Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

https://storage.googleapis.com/download.dartlang.org/linux/debian is not signed #5081

Closed
JedBartlett opened this issue Jul 26, 2023 · 2 comments
Labels
a.get-started Relates to Getting Started with Dart infra.structure Relates to the tools that create dart.dev p1-high Major but not urgent concern: Resolve in months. Update each month.

Comments

@JedBartlett
Copy link

Describe the problem

IT looks like the GPG key expired again (See previous issue: #1457)

sudo apt update
...
Ign:5 https://storage.googleapis.com/download.dartlang.org/linux/debian stable InRelease
Get:8 https://storage.googleapis.com/download.dartlang.org/linux/debian stable Release [944 B]
Get:9 https://storage.googleapis.com/download.dartlang.org/linux/debian stable Release.gpg [819 B]
Ign:9 https://storage.googleapis.com/download.dartlang.org/linux/debian stable Release.gpg
...
Reading package lists... Done
W: GPG error: https://storage.googleapis.com/download.dartlang.org/linux/debian stable Release: The following signatures were invalid: BADSIG 4EB27DB2A3B88B8B Google Inc. (Linux Packages Signing Authority) [email protected]
E: The repository 'https://storage.googleapis.com/download.dartlang.org/linux/debian stable Release' is not signed.

Expected fix

Update the signing key / Re-sign the repository

Additional context

A Dockerfile with the following will not build:

FROM docker.sel.inc/ubuntu:20.04
# Install Dart
RUN apt-get update && apt-get install -y apt-transport-https \
    && sh -c 'wget --waitretry=5 -qO- https://dl-ssl.google.com/linux/linux_signing_key.pub | apt-key add -' \
    && sh -c 'wget --waitretry=5 -qO- https://storage.googleapis.com/download.dartlang.org/linux/debian/dart_stable.list > /etc/apt/sources.list.d/dart_stable.list'
RUN apt-get update && apt-get install -y dart=2.14.4-1

When running it locally, it is apparent that the apt-get update fails:

Reading package lists... Done                                                                                                                 
W: GPG error: https://storage.googleapis.com/download.dartlang.org/linux/debian stable Release: The following signatures were invalid: BADSIG 4EB27DB2A3B88B8B Google Inc. (Linux Packages Signing Authority) <[email protected]>
E: The repository 'https://storage.googleapis.com/download.dartlang.org/linux/debian stable Release' is not signed.
@JedBartlett JedBartlett added the infra.structure Relates to the tools that create dart.dev label Jul 26, 2023
@parlough parlough added p1-high Major but not urgent concern: Resolve in months. Update each month. a.get-started Relates to Getting Started with Dart labels Jul 27, 2023
@parlough
Copy link
Member

Thanks for opening an issue! Looks like this issue is being tracked on the SDK repository: dart-lang/sdk#53045

For now, I'll keep this open as well so users visiting this repo see it and in-case there's anything we need to change on dart.dev.

\cc @athomas

@parlough
Copy link
Member

I'm going to close this issue as the SDK issue has been marked as fixed with some extra information: dart-lang/sdk#53045 (comment)

Thanks again for opening an issue and let us know if you have any further issues!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
a.get-started Relates to Getting Started with Dart infra.structure Relates to the tools that create dart.dev p1-high Major but not urgent concern: Resolve in months. Update each month.
Projects
None yet
Development

No branches or pull requests

2 participants