search

cypress-io / cypress-docker-images

Docker images with Cypress dependencies and browsers
https://on.cypress.io/continuous-integration
MIT License
1.02k stars 380 forks source link

Node 20.13.0 gpg: Can't check signature: No public key #1044

Closed jahusa02 closed 5 months ago

jahusa02 commented 5 months ago

In the factory Image with Node 20.13.0:

+ curl -fsSLO --compressed https://nodejs.org/dist/v20.13.0/node-v20.13.0-linux-x64.tar.xz
+ curl -fsSLO --compressed https://nodejs.org/dist/v20.13.0/SHASUMS256.txt.asc
+ gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc
gpg: Signature made Tue May  7 15:44:10 2024 UTC
gpg:                using RSA key CC68F5A3106FF448322E48ED27F5E38D5B0A215F
gpg: Can't check signature: No public key

20.12.x works fine. What can I do?

MikeMcC399 commented 5 months ago

@jahusa02

It looks like there is a new release key

CC68F5A3106FF448322E48ED27F5E38D5B0A215F

added through https://github.com/nodejs/node/commit/c2def7df96d1e09c90a039002cb3986104e28cea

This is missing in https://github.com/cypress-io/cypress-docker-images/blob/2ec8ae0d3c0d4a8229950418817909bf1d0c852a/factory/installScripts/node/default.sh#L22-L32

Refer also to Node.js README > Release keys currently showing:

gpg --keyserver hkps://keys.openpgp.org --recv-keys 4ED778F539E3634C779C87C6D7062848A1AB005C
gpg --keyserver hkps://keys.openpgp.org --recv-keys 141F07595B7B3FFE74309A937405533BE57C7D57
gpg --keyserver hkps://keys.openpgp.org --recv-keys 74F12602B6F1C4E913FAA37AD3A89613643B6201
gpg --keyserver hkps://keys.openpgp.org --recv-keys DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7
gpg --keyserver hkps://keys.openpgp.org --recv-keys CC68F5A3106FF448322E48ED27F5E38D5B0A215F
gpg --keyserver hkps://keys.openpgp.org --recv-keys 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600
gpg --keyserver hkps://keys.openpgp.org --recv-keys C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8
gpg --keyserver hkps://keys.openpgp.org --recv-keys 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4
gpg --keyserver hkps://keys.openpgp.org --recv-keys C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C
gpg --keyserver hkps://keys.openpgp.org --recv-keys 108F52B48DB57BB0CC439B2997B01419BD92F80A
gpg --keyserver hkps://keys.openpgp.org --recv-keys A363A499291CBBC940DD62E41F10027AF002F8B0
MikeMcC399 commented 5 months ago

This is also referred to in the release notes for Node.js v20.13.0 > Other notable changes

image

jahusa02 commented 5 months ago

Thanks @MikeMcC399 for the references, I've opened a PR 👍