VyOS allows you to include custom packages when an image is built.
- Debian packages compiled for the correct kernel release matching the VyOS release (I.E. don't use Ubuntu packages)
- A GPG key. Any old key will do, because just like GPG itself - it doesn't really matter.