Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

commit additional apt keys #747

Merged
merged 1 commit into from
Nov 14, 2024
Merged

commit additional apt keys #747

merged 1 commit into from
Nov 14, 2024

Conversation

rrotter
Copy link
Member

@rrotter rrotter commented Nov 13, 2024

To avoid log spam and breakage caused by downloading these files from web servers we don't control, add every key that has either updated needlessly (in some cases on EVERY puppet run!) or not been updated when it should have been.

Both issues are suspected to be the result of incorrect HTTP headers on the servers we download these keys from.

@rrotter rrotter requested a review from daaang November 13, 2024 20:50
To avoid log spam and breakage caused by downloading these files from
web servers we don't control, add every key that has either updated
needlessly (in some cases on EVERY puppet run!) or not been updated when
it should have been. Both issues are suspected to be the result of
incorrect HTTP headers on the servers we download these keys from.
Copy link
Collaborator

@daaang daaang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I guess my only question is whether changes to nebula will be picked up. We know that different https servers outside our control behave differently—or in other words, it is conceivable that changes here will be ignored in cases where the file is already present on a target machine.

But it's fine to wait until it matters to find out for certain, and it doesn't matter today.

adoptium.asc https://packages.adoptium.net/artifactory/api/gpg/key/public
docker.asc https://download.docker.com/linux/debian/gpg
k8s.io.asc https://pkgs.k8s.io/core:/stable:/v1.31/deb/Release.key
puppetlabs.asc https://apt.puppetlabs.com/pubkey.gpg
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice documentation of where these are sourced—we definitely won't regret having this.

@rrotter rrotter merged commit 44ac9be into production Nov 14, 2024
1 check passed
@rrotter rrotter deleted the apt_keychain branch November 14, 2024 14:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants