diff --git a/ansible/roles/apt/defaults/main.yml b/ansible/roles/apt/defaults/main.yml
index de6c4142bbaa0c6de28e0b1899391673241f0e4d..b20e2a1707c556c370182c894a34fb346614aab9 100644
--- a/ansible/roles/apt/defaults/main.yml
+++ b/ansible/roles/apt/defaults/main.yml
@@ -20,7 +20,7 @@ apt_proxy_https: "{{ apt_proxy_http }}"
 apt_config: []
 
 # Directory containing GPG keyrings for apt repos.
-apt_keys_path: "/usr/local/share/keyrings"
+apt_keys_path: "/etc/apt/keyrings"
 
 # List of apt keys. Each item is a dict containing the following keys:
 # * url: URL of key
diff --git a/releasenotes/notes/fix-apt-keyrings-location-28ea144738de54a7.yaml b/releasenotes/notes/fix-apt-keyrings-location-28ea144738de54a7.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..bd2ff30ae57419694d15c7a01d6426ce6a31c375
--- /dev/null
+++ b/releasenotes/notes/fix-apt-keyrings-location-28ea144738de54a7.yaml
@@ -0,0 +1,5 @@
+---
+fixes:
+  - |
+    Fixes default Ubuntu Apt keyrings location to the recommended
+    ``/etc/apt/keyrings``.