fix: replace deprecated apt-key with signed-by keyring in Dockerfile #3879

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

maximevtush wants to merge 1 commit into OffchainLabs:master from maximevtush:patch-6

+5 −2

Contributor

maximevtush commented Oct 18, 2025

Description

Replaces deprecated apt-key usage with modern signed-by keyring approach for LLVM APT repository in Dockerfile.

What Changed

Before: Used apt-key add - (deprecated, insecure)
After: Uses per-repo keyring with signed-by directive

Why This Matters

Security: Eliminates global APT trust scope
Compatibility: Prevents future build failures on newer Debian/Ubuntu
Best Practice: Aligns with current APT security recommendations


          Update Dockerfile

dba9315

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet