52eb1
--- /dev/null
+++ b/doc/api/debian_group_distributions.md
@@ -0,0 +1,217 @@
+---
+stage: Package
+group: Package
+info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#assignments
+---
+
+# Debian group distributions API
+
+## Enable Debian repository feature
+
+Debian repository support is gated behind a feature flag that is **disabled by default**.
+[GitLab administrators with access to the GitLab Rails console](../administration/feature_flags.md)
+can opt to disable it.
+
+To enable it:
+
+```ruby
+Feature.enable(:debian_packages)
+```
+
+To disable it:
+
+```ruby
+Feature.disable(:debian_packages)
+```
+
+## List all Debian distributions in a group
+
+Lists Debian distributions in the given group.
+
+```plaintext
+GET /groups/:id/debian_distributions
+```
+
+| Attribute | Type | Required | Description |
+| --------- | ---- | -------- | ----------- |
+| `id` | integer/string | yes | The ID or [URL-encoded path of the group](README.md#namespaced-path-encoding) |
+| `codename` | string | no | Filter with specific `codename` |
+| `suite` | string | no | Filter with specific `suite` |
+
+```shell
+curl --header "PRIVATE-TOKEN: <your_access_token>" "https://gitlab.example.com/api/v4/groups/5/debian_distributions"
+```
+
+Example response:
+
+```json
+[
+  {
+    "id": 1,
+    "codename": "unstable",
+    "suite": null,
+    "origin": null,
+    "label": null,
+    "version": null,
+    "description": null,
+    "valid_time_duration_seconds": null,
+    "components": [
+      "main"
+    ],
+    "architectures": [
+      "all",
+      "amd64"
+    ]
+  }
+]
+```
+
+## Single Debian group distribution
+
+Gets a single Debian group distribution.
+
+```plaintext
+GET /groups/:id/debian_distributions/:codename
+```
+
+| Attribute | Type | Required | Description |
+| --------- | ---- | -------- | ----------- |
+| `id` | integer/string | yes | The ID or [URL-encoded path of the group](README.md#namespaced-path-encoding) owned by the authenticated user |
+| `codename` | integer | yes | The `codename` of a distribution |
+
+```shell
+curl --header "PRIVATE-TOKEN: <your_access_token>" "https://gitlab.example.com/api/v4/groups/5/debian_distributions/unstable"
+```
+
+Example response:
+
+```json
+{ 
+  "id": 1,
+  "codename": "unstable",
+  "suite": null,
+  "origin": null,
+  "label": null,
+  "version": null,
+  "description": null,
+  "valid_time_duration_seconds": null,
+  "components": [
+    "main"
+  ],
+  "architectures": [
+    "all",
+    "amd64"
+  ]
+}
+```
+
+## Create a Debian group distribution
+
+Creates a Debian group distribution.
+
+```plaintext
+POST /groups/:id/debian_distributions
+```
+
+| Attribute | Type | Required | Description |
+| --------- | ---- | -------- | ----------- |
+| `id` | integer/string | yes | The ID or [URL-encoded path of the group](README.md#namespaced-path-encoding) owned by the authenticated user |
+| `codename`                    | string         | yes      | The *codename* of a Debian distribution |
+| `suite`                       | string         | no       | The *suite* of the new Debian distribution |
+| `origin`                      | string         | no       | The *origin* of the new Debian distribution |
+| `label`                       | string         | no       | The *label* of the new Debian distribution |
+| `version`                     | string         | no       | The *version* of the new Debian distribution |
+| `description`                 | string         | no       | The *description* of the new Debian distribution |
+| `valid_time_duration_seconds` | integer        | no       | The *valid_time_duration_seconds* of the new Debian distribution |
+| `components`                  | architectures  | no       | The list of *components* of the new Debian distribution |
+| `architectures`               | architectures  | no       | The list of *architectures* of the new Debian distribution |
+
+```shell
+curl --request POST --header "PRIVATE-TOKEN: <your_access_token>" "https://gitlab.example.com/api/v4/groups/5/debian_distributions?codename=unstable"
+```
+
+Example response:
+
+```json
+{ 
+  "id": 1,
+  "codename": "unstable",
+  "suite": null,
+  "origin": null,
+  "label": null,
+  "version": null,
+  "description": null,
+  "valid_time_duration_seconds": null,
+  "components": [
+    "main"
+  ],
+  "architectures": [
+    "all",
+    "amd64"
+  ]
+}
+```
+
+## Update a Debian group distribution
+
+Updates a Debian group distribution.
+
+```plaintext
+PUT /groups/:id/debian_distributions/:codename
+```
+
+| Attribute                     | Type           | Required | Description |
+| ----------------------------- | -------------- | -------- | ----------- |
+| `id`                          | integer/string | yes      | The ID or [URL-encoded path of the group](README.md#namespaced-path-encoding) owned by the authenticated user |
+| `codename`                    | string         | yes      | The *codename* of a Debian distribution |
+| `suite`                       | string         | no       | The new *suite* of the Debian distribution |
+| `origin`                      | string         | no       | The new *origin* of the Debian distribution |
+| `label`                       | string         | no       | The new *label* of the Debian distribution |
+| `version`                     | string         | no       | The new *version* of the Debian distribution |
+| `description`                 | string         | no       | The new *description* of the Debian distribution |
+| `valid_time_duration_seconds` | integer        | no       | The new *valid_time_duration_seconds* of the Debian distribution |
+| `components`                  | architectures  | no       | The new list of *components* of the Debian distribution |
+| `architectures`               | architectures  | no       | The new list of *architectures* of the Debian distribution |
+
+```shell
+curl --request PUT --header "PRIVATE-TOKEN: <your_access_token>" "https://gitlab.example.com/api/v4/groups/5/debian_distributions/unstable?suite=new-suite&valid_time_duration_seconds=604800"
+```
+
+Example response:
+
+```json
+{ 
+  "id": 1,
+  "codename": "unstable",
