search

docker-library / php

Docker Official Image packaging for PHP
https://php.net
MIT License
3.77k stars 2k forks source link

Adding missing gpg key to 8.0 releasers #1426

Closed yosifkit closed 11 months ago

yosifkit commented 11 months ago

Bump to 8.0.30

The PHP development team announces the immediate availability of PHP 8.0.30. This is a security release. - https://www.php.net/index.php#2023-08-04-1

Without this key (https://www.php.net/gpg-keys.php#gpg-8.0), 8.0.30 fails to build:

+ curl -fsSL -o php.tar.xz https://www.php.net/distributions/php-8.0.30.tar.xz
...
+ curl -fsSL -o php.tar.xz.asc https://www.php.net/distributions/php-8.0.30.tar.xz.asc
+ mktemp -d
+ export GNUPGHOME=/tmp/tmp.nGYfKCK4CH
+ gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 1729F83938DA44E27BA0F4D3DBDB397470D12172
gpg: keybox '/tmp/tmp.nGYfKCK4CH/pubring.kbx' created
gpg: /tmp/tmp.nGYfKCK4CH/trustdb.gpg: trustdb created
gpg: key DBDB397470D12172: public key "Sara Golemon <pollita@php.net>" imported
gpg: Total number processed: 1
gpg:               imported: 1
+ gpg --batch --keyserver keyserver.ubuntu.com --recv-keys BFDDD28642824F8118EF77909B67A5C12229118F
gpg: key 9B67A5C12229118F: public key "Gabriel Caruso (Release Manager) <carusogabriel@php.net>" imported
gpg: Total number processed: 1
gpg:               imported: 1
+ gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 2C16C765DBE54A088130F1BC4B9B5F600B55F3B4
gpg: key 4B9B5F600B55F3B4: public key "Gabriel Caruso <carusogabriel@php.net>" imported
gpg: Total number processed: 1
gpg:               imported: 1
+ gpg --batch --verify php.tar.xz.asc php.tar.xz
gpg: Signature made Thu Aug  3 17:18:10 2023 UTC
gpg:                using RSA key 39B641343D8C104B2B146DC3F9C39DC0B9698544
gpg: Can't check signature: No public key