Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

stop using deprecated apt-key in Qubes builder (qubes-builder-debian) (prevents removal from gnupg from Debian minimal templates) #9502

Open
adrelanos opened this issue Oct 12, 2024 · 0 comments
Labels
affects-4.3 This issue affects Qubes OS 4.3. C: builder Qubes Builder C: Debian/Ubuntu needs diagnosis Requires technical diagnosis from developer. Replace with "diagnosed" or remove if otherwise closed. P: default Priority: default. Default priority for new issues, to be replaced given sufficient information. T: bug Type: bug report. A problem or defect resulting in unintended behavior in something that exists.

Comments

@adrelanos
Copy link
Member

Qubes OS release

R4.3

Brief summary

apt-key is deprecated by upstream, Debian. Quote https://manpages.debian.org/bookworm/apt/apt-key.8.en.html

apt-key - Deprecated APT key management utility

apt-key is no longer required.

This caused the issue of gnupg not being removable from Debian minimal template. This is because deprecated apt-key makes internally use of gpg, has a undeclared dependency on gnupg.

Steps to reproduce

See qubes-builder-debian uses apt-key code search https://github.com/search?q=repo%3AQubesOS%2Fqubes-builder-debian%20apt-key&type=code for evidence.

Expected behavior

Qubes builder not using deprecated tools such as apt-key.

Actual behavior

Qubes builder using apt-key.

Additional information

apt-key is no longer required. There is no need to perform any gpg format conversion anymore.

/usr/share/keyrings folder nowadays supports:

  • A) gpg binary format (`.gpg); and,
  • B) gpg --armored format (.asc).

Just place the key there. Using B) preferably.

@adrelanos adrelanos added P: default Priority: default. Default priority for new issues, to be replaced given sufficient information. T: bug Type: bug report. A problem or defect resulting in unintended behavior in something that exists. labels Oct 12, 2024
@andrewdavidwong andrewdavidwong added C: builder Qubes Builder C: Debian/Ubuntu needs diagnosis Requires technical diagnosis from developer. Replace with "diagnosed" or remove if otherwise closed. affects-4.3 This issue affects Qubes OS 4.3. labels Oct 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
affects-4.3 This issue affects Qubes OS 4.3. C: builder Qubes Builder C: Debian/Ubuntu needs diagnosis Requires technical diagnosis from developer. Replace with "diagnosed" or remove if otherwise closed. P: default Priority: default. Default priority for new issues, to be replaced given sufficient information. T: bug Type: bug report. A problem or defect resulting in unintended behavior in something that exists.
Projects
None yet
Development

No branches or pull requests

2 participants