Skip to content

fix: replace gpg --dearmor with direct .asc file usage for apt keys - #184

Merged
toanju merged 2 commits into
mainfrom
fix-build-md5-key
Feb 27, 2026
Merged

toanju merged 2 commits into
mainfrom
fix-build-md5-key

Conversation

@anokfireball

@anokfireball anokfireball commented Feb 26, 2026 •

Copy link
Copy Markdown
Member

Should fix https://github.com/gardenlinux/gardenlinux-ccloud/actions/runs/22436544617/job/64967853829#step:8:3062

  • bump to latest Garden Linux version
  • metal -> baremetal

5kt
5kt previously approved these changes Feb 26, 2026
@5kt
5kt dismissed their stale review February 26, 2026 14:28

wrongly approved

Instead of using gpg --dearmor with --allow-weak-digest-algos,
directly copy ASCII-armored key files to .asc extension.
APT natively supports .asc files without needing gpg conversion.

This avoids issues with MD5 digest algorithms and simplifies
the key setup process.

Upstream PR: gardenlinux/gardenlinux#4388
@anokfireball anokfireball changed the title fix: allow weaker MD5 algo in gpg dearmor fix: replace gpg --dearmor with direct .asc file usage for apt keys Feb 26, 2026
@toanju

toanju commented Feb 26, 2026

Copy link
Copy Markdown
Collaborator

Bumped Garden Linux version in addition

@toanju
toanju merged commit 175e2b2 into main Feb 27, 2026
44 of 45 checks passed
@toanju
toanju deleted the fix-build-md5-key branch February 27, 2026 17:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants