Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

puppet_enterprise::repo::config needs to use modern APT keyrings #2

Open
kenyon opened this issue Dec 1, 2023 · 2 comments
Open

puppet_enterprise::repo::config needs to use modern APT keyrings #2

kenyon opened this issue Dec 1, 2023 · 2 comments
Labels
enhancement New feature or request triaged This ticket has been accepted to our backlog and migrated internally

Comments

@kenyon
Copy link

kenyon commented Dec 1, 2023

(Previously filed as https://puppet.atlassian.net/browse/ENTERPRISE-1512)

Use Case

Debian-family operating systems have deprecated the direct usage of apt-key for several years now. apt-key add installs GPG keys into /etc/apt/trusted.gpg or /etc/apt/trusted.gpg.d. Installing keys there causes warnings on Ubuntu 22.04 when running apt update. This will become an error in Ubuntu 24.04. puppetlabs-apt v9.2.0 supports modern APT keyrings so you can see how it's done, since puppet_enterprise::repo::config installs the PE key manually: puppetlabs/puppetlabs-apt#1150

Describe the Solution You Would Like

puppet_enterprise::repo::config should place the PE GPG key in the /etc/apt/keyrings directory, and add signed-by=/etc/apt/keyrings/pe.asc to the sources.list file that puppet_enterprise::repo::config creates. Or just use the puppetlabs-apt module. Example: puppetlabs/puppetlabs-puppet_agent#681

Describe Alternatives You've Considered

There isn't really an alternative, this has to be done for Ubuntu 24.04, and should be done for Ubuntu 22.04.

@kenyon kenyon added the enhancement New feature or request label Dec 1, 2023
@binford2k binford2k added the triaged This ticket has been accepted to our backlog and migrated internally label Dec 7, 2023
Copy link

github-actions bot commented Dec 7, 2023

Migrated issue to PE-37301

@GSPatton
Copy link
Collaborator

Hi @kenyon. Thanks for this! I'll work on getting this prioritised and into the right hands

@J-Hunniford J-Hunniford pinned this issue Feb 9, 2024
@J-Hunniford J-Hunniford unpinned this issue Feb 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request triaged This ticket has been accepted to our backlog and migrated internally
Projects
None yet
Development

No branches or pull requests

3 participants