packaging: fix payload build

As
kubernetes/release#2862 (comment),
public key release of kubernetes have been changed.

Signed-off-by: Xynnn007 <xynnn@linux.alibaba.com>

Author: Xynnn007

tools/packaging/build/Dockerfile

@@ -9,16 +9,16 @@ ENV DEBIAN_FRONTEND=noninteractive
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
 RUN \
-apt-get update && \
-apt-get install -y --no-install-recommends apt-transport-https ca-certificates curl xz-utils systemd && \
-mkdir -p /etc/apt/keyrings/ && \
-curl -fsSLo /etc/apt/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpg && \
-echo "deb [signed-by=/etc/apt/keyrings/kubernetes-archive-keyring.gpg] https://apt.kubernetes.io/ kubernetes-xenial main" | tee /etc/apt/sources.list.d/kubernetes.list && \
-apt-get update && \
-apt-get install -y --no-install-recommends kubectl && \
-apt-get clean && rm -rf /var/lib/apt/lists/ && \
-mkdir -p ${DESTINATION} && \
-tar xvf ${ENCLAVE_CC_ARTIFACTS} -C ${DESTINATION} && \
-rm ${WORKDIR}/${ENCLAVE_CC_ARTIFACTS}
+    apt-get update && \
+    apt-get install -y --no-install-recommends apt-transport-https ca-certificates curl xz-utils systemd gpg && \
+    mkdir -p /etc/apt/keyrings/ && \
+    curl -fsSL https://packages.cloud.google.com/apt/doc/apt-key.gpg | gpg --dearmor -o /etc/apt/keyrings/kubernetes-archive-keyring.gpg && \
+    echo "deb [signed-by=/etc/apt/keyrings/kubernetes-archive-keyring.gpg] https://apt.kubernetes.io/ kubernetes-xenial main" | tee /etc/apt/sources.list.d/kubernetes.list && \
+    apt-get update && \
+    apt-get install -y --no-install-recommends kubectl && \
+    apt-get clean && rm -rf /var/lib/apt/lists/ && \
+    mkdir -p ${DESTINATION} && \
+    tar xvf ${ENCLAVE_CC_ARTIFACTS} -C ${DESTINATION} && \
+    rm ${WORKDIR}/${ENCLAVE_CC_ARTIFACTS}
 
 WORKDIR ${DESTINATION}