Actions
Bug #7004
closed[Deployment] Remove dependency on third-party keyservers
Status:
Resolved
Priority:
Normal
Assigned To:
-
Category:
Deployment
Target version:
-
Story points:
1.0
Description
There are several places where our documentation or build tools instruct people to get a GPG key from pool.sks-keyservers.net. Unfortunately, this keyserver is not very reliable. GPG frequently times out trying to talk to it, which causes deployment failures or other errors.
- Publish our public key on Curoverse-hosted infrastructure so it can be fetched through a secure channel.
- In each of the following places where there are instructions to fetch our public key from a keyserver, update those instructions to use our own infrastructure instead:
- arvados-dev build scripts
- Docker build scripts (
arvados/docker
) - Documentation (
arvados/doc
)
Updated by Brett Smith over 8 years ago
- Story points set to 1.0
Ward to publish our key over HTTPS, and maybe third-party keys we rely on for installation like RVM's.
1 story point for all the associated updating.
Updated by Brett Smith over 8 years ago
- Target version changed from Arvados Future Sprints to Kanban
Actions