Project

General

Profile

Actions

Bug #7004

closed

[Deployment] Remove dependency on third-party keyservers

Added by Brett Smith over 8 years ago. Updated over 4 years ago.

Status:
Resolved
Priority:
Normal
Assigned To:
-
Category:
Deployment
Target version:
-
Story points:
1.0

Description

There are several places where our documentation or build tools instruct people to get a GPG key from pool.sks-keyservers.net. Unfortunately, this keyserver is not very reliable. GPG frequently times out trying to talk to it, which causes deployment failures or other errors.

  • Publish our public key on Curoverse-hosted infrastructure so it can be fetched through a secure channel.
  • In each of the following places where there are instructions to fetch our public key from a keyserver, update those instructions to use our own infrastructure instead:
    • arvados-dev build scripts
    • Docker build scripts (arvados/docker)
    • Documentation (arvados/doc)
Actions

Also available in: Atom PDF