Skip to content

feat(24.04): add ubuntu archive signing key 2018#81

Merged
cjdcordeiro merged 3 commits intocanonical:ubuntu-24.04from
rebornplusplus:feat/public-keys/24.04
Jan 12, 2024
Merged

feat(24.04): add ubuntu archive signing key 2018#81
cjdcordeiro merged 3 commits intocanonical:ubuntu-24.04from
rebornplusplus:feat/public-keys/24.04

Conversation

@rebornplusplus
Copy link

This PR adds the Ubuntu Archive Automatic Signing Key (2018) as a "public-key" in the chisel.yaml. The armored data was obtained by executing the following commands on a Ubuntu 22.04 machine:

$ gpg --keyserver keyserver.ubuntu.com --receive-keys 871920D1991BC93C
$ gpg --armor --export 871920D1991BC93C

BREAKING CHANGE: This PR introduces the new chisel yaml format "chisel-v2", in which public-keys (top-level) and archive.<name>.public-keys fields are introduced. This change is related to the addition of integrity checks in chisel. [1]

[1] canonical/chisel#106

This commit adds the Ubuntu Archive Automatic Signing Key (2018) as a
"public-key" in the chisel.yaml. The armored data was obtained by
executing the following commands on a Ubuntu 22.04 machine:

    $ gpg --keyserver keyserver.ubuntu.com --receive-keys 871920D1991BC93C
    $ gpg --armor --export 871920D1991BC93C

BREAKING CHANGE: This commit introduces the new chisel yaml format
"chisel-v2", in which ``public-keys`` (top-level) and
``archive.<name>.public-keys`` fields are introduced. This changes is
related to the addition of integrity checks in chisel. [1]

[1] canonical/chisel#106
@cjdcordeiro
Copy link
Collaborator

Don't merge before the 9th (requested by MSFT)

Copy link
Collaborator

@cjdcordeiro cjdcordeiro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See my comment in canonical/chisel#106 (review)

I don't think we should bump to chisel-v2 just yet. Chisel v0.8.1 will be able to cope with these public-keys for a while longer

@cjdcordeiro cjdcordeiro added the Blocked Waiting for something external label Dec 14, 2023
@cjdcordeiro
Copy link
Collaborator

See my comment in canonical/chisel#106 (review)

I don't think we should bump to chisel-v2 just yet. Chisel v0.8.1 will be able to cope with these public-keys for a while longer

as a note, we've agreed to later bump the format to just v1, in order to avoid a big version gap between the format and the chisel tool release. Things change is equally disruptive (intentionally) and will helps remove the ambiguity between the format version and chisel tool versions

@rebornplusplus
Copy link
Author

Due to recent developments, the format has been reverted to the previous version chisel-v1.

Copy link
Collaborator

@cjdcordeiro cjdcordeiro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As per recent discussions, we'll need to change public-keys to v1-public-keys (this applies to the other significant ones.

Then we can merge it for testing with canonical/chisel#106.

Before merging, we need to ensure v0.8.1 works with it

Copy link
Collaborator

@letFunny letFunny left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Because we do not have a CI please test it locally as well to make sure. I did:

v0.8.1 canonical/chisel#106

Copy link
Collaborator

@cjdcordeiro cjdcordeiro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looking good now. thanks for the changes

@cjdcordeiro cjdcordeiro merged commit 6fef9d4 into canonical:ubuntu-24.04 Jan 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Blocked Waiting for something external

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants