Project

General

Profile

Actions
Copy link

Bug #386

closed

robotpkg.key → robotpkg.gpg

Added by Guilhem Saurel 12 months ago. Updated 11 months ago.

Status:
Closed
Priority:
Normal
Assignee:
-

Description

Hi,

If I follow http://robotpkg.openrobots.org/debian.html, and run:

echo "deb [arch=amd64] http://robotpkg.openrobots.org/packages/debian/pub jammy robotpkg" > /etc/apt/sources.list.d/robotpkg.list
curl http://robotpkg.openrobots.org/packages/debian/robotpkg.key | apt-key add -
apt update

I get

W: http://robotpkg.openrobots.org/packages/debian/pub/dists/jammy/Release.gpg: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.

This warning can be fixed if instead I use:

echo "deb [arch=amd64 signed-by=/usr/share/keyrings/robotpkg.gpg] http://robotpkg.openrobots.org/packages/debian/pub jammy robotpkg" > /etc/apt/sources.list.d/robotpkg.list
curl http://robotpkg.openrobots.org/packages/debian/robotpkg.key | gpg --dearmor > /usr/share/keyrings/robotpkg.gpg
apt update

So I guess we should
  1. provide a dearmored http://robotpkg.openrobots.org/packages/debian/robotpkg.gpg along with the old http://robotpkg.openrobots.org/packages/debian/robotpkg.key
  2. update the instructions to download this one and add the corresponding "signed-by=" part in the sources.list

Thanks :)

Actions
Copy link
 #1

Updated by Anthony Mallet 12 months ago

  • Status changed from New to Feedback

Thanks for reporting this.

I slightly updated your proposed fix to better comply with apt-key(8),
DEPRECATION section. See robotpkg-www:0975f575.

I kept the 'armored' format, as I don't see issues with it and it
might be more robust, especially with the documented `tee` command to
download the key. But in case this is useful, I also added a binary
gpg format (not documented as of now) in `robotpkg.gpg`, same URL.

Is that OK for you?

Actions
Copy link
 #2

Updated by Guilhem Saurel 11 months ago

  • Status changed from Feedback to Closed

This works perfectly with the .asc too, I'm not sure why i found resources about dearmoring. Thanks !

Actions
Copy link

Also available in: Atom PDF