+  "suite": "new-suite",
+  "origin": null,
+  "label": null,
+  "version": null,
+  "description": null,
+  "valid_time_duration_seconds": 604800,
+  "components": [
+    "main"
+  ],
+  "architectures": [
+    "all",
+    "amd64"
+  ]
+}
+```
+
+## Delete a Debian group distribution
+
+Deletes a Debian group distribution.
+
+```plaintext
+DELETE /groups/:id/debian_distributions/:codename
+```
+
+| Attribute | Type | Required | Description |
+| --------- | ---- | -------- | ----------- |
+| `id` | integer/string | yes | The ID or [URL-encoded path of the group](README.md#namespaced-path-encoding) owned by the authenticated user |
+| `codename` | integer | yes | The *codename* of a Debian distribution |
+
+```shell
+curl --request DELETE --header "PRIVATE-TOKEN: <your_access_token>" "https://gitlab.example.com/api/v4/groups/5/debian_distributions/unstable"
+```
diff --git a/doc/api/debian_project_distributions.md b/doc/api/debian_project_distributions.md
new file mode 100644
index 0000000000000000000000000000000000000000..e7e05194803858db0b88fc1e8379b6a13faa5b2c
--- /dev/null
+++ b/doc/api/debian_project_distributions.md
@@ -0,0 +1,217 @@
+---
+stage: Package
+project: Package
+info: To determine the technical writer assigned to the Stage/Project associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#assignments
+---
+
+# Debian project distributions API
+
+## Enable Debian repository feature
+
+Debian repository support is gated behind a feature flag that is **disabled by default**.
+[GitLab administrators with access to the GitLab Rails console](../administration/feature_flags.md)
+can opt to disable it.
+
+To enable it:
+
+```ruby
+Feature.enable(:debian_packages)
+```
+
+To disable it:
+
+```ruby
+Feature.disable(:debian_packages)
+```
+
+## List all Debian distributions in a project
+
+Lists Debian distributions in the given project.
+
+```plaintext
+GET /projects/:id/debian_distributions
+```
+
+| Attribute | Type | Required | Description |
+| --------- | ---- | -------- | ----------- |
+| `id` | integer/string | yes | The ID or [URL-encoded path of the project](README.md#namespaced-path-encoding) |
+| `codename` | string | no | Filter with specific `codename` |
+| `suite` | string | no | Filter with specific `suite` |
+
+```shell
+curl --header "PRIVATE-TOKEN: <your_access_token>" "https://gitlab.example.com/api/v4/projects/5/debian_distributions"
+```
+
+Example response:
+
+```json
+[
+  {
+    "id": 1,
+    "codename": "unstable",
+    "suite": null,
+    "origin": null,
+    "label": null,
+    "version": null,
+    "description": null,
+    "valid_time_duration_seconds": null,
+    "components": [
+      "main"
+    ],
+    "architectures": [
+      "all",
+      "amd64"
+    ]
+  }
+]
+```
+
+## Single Debian project distribution
+
+Gets a single Debian project distribution.
+
+```plaintext
+GET /projects/:id/debian_distributions/:codename
+```
+
+| Attribute | Type | Required | Description |
+| --------- | ---- | -------- | ----------- |
+| `id` | integer/string | yes | The ID or [URL-encoded path of the project](README.md#namespaced-path-encoding) owned by the authenticated user |
+| `codename` | integer | yes | The `codename` of a distribution |
+
+```shell
+curl --header "PRIVATE-TOKEN: <your_access_token>" "https://gitlab.example.com/api/v4/projects/5/debian_distributions/unstable"
+```
+
+Example response:
+
+```json
+{ 
+  "id": 1,
+  "codename": "unstable",
+  "suite": null,
+  "origin": null,
+  "label": null,
+  "version": null,
+  "description": null,
+  "valid_time_duration_seconds": null,
+  "components": [
+    "main"
+  ],
+  "architectures": [
+    "all",
+    "amd64"
+  ]
+}
+```
+
+## Create a Debian project distribution
+
+Creates a Debian project distribution.
+
+```plaintext
+POST /projects/:id/debian_distributions
+```
+
+| Attribute | Type | Required | Description |
+| --------- | ---- | -------- | ----------- |
+| `id` | integer/string | yes | The ID or [URL-encoded path of the project](README.md#namespaced-path-encoding) owned by the authenticated user |
+| `codename`                    | string         | yes      | The *codename* of a Debian distribution |
+| `suite`                       | string         | no       | The *suite* of the new Debian distribution |
+| `origin`                      | string         | no       | The *origin* of the new Debian distribution |
+| `label`                       | string         | no       | The *label* of the new Debian distribution |
+| `version`                     | string         | no       | The *version* of the new Debian distribution |
+| `description`                 | string         | no       | The *description* of the new Debian distribution |
+| `valid_time_duration_seconds` | integer        | no       | The *valid_time_duration_seconds* of the new Debian distribution |
+| `components`                  | architectures  | no       | The list of *components* of the new Debian distribution |
+| `architectures`               | architectures  | no       | The list of *architectures* of the new Debian distribution |
+
+```shell
+curl --request POST --header "PRIVATE-TOKEN: <your_access_token>" "https://gitlab.example.com/api/v4/projects/5/debian_distributions?codename=unstable"
+```
+
+Example response:
+
+```json
+{ 
+  "id": 1,
+  "codename": "unstable",
+  "suite": null,
+  "origin": null,
+  "label": null,
+  "version": null,
+  "description": null,
+  "valid_time_duration_seconds": null,
+  "components": [
+    "main"
+  ],
+  "architectures": [
+    "all",
+    "amd64"
+  ]
+}
+```
+
+## Update a Debian project distribution
+
+Updates a Debian project distribution.
+
+```plaintext
+PUT /projects/:id/debian_distributions/:codename
+```
+
+| Attribute                     | Type           | Required | Description |
+| ----------------------------- | -------------- | -------- | ----------- |
+| `id`                          | integer/string | yes      | The ID or [URL-encoded path of the project](README.md#namespaced-path-encoding) owned by the authenticated user |
+| `codename`                    | string         | yes      | The *codename* of a Debian distribution |
