You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@arrow.apache.org by "kou (via GitHub)" <gi...@apache.org> on 2024/12/29 03:14:08 UTC
[I] [Packaging] APT repository sign doesn't work on Debian trixie [arrow]
kou opened a new issue, #45118:
URL: https://github.com/apache/arrow/issues/45118
### Describe the bug, including details regarding any error messages, version, and platform.
https://github.com/ursacomputing/crossbow/actions/runs/12491251505/job/34857011325#step:17:589
```text
Err:1 file:/host/dev/release/../../dev/tasks/linux-packages/apt/repositories/debian trixie InRelease
The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 1729E5EF3EF74D10
Hit:2 http://deb.debian.org/debian trixie InRelease
Hit:3 http://deb.debian.org/debian trixie-updates InRelease
Hit:4 http://deb.debian.org/debian-security trixie-security InRelease
Get:5 http://deb.debian.org/debian trixie/non-free amd64 Packages [98.7 kB]
Get:6 http://deb.debian.org/debian trixie/contrib amd64 Packages [51.0 kB]
Reading package lists...
Warning: file:/host/dev/release/../../dev/tasks/linux-packages/apt/repositories/debian/dists/trixie/InRelease: The key(s) in the keyring /usr/share/keyrings/apache-arrow-apt-source.gpg are ignored as the file has an unsupported filetype.
Warning: GPG error: file:/host/dev/release/../../dev/tasks/linux-packages/apt/repositories/debian trixie InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 1729E5EF3EF74D10
Error: The repository 'file:/host/dev/release/../../dev/tasks/linux-packages/apt/repositories/debian trixie InRelease' is not signed.
rake aborted!
```
### Component(s)
Packaging
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@arrow.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Packaging] APT repository sign doesn't work on Debian trixie [arrow]
Posted by "kou (via GitHub)" <gi...@apache.org>.
kou commented on issue #45118:
URL: https://github.com/apache/arrow/issues/45118#issuecomment-2565383798
Ah, it's generated here: https://github.com/apache/arrow/blob/f5c340be342a427b8ef10e51e9d10fc6013c5b4c/dev/tasks/linux-packages/github.linux.yml#L101-L108
FYI: This happens with the current released `apache-arrow-apt-source` too: https://github.com/groonga/groonga/actions/runs/12499316173/job/34876380693?pr=2166#step:10:506
9.523 Err:4 https://apache.jfrog.io/artifactory/arrow/debian trixie InRelease
9.523 The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 91D18FCF079F8007
10.02 Get:5 https://packages.groonga.org/debian trixie InRelease [9539 B]
```text
10.45 Warning: https://apache.jfrog.io/artifactory/arrow/debian/dists/trixie/InRelease: The key(s) in the keyring /usr/share/keyrings/apache-arrow-apt-source.gpg are ignored as the file has an unsupported filetype.
10.45 Warning: GPG error: https://apache.jfrog.io/artifactory/arrow/debian trixie InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 91D18FCF079F8007
10.45 Error: The repository 'https://apache.jfrog.io/artifactory/arrow/debian trixie InRelease' is not signed.
```
I thought that this problem and the current released `apache-arrow-apt-source` have the same problem but it may be a different problem...
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Packaging] APT repository sign doesn't work on Debian trixie [arrow]
Posted by "raulcd (via GitHub)" <gi...@apache.org>.
raulcd commented on issue #45118:
URL: https://github.com/apache/arrow/issues/45118#issuecomment-2565395714
It seems like a different issue but the `91D18FCF079F8007` seems to be your public key, right? (below extracted from the public keys file)
```
sig 91D18FCF079F8007 2010-08-30 Kouhei Sutou <ko...@cozmixng.org>
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Packaging] APT repository sign doesn't work on Debian trixie [arrow]
Posted by "kou (via GitHub)" <gi...@apache.org>.
kou commented on issue #45118:
URL: https://github.com/apache/arrow/issues/45118#issuecomment-2565387769
How to generate `apache-arrow-apt-source.gpg`: https://github.com/apache/arrow/blob/f5c340be342a427b8ef10e51e9d10fc6013c5b4c/dev/tasks/linux-packages/apache-arrow-apt-source/debian/rules#L13-L16
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Packaging] APT repository sign doesn't work on Debian trixie [arrow]
Posted by "kou (via GitHub)" <gi...@apache.org>.
kou commented on issue #45118:
URL: https://github.com/apache/arrow/issues/45118#issuecomment-2565942970
Ah, the merge request may not be related.
https://salsa.debian.org/apt-team/apt/-/merge_requests/407 may be related.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Packaging] APT repository sign doesn't work on Debian trixie [arrow]
Posted by "kou (via GitHub)" <gi...@apache.org>.
kou commented on issue #45118:
URL: https://github.com/apache/arrow/issues/45118#issuecomment-2565927353
Yes. It's my public key used for the latest release.
https://salsa.debian.org/apt-team/apt/-/merge_requests/409/diffs#e3f4163114eae4ff41ebb44a774fddac10b4e6a7_0_122 may be related. We're using the "GPG keybox database" format but it accepts only the "OpenPGP Public Key" formats.
Hmm. It seems that we need to use dearmor-ed format for keyring: https://salsa.debian.org/apt-team/apt/-/merge_requests/409/diffs#e3f4163114eae4ff41ebb44a774fddac10b4e6a7_0_96
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Packaging] APT repository sign doesn't work on Debian trixie [arrow]
Posted by "kou (via GitHub)" <gi...@apache.org>.
kou closed issue #45118: [Packaging] APT repository sign doesn't work on Debian trixie
URL: https://github.com/apache/arrow/issues/45118
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Packaging] APT repository sign doesn't work on Debian trixie [arrow]
Posted by "kou (via GitHub)" <gi...@apache.org>.
kou commented on issue #45118:
URL: https://github.com/apache/arrow/issues/45118#issuecomment-2566087869
Issue resolved by pull request 45131
https://github.com/apache/arrow/pull/45131
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Packaging] APT repository sign doesn't work on Debian trixie [arrow]
Posted by "raulcd (via GitHub)" <gi...@apache.org>.
raulcd commented on issue #45118:
URL: https://github.com/apache/arrow/issues/45118#issuecomment-2565178760
how is the KEYS file generated? I can't seem to find where we generate `/dev/tasks/linux-packages/KEYS`:
```
+ gpg --no-default-keyring --keyring /usr/share/keyrings/apache-arrow-apt-source.gpg --import /host/dev/release/../../dev/tasks/linux-packages/KEYS
gpg: directory '/root/.gnupg' created
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key 1729E5EF3EF74D10: public key "Test <te...@example.com>" imported
gpg: Total number processed: 1
gpg: imported: 1
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org