ROS GPG Key Expiration Incident

ruffsl · June 1, 2021, 7:03pm

Affected images should be rebuilt soon after this gets mered upstream by the librarians:

github.com/docker-library/official-images

[ros] swap key and list file to trigger rebuild

docker-library:master ← ros-infrastructure:swap_key_install

opened 09:26PM - 31 May 21 UTC

mikaelarguedas

+12 -12

The ROS [apt repo key expired](https://status.ros.org/incidents/mhqz8yyhrtsg), a… new key has been pushed, for apt to work in the docker images, they need to be rebuilt without cache. To do so we modified our images to swap the creation of the source.list file and the retrieval of the key from the keyserver. Another more futureprool approach would be to [ADD the key using a fixed URL.](https://github.com/osrf/docker_images/issues/535#issuecomment-850893664) If the key changes the cache would be burst and the images rebuilt, otherwise the cache would be kept. Is this an approach that would be acceptable in official images ? Relates to https://github.com/osrf/docker_images/issues/535

Topic		Replies	Views
Post-mortem: ROS GPG Key Expiration Incident General	0	1517	June 4, 2021
Ubuntu installation doc needs to be updated for use with new GPG keys?	3	2199	June 14, 2021
New GPG keys deployed for packages.ros.org General	11	29689	June 14, 2021
Key rotation for ROS 2 apt repositories General ros2 , ardent , bouncy , crystal	2	7882	June 7, 2019
Key for downloading ros2 source showing expired General	8	5747	May 29, 2021

ROS GPG Key Expiration Incident

Related Topics