Skip to content
This repository was archived by the owner on Dec 10, 2017. It is now read-only.

Fix public key URL#16

Merged
sgerrand merged 2 commits intomasterfrom
fix-ssh-key-location-for-releases
Oct 25, 2016
Merged

Fix public key URL#16
sgerrand merged 2 commits intomasterfrom
fix-ssh-key-location-for-releases

Conversation

@sgerrand
Copy link
Copy Markdown
Owner

@sgerrand sgerrand commented Oct 25, 2016 •
edited
Loading

💁 The public key on master differs from that stored in the release, which causes the key verification step in apk package installation to fail. Using the key from the release artifacts resolves this issue. This change updates that reference.

$ docker run -it alpine sh
/ # apk --no-cache add ca-certificates wget
fetch http://dl-cdn.alpinelinux.org/alpine/v3.4/main/x86_64/APKINDEX.tar.gz
fetch http://dl-cdn.alpinelinux.org/alpine/v3.4/community/x86_64/APKINDEX.tar.gz
(1/2) Installing ca-certificates (20160104-r4)
(2/2) Installing wget (1.18-r0)
Executing busybox-1.24.2-r11.trigger
Executing ca-certificates-20160104-r4.trigger
OK: 6 MiB in 13 packages
/ # wget -q -O /etc/apk/keys/sgerrand.rsa.pub https://github.com/sgerrand/alpine-pkg-R/releases/download/3.3.1-r0/sgerrand.rsa.pub
/ # wget -q https://github.com/sgerrand/alpine-pkg-R/releases/download/3.3.1-r0/R-3.3.1-r0.apk
/ # apk -U add R-3.3.1-r0.apk
fetch http://dl-cdn.alpinelinux.org/alpine/v3.4/main/x86_64/APKINDEX.tar.gz
fetch http://dl-cdn.alpinelinux.org/alpine/v3.4/community/x86_64/APKINDEX.tar.gz
(1/14) Installing libbz2 (1.0.6-r5)
(2/14) Installing libssh2 (1.7.0-r0)
(3/14) Installing libcurl (7.50.3-r0)
(4/14) Installing libgcc (5.3.0-r0)
(5/14) Installing libquadmath (5.3.0-r0)
(6/14) Installing libgfortran (5.3.0-r0)
(7/14) Installing libgomp (5.3.0-r0)
(8/14) Installing xz-libs (5.2.2-r1)
(9/14) Installing pcre (8.38-r1)
(10/14) Installing ncurses-terminfo-base (6.0-r7)
(11/14) Installing ncurses-terminfo (6.0-r7)
(12/14) Installing ncurses-libs (6.0-r7)
(13/14) Installing readline (6.3.008-r4)
(14/14) Installing R (3.3.1-r0)
Executing busybox-1.24.2-r11.trigger
OK: 71 MiB in 27 packages

Closes #15 #17

@sgerrand sgerrand added the bug label Oct 25, 2016
@sgerrand
⚡ Fix public key URL
712fb36 
The public key on master differs from that stored in the release, which
causes the key verification step in apk package installation to fail.
Using the key from the release artifacts resolves this issue.

Closes #15
@sgerrand sgerrand force-pushed the fix-ssh-key-location-for-releases branch from 719d784 to 712fb36 Compare October 25, 2016 22:19
@sgerrand
Copy link
Copy Markdown
Owner Author

sgerrand commented Oct 25, 2016 •
edited
Loading

😾 Build failure was caused by the go (v1.5.3) cache being invalid and complaining about import paths in github.com/tcnksm/ghr.

@sgerrand
🔧 Download and install Go v1.7
9da1c9b 
CircleCI has an outdated version of Go, which causes `go get github.com/tcnksm/ghr` to fail.
@sgerrand sgerrand merged commit e89fa36 into master Oct 25, 2016
@sgerrand sgerrand deleted the fix-ssh-key-location-for-releases branch October 25, 2016 22:47
@sgerrand sgerrand mentioned this pull request Oct 25, 2016
Closed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

bug

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

ERROR: R-3.3.1-r0.apk: BAD signature

1 participant

@sgerrand