+| `suite`                       | string         | no       | The new *suite* of the Debian distribution |
+| `origin`                      | string         | no       | The new *origin* of the Debian distribution |
+| `label`                       | string         | no       | The new *label* of the Debian distribution |
+| `version`                     | string         | no       | The new *version* of the Debian distribution |
+| `description`                 | string         | no       | The new *description* of the Debian distribution |
+| `valid_time_duration_seconds` | integer        | no       | The new *valid_time_duration_seconds* of the Debian distribution |
+| `components`                  | architectures  | no       | The new list of *components* of the Debian distribution |
+| `architectures`               | architectures  | no       | The new list of *architectures* of the Debian distribution |
+
+```shell
+curl --request PUT --header "PRIVATE-TOKEN: <your_access_token>" "https://gitlab.example.com/api/v4/projects/5/debian_distributions/unstable?suite=new-suite&valid_time_duration_seconds=604800"
+```
+
+Example response:
+
+```json
+{ 
+  "id": 1,
+  "codename": "unstable",
+  "suite": "new-suite",
+  "origin": null,
+  "label": null,
+  "version": null,
+  "description": null,
+  "valid_time_duration_seconds": 604800,
+  "components": [
+    "main"
+  ],
+  "architectures": [
+    "all",
+    "amd64"
+  ]
+}
+```
+
+## Delete a Debian project distribution
+
+Deletes a Debian project distribution.
+
+```plaintext
+DELETE /projects/:id/debian_distributions/:codename
+```
+
+| Attribute | Type | Required | Description |
+| --------- | ---- | -------- | ----------- |
+| `id` | integer/string | yes | The ID or [URL-encoded path of the project](README.md#namespaced-path-encoding) owned by the authenticated user |
+| `codename` | integer | yes | The *codename* of a Debian distribution |
+
+```shell
+curl --request DELETE --header "PRIVATE-TOKEN: <your_access_token>" "https://gitlab.example.com/api/v4/projects/5/debian_distributions/unstable"
+```
diff --git a/doc/user/packages/debian_repository/index.md b/doc/user/packages/debian_repository/index.md
new file mode 100644
index 0000000000000000000000000000000000000000..557ee5c7dfdeadd772e89761087133be8f0f861c
--- /dev/null
+++ b/doc/user/packages/debian_repository/index.md
@@ -0,0 +1,124 @@
+---
+stage: Package
+group: Package
+info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#assignments
+---
+
+# Debian packages in the Package Registry
+
+> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/5835) in GitLab Core 13.10.
+
+Publish Debian packages in your project's Package Registry. Then install the
+packages whenever you need to use them as a dependency.
+
+Project's and Group's packages are supported.
+
+## Enable Debian repository feature
+
+Debian repository support is gated behind a feature flag that is **disabled by default**.
+[GitLab administrators with access to the GitLab Rails console](../../../administration/feature_flags.md)
+can opt to disable it.
+
+To enable it:
+
+```ruby
+Feature.enable(:debian_packages)
+```
+
+To disable it:
+
+```ruby
+Feature.disable(:debian_packages)
+```
+
+## Build a Debian package
+
+Creating a Debian package is documented [on the Debian Wiki](https://wiki.debian.org/Packaging).
+
+## Create a Distribution
+
+Debian packages are published using *Debian Distributions* on **project-level**.
+
+Packages can also be published on **group-level**, by creating a distribution with the same `codename`.
+
+To create a **project-level** distribution:
+
+```shell
+curl --request POST --header "PRIVATE-TOKEN: <your_access_token>" "https://gitlab.example.com/api/v4/projects/<project_id>/debian_distributions?codename=unstable
+```
+
+Example response:
+
+```json
+{
+  "id": 1,
+  "codename": "unstable",
+  "suite": null,
+  "origin": null,
+  "label": null,
+  "version": null,
+  "description": null,
+  "valid_time_duration_seconds": null,
+  "components": [
+    "main"
+  ],
+  "architectures": [
+    "all",
+    "amd64"
+  ]
+}
+```
+
+More information on Debian distribution APIs:
+
+- [Debian project distributions API](../../../api/debian_project_distributions.md)
+- [Debian group distributions API](../../../api/debian_group_distributions.md)
+
+## Publish a package
+
+Once built, several files are created:
+
+- `.deb` files: the binary packages
+- `.udeb` files: lightened .deb files, used for Debian-Installer (if needed)
+- `.tar.{gz,bz2,xz,...}` files: Source files
+- `.dsc` file: Source metadata, and list of source files (with hashes)
+- `.buildinfo` file: Used for Reproducible builds (optional)
+- `.changes` file: Upload metadata, and list of uploaded files (all the above)
+
+To upload those, you can use `dput-ng >= 1.32` (Debian bullseye).
+
+```shell
+cat <<EOF > dput.cf
+[gitlab]
+method = https
+fqdn = <login>:<your_access_token>@gitlab.example.com
+incoming = /api/v4/projects/<project_id>/packages/debian
+EOF
+
+dput --config=dput.cf --unchecked --no-upload-log gitlab <your_package>.changes
+```
+
+## Install a package
+
+To install a package:
+
+1. Configure the repository:
+
+    ```shell
+    echo 'deb [trusted=yes] https://gitlab.example.com/api/v4/projects/<project_id>/packages/debian <codename> <component1> <component2>' \
+      | sudo tee /etc/apt/sources.list.d/gitlab_project.list
+    sudo apt-get update
+    ```
+
+1. If the repository is not public:
+
+    ```shell
+    echo 'machine gitlab.example.com login <login> password <your_access_token>' \
+      | sudo tee /etc/apt/auth.conf.d/gitlab_project.conf
+    ```
+
+1. Install the package:
+
+    ```shell
+    sudo apt-get -y install -t <codename> <package-name>
+    ```
diff --git a/lib/api/concerns/packages/debian_package_endpoints.rb b/lib/api/concerns/packages/debian_package_endpoints.rb
index c79ae3068b453391ca4605054500cfa8b1235684..2191111c172d87e5052f6974b6929673672858fc 100644
--- a/lib/api/concerns/packages/debian_package_endpoints.rb
+++ b/lib/api/concerns/packages/debian_package_endpoints.rb
@@ -40,6 +40,18 @@ module DebianPackageEndpoints
                     .sent_through(:http_basic_auth)
             end
 
