mika / jenkins-debian-glue

Scripts for Debian package/repository handling inside Jenkins
MIT License
131 stars 91 forks source link

Ensure the keyring generated for REPOSITORY_EXTRA_KEYS is not a keybox #229

Closed kepstin closed 4 years ago

kepstin commented 4 years ago

Newer versions of GPG switched to a different binary format called a "keybox database" for its internal keyring representation. apt-key does not support this format.

Use gpg's --export operation to generate an interoperable keyring file. This works on older gpg versions as well, so I didn't bother checking the version or making it conditional.

mika commented 4 years ago

@kepstin nice catch and fix, thanks for providing the PR! :+1: