Project

General

Profile

Actions

Bug #7004

closed

[Deployment] Remove dependency on third-party keyservers

Added by Brett Smith over 8 years ago. Updated over 4 years ago.

Status:
Resolved
Priority:
Normal
Assigned To:
-
Category:
Deployment
Target version:
-
Story points:
1.0

Description

There are several places where our documentation or build tools instruct people to get a GPG key from pool.sks-keyservers.net. Unfortunately, this keyserver is not very reliable. GPG frequently times out trying to talk to it, which causes deployment failures or other errors.

  • Publish our public key on Curoverse-hosted infrastructure so it can be fetched through a secure channel.
  • In each of the following places where there are instructions to fetch our public key from a keyserver, update those instructions to use our own infrastructure instead:
    • arvados-dev build scripts
    • Docker build scripts (arvados/docker)
    • Documentation (arvados/doc)
Actions #1

Updated by Brett Smith over 8 years ago

  • Story points set to 1.0

Ward to publish our key over HTTPS, and maybe third-party keys we rely on for installation like RVM's.

1 story point for all the associated updating.

Actions #2

Updated by Brett Smith over 8 years ago

  • Target version changed from Arvados Future Sprints to Kanban
Actions #3

Updated by Peter Amstutz over 4 years ago

  • Target version deleted (Kanban)
Actions #4

Updated by Peter Amstutz over 4 years ago

  • Status changed from New to Resolved
Actions

Also available in: Atom PDF