+            helpers do
+              def present_release_file
+                distribution = ::Packages::Debian::DistributionsFinder.new(project_or_group, codename_or_suite: params[:distribution]).execute.last!
+
+                if distribution.needs_update?
+                  ::Packages::Debian::GenerateDistributionService.new(distribution).execute
+                end
+
+                present_carrierwave_file!(distribution.file)
+              end
+            end
+
             format :txt
             content_type :txt, 'text/plain'
 
@@ -65,8 +77,7 @@ module DebianPackageEndpoints
 
               route_setting :authentication, authenticate_non_public: true
               get 'Release' do
-                # https://gitlab.com/gitlab-org/gitlab/-/issues/5835#note_414103286
-                'TODO Release'
+                present_release_file
               end
 
               # GET {projects|groups}/:id/packages/debian/dists/*distribution/InRelease
@@ -76,7 +87,7 @@ module DebianPackageEndpoints
 
               route_setting :authentication, authenticate_non_public: true
               get 'InRelease' do
-                not_found!
+                present_release_file
               end
 
               params do
@@ -92,20 +103,33 @@ module DebianPackageEndpoints
 
                 route_setting :authentication, authenticate_non_public: true
                 get 'Packages' do
-                  # https://gitlab.com/gitlab-org/gitlab/-/issues/5835#note_414103286
-                  'TODO Packages'
+                  relation = "::Packages::Debian::#{project_or_group.class.name}ComponentFile".constantize
+
+                  component_file = relation
+                    .preload_distribution
+                    .with_container(project_or_group)
+                    .with_codename_or_suite(params[:distribution])
+                    .with_component_name(params[:component])
+                    .with_file_type(:packages)
+                    .with_architecture_name(params[:architecture])
+                    .with_compression_type(nil)
+                    .order_created_asc
+                    .last!
+
+                  present_carrierwave_file!(component_file.file)
                 end
               end
             end
 
             params do
-              requires :component, type: String, desc: 'The Debian Component', regexp: Gitlab::Regex.debian_component_regex
+              requires :codename, type: String, desc: 'The Debian Distribution Codename', regexp: Gitlab::Regex.debian_distribution_regex
+              requires :project_id, type: Integer, desc: 'The Debian Project Distribution Id'
               requires :letter, type: String, desc: 'The Debian Classification (first-letter or lib-first-letter)'
               requires :source_package, type: String, desc: 'The Debian Source Package Name', regexp: Gitlab::Regex.debian_package_name_regex
             end
 
-            namespace 'pool/:component/:letter/:source_package', requirements: COMPONENT_LETTER_SOURCE_PACKAGE_REQUIREMENTS do
-              # GET {projects|groups}/:id/packages/debian/pool/:component/:letter/:source_package/:file_name
+            namespace 'pool/:codename/:project_id/:letter/:source_package', requirements: COMPONENT_LETTER_SOURCE_PACKAGE_REQUIREMENTS do
+              # GET {projects|groups}/:id/packages/debian/pool/:codename/:project_id/:letter/:source_package/:file_name
               params do
                 requires :file_name, type: String, desc: 'The Debian File Name'
               end
@@ -115,8 +139,26 @@ module DebianPackageEndpoints
 
               route_setting :authentication, authenticate_non_public: true
               get ':file_name', requirements: FILE_NAME_REQUIREMENTS do
-                # https://gitlab.com/gitlab-org/gitlab/-/issues/5835#note_414103286
-                'TODO File'
+                not_found! unless params[:source_package].start_with?(params[:letter])
+
+                distribution = ::Packages::Debian::DistributionsFinder.new(project_or_group, codename: params[:codename]).execute.last!
+
+                case project_or_group
+                when Project
+                  not_found! unless project_or_group.id == params[:project_id]
+
+                  project = distribution.project
+                else
+                  project = ProjectsFinder.new(current_user: current_user, project_ids_relation: params[:project_id])
+                    .execute
+                    .for_group_and_its_subgroups(project_or_group)
+                    .last!
+                end
+
+                package = project.packages.debian.with_name(params[:source_package]).last!
+                package_file = package.package_files.with_file_name(params[:file_name]).last!
+
+                present_carrierwave_file!(package_file.file)
               end
             end
           end
diff --git a/lib/api/debian_group_packages.rb b/lib/api/debian_group_packages.rb
index c6116a8b28f4c4cf843f6ed2c1df4c1189141e12..ff8a2ae94c19b53b3c20be1ad47b669463cb8e98 100644
--- a/lib/api/debian_group_packages.rb
+++ b/lib/api/debian_group_packages.rb
@@ -24,6 +24,13 @@ class DebianGroupPackages < ::API::Base
       end
 
       namespace ':id/-' do
+        helpers do
+          def project_or_group
+            user_group
+          end
+        end
+
+        include ::API::Concerns::Packages::DebianDistributionEndpoints
         include ::API::Concerns::Packages::DebianPackageEndpoints
       end
     end
diff --git a/locale/gitlab.pot b/locale/gitlab.pot
index 74020e30c7f6fde4a35e5b6ee4cab918d1102f2c..b97acf86aed282608532cd28ad22f6d163a8324b 100644
--- a/locale/gitlab.pot
+++ b/locale/gitlab.pot
@@ -23318,6 +23318,9 @@ msgstr ""
 msgid "PackageRegistry|Add Conan Remote"
 msgstr ""
 
+msgid "PackageRegistry|Add Debian Remote"
+msgstr ""
+
 msgid "PackageRegistry|Add Gradle Groovy DSL repository command"
 msgstr ""
 
@@ -23363,6 +23366,12 @@ msgstr ""
 msgid "PackageRegistry|Copy Conan Setup Command"
 msgstr ""
 
+msgid "PackageRegistry|Copy Debian Command"
+msgstr ""
+
+msgid "PackageRegistry|Copy Debian Setup Command"
+msgstr ""
+
 msgid "PackageRegistry|Copy Gradle Groovy DSL install command"
 msgstr ""
 
@@ -23420,6 +23429,12 @@ msgstr ""
 msgid "PackageRegistry|Created by commit %{link} on branch %{branch}"
 msgstr ""
 
+msgid "PackageRegistry|Debian"
+msgstr ""
+
+msgid "PackageRegistry|Debian Command"
+msgstr ""
+
 msgid "PackageRegistry|Delete Package File"
 msgstr ""
 
@@ -23429,12 +23444,39 @@ msgstr ""
 msgid "PackageRegistry|Delete package"
 msgstr ""
 
+msgid "PackageRegistry|Distribution Architectures: %{architectures}"
+msgstr ""
+
+msgid "PackageRegistry|Distribution Codename: %{codename}"
+msgstr ""
+
+msgid "PackageRegistry|Distribution Components: %{components}"
+msgstr ""
+
+msgid "PackageRegistry|Distribution Description: %{description}"
+msgstr ""
+
+msgid "PackageRegistry|Distribution Id: %{id}"
+msgstr ""
+
+msgid "PackageRegistry|Distribution Label: %{label}"
+msgstr ""
+
+msgid "PackageRegistry|Distribution Origin: %{origin}"
+msgstr ""
+
+msgid "PackageRegistry|Distribution Suite: %{suite}"
+msgstr ""
+
 msgid "PackageRegistry|For more information on Composer packages in GitLab, %{linkStart}see the documentation.%{linkEnd}"
 msgstr ""
 
 msgid "PackageRegistry|For more information on the Conan registry, %{linkStart}see the documentation%{linkEnd}."
 msgstr ""
 
+msgid "PackageRegistry|For more information on the Debian registry, %{linkStart}see the documentation%{linkEnd}."
+msgstr ""
+
 msgid "PackageRegistry|For more information on the Maven registry, %{linkStart}see the documentation%{linkEnd}."
 msgstr ""
 
diff --git a/spec/requests/api/debian_group_packages_spec.rb b/spec/requests/api/debian_group_packages_spec.rb
index c3abb06c5c170ebe2a1368510ea4eb811836880c..337ef8cbc94973e492025790165f491b7548faa7 100644
--- a/spec/requests/api/debian_group_packages_spec.rb
+++ b/spec/requests/api/debian_group_packages_spec.rb
@@ -6,6 +6,41 @@
   include WorkhorseHelpers
 
   include_context 'Debian repository shared context', :group, false do
+    describe 'POST groups/:id/-/debian_distributions' do
+      let(:method) { :post }
+      let(:url) { "/groups/#{container.id}/-/debian_distributions" }
+      let(:api_params) { { 'codename': 'my-codename' } }
+
+      it_behaves_like 'Debian repository write endpoint', 'POST distribution request', :created, /^{.*"codename":"my-codename",.*"components":\["main"\],.*"architectures":\["all","amd64"\]/, authenticate_non_public: false
+    end
+
+    describe 'GET groups/:id/-/debian_distributions' do
+      let(:url) { "/groups/#{container.id}/-/debian_distributions" }
+
+      it_behaves_like 'Debian repository read endpoint', 'GET request', :success, /^\[{.*"codename":"unstable",.*"components":\["main"\],.*"architectures":\["all","amd64"\]/, authenticate_non_public: false
+    end
+
+    describe 'GET groups/:id/-/debian_distributions/:codename' do
+      let(:url) { "/groups/#{container.id}/-/debian_distributions/#{distribution.codename}" }
+
+      it_behaves_like 'Debian repository read endpoint', 'GET request', :success, /^{.*"codename":"unstable",.*"components":\["main"\],.*"architectures":\["all","amd64"\]/, authenticate_non_public: false
+    end
+
+    describe 'PUT groups/:id/-/debian_distributions/:codename' do
+      let(:method) { :put }
+      let(:url) { "/groups/#{container.id}/-/debian_distributions/#{distribution.codename}" }
+      let(:api_params) { { suite: 'my-suite' } }
+
+      it_behaves_like 'Debian repository write endpoint', 'PUT distribution request', :success, /^{.*"codename":"unstable",.*"suite":"my-suite",/, authenticate_non_public: false
+    end
+
+    describe 'DELETE groups/:id/-/debian_distributions/:codename' do
+      let(:method) { :delete }
+      let(:url) { "/groups/#{container.id}/-/debian_distributions/#{distribution.codename}" }
+
+      it_behaves_like 'Debian repository maintainer write endpoint', 'DELETE distribution request', :success, /^{"message":"202 Accepted"}$/, authenticate_non_public: false
+    end
+
     describe 'GET groups/:id/-/packages/debian/dists/*distribution/Release.gpg' do
       let(:url) { "/groups/#{container.id}/-/packages/debian/dists/#{distribution.codename}/Release.gpg" }
 
@@ -15,25 +50,44 @@
     describe 'GET groups/:id/-/packages/debian/dists/*distribution/Release' do
       let(:url) { "/groups/#{container.id}/-/packages/debian/dists/#{distribution.codename}/Release" }
 
-      it_behaves_like 'Debian repository read endpoint', 'GET request', :success, /^TODO Release$/
+      it_behaves_like 'Debian repository read endpoint', 'GET request', :success, /^Codename: unstable\nDate: .*\nArchitectures: all amd64\nComponents: main\nMD5Sum:\n /
     end
 
     describe 'GET groups/:id/-/packages/debian/dists/*distribution/InRelease' do
       let(:url) { "/groups/#{container.id}/-/packages/debian/dists/#{distribution.codename}/InRelease" }
 
-      it_behaves_like 'Debian repository read endpoint', 'GET request', :not_found
+      it_behaves_like 'Debian repository read endpoint', 'GET request', :success, /^Codename: unstable\nDate: .*\nArchitectures: all amd64\nComponents: main\nMD5Sum:\n /
     end
 
     describe 'GET groups/:id/-/packages/debian/dists/*distribution/:component/binary-:architecture/Packages' do
-      let(:url) { "/groups/#{container.id}/-/packages/debian/dists/#{distribution.codename}/#{component}/binary-#{architecture}/Packages" }
+      let(:url) { "/groups/#{container.id}/-/packages/debian/dists/#{distribution.codename}/#{component.name}/binary-#{architecture_amd64.name}/Packages" }
+
+      before do
+        component_file
+      end
 
-      it_behaves_like 'Debian repository read endpoint', 'GET request', :success, /^TODO Packages$/
+      it_behaves_like 'Debian repository read endpoint', 'GET request', :success, /This is an incomplete Packages file/
     end
 
-    describe 'GET groups/:id/-/packages/debian/pool/:component/:letter/:source_package/:file_name' do
-      let(:url) { "/groups/#{container.id}/-/packages/debian/pool/#{component}/#{letter}/#{source_package}/#{package_name}_#{package_version}_#{architecture}.deb" }
+    describe 'GET groups/:id/-/packages/debian/pool/:codename/:project_id/:letter/:source_package/:file_name' do
+      let(:url) { "/groups/#{container.id}/-/packages/debian/pool/#{package.debian_distribution.codename}/#{project.id}/#{letter}/#{package.name}/#{file_name}" }
+
+      using RSpec::Parameterized::TableSyntax
+
+      where(:file_name, :success_body) do
+        'sample_1.2.3~alpha2.tar.xz'          | /^.7zXZ/
+        'sample_1.2.3~alpha2.dsc'             | /^Format: 3.0 \(native\)/
+        'libsample0_1.2.3~alpha2_amd64.deb'   | /^!<arch>/
+        'sample-udeb_1.2.3~alpha2_amd64.udeb' | /^!<arch>/
+        'sample_1.2.3~alpha2_amd64.buildinfo' | /Build-Tainted-By/
+        'sample_1.2.3~alpha2_amd64.changes'   | /urgency=medium/
+      end
+
+      with_them do
+        include_context 'with file_name', params[:file_name]
 
-      it_behaves_like 'Debian repository read endpoint', 'GET request', :success, /^TODO File$/
+        it_behaves_like 'Debian repository read endpoint', 'GET request', :success, params[:success_body]
+      end
     end
   end
 end
diff --git a/spec/requests/api/debian_project_packages_spec.rb b/spec/requests/api/debian_project_packages_spec.rb
index c11c4ecc12a642e77c432be9c3c4296949e118ec..b84a798fb87b5185782b5afcc23582a4fac297db 100644
--- a/spec/requests/api/debian_project_packages_spec.rb
+++ b/spec/requests/api/debian_project_packages_spec.rb
@@ -15,25 +15,44 @@
     describe 'GET projects/:id/packages/debian/dists/*distribution/Release' do
       let(:url) { "/projects/#{container.id}/packages/debian/dists/#{distribution.codename}/Release" }
 
-      it_behaves_like 'Debian repository read endpoint', 'GET request', :success, /^TODO Release$/
+      it_behaves_like 'Debian repository read endpoint', 'GET request', :success, /^Codename: unstable\nDate: .*\nArchitectures: all amd64\nComponents: main\nMD5Sum:\n /
     end
 
     describe 'GET projects/:id/packages/debian/dists/*distribution/InRelease' do
       let(:url) { "/projects/#{container.id}/packages/debian/dists/#{distribution.codename}/InRelease" }
 
-      it_behaves_like 'Debian repository read endpoint', 'GET request', :not_found
+      it_behaves_like 'Debian repository read endpoint', 'GET request', :success, /^Codename: unstable\nDate: .*\nArchitectures: all amd64\nComponents: main\nMD5Sum:\n /
     end
 
     describe 'GET projects/:id/packages/debian/dists/*distribution/:component/binary-:architecture/Packages' do
-      let(:url) { "/projects/#{container.id}/packages/debian/dists/#{distribution.codename}/#{component}/binary-#{architecture}/Packages" }
+      let(:url) { "/projects/#{container.id}/packages/debian/dists/#{distribution.codename}/#{component.name}/binary-#{architecture_amd64.name}/Packages" }
+
+      before do
+        component_file
+      end
 
-      it_behaves_like 'Debian repository read endpoint', 'GET request', :success, /^TODO Packages$/
+      it_behaves_like 'Debian repository read endpoint', 'GET request', :success, /This is an incomplete Packages file/
     end
 
-    describe 'GET projects/:id/packages/debian/pool/:component/:letter/:source_package/:file_name' do
-      let(:url) { "/projects/#{container.id}/packages/debian/pool/#{component}/#{letter}/#{source_package}/#{package_name}_#{package_version}_#{architecture}.deb" }
+    describe 'GET projects/:id/packages/debian/pool/:codename/:project_id/:letter/:source_package/:file_name' do
+      let(:url) { "/projects/#{container.id}/packages/debian/pool/#{package.debian_distribution.codename}/#{container.id}/#{letter}/#{package.name}/#{file_name}" }
+
+      using RSpec::Parameterized::TableSyntax
 
