ROS GPG Key Expiration Incident

[nuclearsandwich]

@Katherine_Scott

In the coming days we will post a full post-mortem of the incident along with the corrective actions we plan to take to prevent this from happening again.

We have now published this:

Post-mortem: ROS GPG Key Expiration Incident

Authors: @Katherine_Scott @nuclearsandwich Reviewed by: @cottsay @tfoote Incident team: @cottsay @gbiggs @Katherine_Scott @nuclearsandwich @tfoote Last week the published GPG public key which is used for the ROS and ROS 2 repositories expired causing repository verification errors when updating or installing packages from the ROS apt and rpm repositories. We created the current signing keypair as part of the total redeployment of the ROS build farm in 2018 as a precautionary measure following…