Skip to content

Use apt::keyring and update GPG key, with modulesync changes#1143

Open
griggi-ws wants to merge 8 commits into
voxpupuli:masterfrom
griggi-ws:update_gpg_with_modulesync
Open

Use apt::keyring and update GPG key, with modulesync changes#1143
griggi-ws wants to merge 8 commits into
voxpupuli:masterfrom
griggi-ws:update_gpg_with_modulesync

Conversation

@griggi-ws

Copy link
Copy Markdown

Pull Request (PR) description

This implements #1130, #1140, and #1141.
I've regenerated the rubocop todo alongside the modulesync changes, as prior to them rubocop passes and the updates result in lots of new warnings (and the lack of the GPG update renders this module useless as-is).

There's additionally a new stub to fix the cli_spec test, as it currently passes or fails depending on whether the test environment has a java binary in PATH. This will fix the CI run failure on #1142.

This Pull Request (PR) fixes the following issues

Fixes #1129

zen-fu and others added 8 commits July 22, 2025 14:57
Verifying the APT key fingerprint should really be a responsibility of
the `puppetlabs-apt` module, so we deliberately choose to not do it
here.

Note that, currenlty, neither the (obsolete) `apt::key` nor the
`apt::keyring` resources do key fingerprint verification, so this change
isn't really a regression. Here's an upstream issue:

    puppetlabs/puppetlabs-apt#1175

Before this change, the key fingerprint was only used (by `apt::key`) to
name the file where the key was stored. Because no verification is made
either here or on the `puppetlabs-apt` side, we also remove the
`$gpg_key_id` class param. This change avoids the need to maintain the
hardcoded fingerprint, while also avoiding a false impression that they
fingerprint is somehow verified.

Discussion: voxpupuli#1130
use apt::keyring to install the Jenkins APT repo key in Debian
Co-authored-by: Mihmet Akpinar <mihmet.akpinar@check24.de>
…ether `java` binary exists in the test environment
@griggi-ws griggi-ws changed the title Use apt::keyring and update GPG key, with fresh rubocop todo to get modulesync changes CI functional Use apt::keyring and update GPG key, with modulesync changes Mar 16, 2026
@bastelfreak bastelfreak closed this May 6, 2026
@bastelfreak bastelfreak reopened this May 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

apt::key doesn't work in Debian trixie → switch to apt::keyring instead

5 participants