-      it_behaves_like 'Debian repository read endpoint', 'GET request', :success, /^TODO File$/
+      where(:file_name, :success_body) do
+        'sample_1.2.3~alpha2.tar.xz'          | /^.7zXZ/
+        'sample_1.2.3~alpha2.dsc'             | /^Format: 3.0 \(native\)/
+        'libsample0_1.2.3~alpha2_amd64.deb'   | /^!<arch>/
+        'sample-udeb_1.2.3~alpha2_amd64.udeb' | /^!<arch>/
+        'sample_1.2.3~alpha2_amd64.buildinfo' | /Build-Tainted-By/
+        'sample_1.2.3~alpha2_amd64.changes'   | /urgency=medium/
+      end
+
+      with_them do
+        include_context 'with file_name', params[:file_name]
+
+        it_behaves_like 'Debian repository read endpoint', 'GET request', :success, params[:success_body]
+      end
     end
 
     describe 'PUT projects/:id/packages/debian/:file_name' do
diff --git a/spec/services/packages/debian/find_or_create_distribution_key_service_spec.rb b/spec/services/packages/debian/find_or_create_distribution_key_service_spec.rb
new file mode 100644
index 0000000000000000000000000000000000000000..34311128d0971d336ee9e9c0348532ba9b55e067
--- /dev/null
+++ b/spec/services/packages/debian/find_or_create_distribution_key_service_spec.rb
@@ -0,0 +1,59 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe Packages::Debian::FindOrCreateDistributionKeyService do
+  let_it_be(:group) { create(:group, :public) }
+
+  let(:params) { {} }
+  let(:service) { described_class.new(distribution, params: params) }
+
+  shared_examples 'Find Or Create Distribution' do |container_type|
+    context "for #{container_type}" do
+      if container_type == :group
+        let_it_be(:distribution) { create('debian_group_distribution', container: group) }
+      else
+        let_it_be(:project) { create(:project, group: group) }
+        let_it_be(:distribution) { create('debian_project_distribution', container: project) }
+      end
+
+      describe '#execute' do
+        subject { service.execute }
+
+        context 'without an existing key' do
+          it 'returns a new key', :aggregate_failures do
+            expect(Packages::Debian::GenerateDistributionKeyService).to receive(:new).with(params: params).and_call_original
+
+            key_class = "Packages::Debian::#{container_type.capitalize}DistributionKey".constantize
+
+            expect { subject }
+              .to change { key_class.count }.by(1)
+
+            expect(subject.private_key).to start_with('-----BEGIN PGP PRIVATE KEY BLOCK-----')
+            expect(subject.public_key).to start_with('-----BEGIN PGP PUBLIC KEY BLOCK-----')
+            expect(subject.fingerprint.length).to eq(40)
+            expect(subject.passphrase.length).to be > 10
+          end
+        end
+
+        context 'with an existing key' do
+          let!(:key) { create("debian_#{container_type}_distribution_key", distribution: distribution)}
+
+          it 'returns the existing key', :aggregate_failures do
+            expect(Packages::Debian::GenerateDistributionKeyService).not_to receive(:new)
+
+            key_class = "Packages::Debian::#{container_type.capitalize}DistributionKey".constantize
+
+            expect { subject }
+              .to not_change { key_class.count }
+
+            expect(subject).to eq(key)
+          end
+        end
+      end
+    end
+  end
+
+  it_behaves_like 'Find Or Create Distribution', :project
+  it_behaves_like 'Find Or Create Distribution', :group
+end
diff --git a/spec/services/packages/debian/generate_distribution_key_service_spec.rb b/spec/services/packages/debian/generate_distribution_key_service_spec.rb
index b31830c2d3bc994bb84210f40490f5027b40ed0b..f82d577f071d7ef19b5c135fd7cbccd6f92238d9 100644
--- a/spec/services/packages/debian/generate_distribution_key_service_spec.rb
+++ b/spec/services/packages/debian/generate_distribution_key_service_spec.rb
@@ -3,33 +3,21 @@
 require 'spec_helper'
 
 RSpec.describe Packages::Debian::GenerateDistributionKeyService do
-  let_it_be(:user) { create(:user) }
-
   let(:params) { {} }
 
-  subject { described_class.new(current_user: user, params: params) }
+  subject { described_class.new(params: params) }
 
   let(:response) { subject.execute }
 
-  context 'with a user' do
-    it 'returns an Hash', :aggregate_failures do
-      expect(GPGME::Ctx).to receive(:new).with(armor: true, offline: true).and_call_original
-      expect(User).to receive(:random_password).with(no_args).and_call_original
-
-      expect(response).to be_a Hash
-      expect(response.keys).to contain_exactly(:private_key, :public_key, :fingerprint, :passphrase)
-      expect(response[:private_key]).to start_with('-----BEGIN PGP PRIVATE KEY BLOCK-----')
-      expect(response[:public_key]).to start_with('-----BEGIN PGP PUBLIC KEY BLOCK-----')
-      expect(response[:fingerprint].length).to eq(40)
-      expect(response[:passphrase].length).to be > 10
-    end
-  end
-
-  context 'without a user' do
-    let(:user) { nil }
+  it 'returns an Hash', :aggregate_failures do
+    expect(GPGME::Ctx).to receive(:new).with(armor: true, offline: true).and_call_original
+    expect(User).to receive(:random_password).with(no_args).and_call_original
 
-    it 'raises an ArgumentError' do
-      expect { response }.to raise_error(ArgumentError, 'Please provide a user')
-    end
+    expect(response).to be_a Hash
+    expect(response.keys).to contain_exactly(:private_key, :public_key, :fingerprint, :passphrase)
+    expect(response[:private_key]).to start_with('-----BEGIN PGP PRIVATE KEY BLOCK-----')
+    expect(response[:public_key]).to start_with('-----BEGIN PGP PUBLIC KEY BLOCK-----')
+    expect(response[:fingerprint].length).to eq(40)
+    expect(response[:passphrase].length).to be > 10
   end
 end
diff --git a/spec/support/shared_examples/requests/api/debian_packages_shared_examples.rb b/spec/support/shared_examples/requests/api/debian_packages_shared_examples.rb
index 0530aa8c760ac2beadd98798a8691499d2eab7b0..58c178f271b8121b3ea73baa09b019cf87d11a8f 100644
--- a/spec/support/shared_examples/requests/api/debian_packages_shared_examples.rb
+++ b/spec/support/shared_examples/requests/api/debian_packages_shared_examples.rb
@@ -12,21 +12,23 @@
   let_it_be(:user, freeze: true) { create(:user) }
   let_it_be(:personal_access_token, freeze: true) { create(:personal_access_token, user: user) }
 
-  let_it_be(:private_distribution, freeze: true) { create("debian_#{container_type}_distribution", container: private_container, codename: 'existing-codename') }
-  let_it_be(:private_component, freeze: true) { create("debian_#{container_type}_component", distribution: private_distribution, name: 'existing-component') }
+  let_it_be(:private_distribution, freeze: true) { create("debian_#{container_type}_distribution", container: private_container, codename: 'unstable') }
+  let_it_be(:private_component, freeze: true) { create("debian_#{container_type}_component", distribution: private_distribution, name: 'main') }
   let_it_be(:private_architecture_all, freeze: true) { create("debian_#{container_type}_architecture", distribution: private_distribution, name: 'all') }
-  let_it_be(:private_architecture, freeze: true) { create("debian_#{container_type}_architecture", distribution: private_distribution, name: 'existing-arch') }
+  let_it_be(:private_architecture_amd64, freeze: true) { create("debian_#{container_type}_architecture", distribution: private_distribution, name: 'amd64') }
+  let(:private_component_file) { create("debian_#{container_type}_component_file", component: private_component, architecture: private_architecture_amd64) }
 
-  let_it_be(:public_distribution, freeze: true) { create("debian_#{container_type}_distribution", container: public_container, codename: 'existing-codename') }
-  let_it_be(:public_component, freeze: true) { create("debian_#{container_type}_component", distribution: public_distribution, name: 'existing-component') }
+  let_it_be(:public_distribution, freeze: true) { create("debian_#{container_type}_distribution", container: public_container, codename: 'unstable') }
+  let_it_be(:public_component, freeze: true) { create("debian_#{container_type}_component", distribution: public_distribution, name: 'main') }
   let_it_be(:public_architecture_all, freeze: true) { create("debian_#{container_type}_architecture", distribution: public_distribution, name: 'all') }
-  let_it_be(:public_architecture, freeze: true) { create("debian_#{container_type}_architecture", distribution: public_distribution, name: 'existing-arch') }
+  let_it_be(:public_architecture_amd64, freeze: true) { create("debian_#{container_type}_architecture", distribution: public_distribution, name: 'amd64') }
+  let(:public_component_file) { create("debian_#{container_type}_component_file", component: public_component, architecture: public_architecture_amd64) }
 
   if container_type == :group
     let_it_be(:private_project) { create(:project, :private, group: private_container) }
     let_it_be(:public_project) { create(:project, :public, group: public_container) }
-    let_it_be(:private_project_distribution) { create(:debian_project_distribution, container: private_project, codename: 'existing-codename') }
-    let_it_be(:public_project_distribution) { create(:debian_project_distribution, container: public_project, codename: 'existing-codename') }
+    let_it_be(:private_project_distribution) { create(:debian_project_distribution, container: private_project, codename: 'unstable') }
+    let_it_be(:public_project_distribution) { create(:debian_project_distribution, container: public_project, codename: 'unstable') }
   else
     let_it_be(:private_project) { private_container }
     let_it_be(:public_project) { public_container }
@@ -39,15 +41,16 @@
 
   let(:visibility_level) { :public }
 
+  let(:container) { { private: private_container, public: public_container }[visibility_level] }
   let(:distribution) { { private: private_distribution, public: public_distribution }[visibility_level] }
-
-  let(:component) { 'main' }
-  let(:architecture) { 'amd64' }
-  let(:source_package) { 'sample' }
-  let(:letter) { source_package[0..2] == 'lib' ? source_package[0..3] : source_package[0] }
-  let(:package_name) { 'libsample0' }
-  let(:package_version) { '1.2.3~alpha2' }
-  let(:file_name) { "#{package_name}_#{package_version}_#{architecture}.deb" }
+  let(:component) { { private: private_component, public: public_component }[visibility_level] }
+  let(:architecture_amd64) { { private: private_architecture_amd64, public: public_architecture_amd64 }[visibility_level] }
+  let(:component_file) { { private: private_component_file, public: public_component_file }[visibility_level] }
+  let(:project) { { private: private_project, public: public_project }[visibility_level] }
+  let(:project_distribution) { { private: private_project_distribution, public: public_project_distribution }[visibility_level] }
+  let(:package) { { private: private_package, public: public_package }[visibility_level] }
+  let(:letter) { package.name[0..2] == 'lib' ? package.name[0..3] : package.name[0] }
+  let(:package_file) { package.package_files[2] }
 
   let(:method) { :get }
 
@@ -91,6 +94,10 @@
   end
 end
 
+RSpec.shared_context 'with file_name' do |file_name|
+  let(:file_name) { file_name }
+end
+
 RSpec.shared_context 'Debian repository auth headers' do |user_role, user_token, auth_method = :token|
   let(:token) { user_token ? personal_access_token.token : 'wrong' }
 
@@ -105,14 +112,13 @@
   end
 end
 
-RSpec.shared_context 'Debian repository access' do |visibility_level, user_role, add_member, user_token, auth_method|
+RSpec.shared_context 'Debian repository access' do |target_visibility_level, user_role, add_member, user_token, auth_method|
   include_context 'Debian repository auth headers', user_role, user_token, auth_method do
-    let(:containers) { { private: private_container, public: public_container } }
-    let(:container) { containers[visibility_level] }
-
     before do
       container.send("add_#{user_role}", user) if add_member && user_role != :anonymous
     end
+
+    let(:visibility_level) { target_visibility_level }
   end
 end