Skip to content

Conversation

@wschwab
Copy link

@wschwab wschwab commented Dec 24, 2020

Proposed changes

Added workaround for apt-key deprecation errors.

The installation instructions for Debian use a plain sudo apt-key add - to
add the gpg fingerprint, resulting in errors when trying to install on newer
Debian builds, as detailed in #11625 . The workaround is copied from this comment.

Related issues (optional)

#11625

Added workaround for `apt-key` deprecation errors
@netlify
Copy link

netlify bot commented Dec 24, 2020

✔️ Deploy preview for docsdocker ready!

🔨 Explore the source changes: 11775ed

🔍 Inspect the deploy logs: https://app.netlify.com/sites/docsdocker/deploys/5fe44fef5d8d64000702f125

😎 Browse the preview: https://deploy-preview-11974--docsdocker.netlify.app

@denis-roy
Copy link
Contributor

denis-roy commented Dec 26, 2020

I noticed the workaround still make use of the deprecated apt-key tool.

I believe a more future-proof approach would be to discontinue use of apt-key altogether as described in Debian's wiki and summarized in this comment

```
then you can avoid it by using the following instead:
```
curl -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key --keyring /etc/apt/trusted.gpg.d/docker-apt-key.gpg add -
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Does this also work on older versions? If so, we should probably replace the existing instructions to use the new one

This should probably also use the variable;

Suggested change
curl -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key --keyring /etc/apt/trusted.gpg.d/docker-apt-key.gpg add -
curl -fsSL {{ download-url-base }}/gpg | sudo apt-key --keyring /etc/apt/trusted.gpg.d/docker-apt-key.gpg add -

Copy link
Contributor

@denis-roy denis-roy Jan 5, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good day @thaJeztah

As per my previous comment, this solution and the requested changes still rely on the deprecated apt-key tool.

#11990 offers a Debian-compliant way of dealing with apt-key deprecation that applies to Debian 9 (Stretch) / Ubuntu 16.04 (Xenial) onward which is in line with Docker's own installation requirements.

Thank you :)

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I believe the verification command needs also --keyring /etc/apt/trusted.gpg.d/docker-apt-key.gpg, below.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants