Skip to content

Conversation

@blackboxsw
Copy link
Collaborator

Proposed Commit Message

ci: resolute rust-based gpg-sq rejects short GPG keyids

Use long-keyid for testing to avoid non-zero exit codes warning of
insecure short IDs in gpg (GnuPG-compatible Sequoia Chameleon) 2.2.40.

Additional Context

Success run on questing:
https://github.com/blackboxsw/cloud-init/actions/runs/21609823450/job/62275681732

Success run on resolute:
https://github.com/blackboxsw/cloud-init/actions/runs/21610228334/job/62277053444

Test Steps

Merge type

  • Squash merge using "Proposed Commit Message"
  • Rebase and merge unique commits. Requires commit messages per-commit each referencing the pull request number (#<PR_NUM>)

@blackboxsw blackboxsw requested a review from holmanb February 2, 2026 23:42
Copy link
Member

@holmanb holmanb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please include example error message for future reference. Otherwise, this looks good to me.

I'm guessing we need to update some documentation since this is a UI change, right?

@blackboxsw blackboxsw force-pushed the ci-resolute-sequoia-gpg-no-short-keys branch from caab93b to 326c416 Compare February 3, 2026 01:21
@holmanb holmanb self-requested a review February 3, 2026 16:14
@holmanb
Copy link
Member

holmanb commented Feb 3, 2026

Dismissing review due to failing tests.

@github-actions github-actions bot added the documentation This Pull Request changes documentation label Feb 3, 2026
# The values inside the entries consist of the following optional entries:
# 'source': a sources.list entry (some variable replacements apply)
# 'keyid': providing a key to import via shortid or fingerprint
# 'keyid': providing a key to import via longid or fingerprint
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The term "longid" is not well-defined.

# Additionally, if the repository requires a custom signing key, it can be
# specified via the same fields as for custom sources:
# 'keyid': providing a key to import via shortid or fingerprint
# 'keyid': providing a key to import via longid or fingerprint
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same comment.

Copy link
Collaborator Author

@blackboxsw blackboxsw Feb 12, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

changed to 16-bit ID. The 'long' version from the gpg --list-keys --keyid-format section of the gpg man-page

Select how to display key IDs. "short" is the traditional 8-character key ID.
"long" is the more accurate (but less convenient) 16-character key ID.
Add an "0x" to either to include an "0x" at the beginning of the key ID, as in 0x99242560.

@holmanb holmanb self-assigned this Feb 3, 2026
@holmanb holmanb added the incomplete Action required by submitter label Feb 10, 2026
Use long-keyid for testing to avoid non-zero exit codes warning of
insecure short IDs in gpg (GnuPG-compatible Sequoia Chameleon) 2.2.40.
@blackboxsw blackboxsw force-pushed the ci-resolute-sequoia-gpg-no-short-keys branch from 326c416 to b4ae6f9 Compare February 11, 2026 23:56
@blackboxsw blackboxsw force-pushed the ci-resolute-sequoia-gpg-no-short-keys branch from e07fcd9 to 56f74ac Compare February 12, 2026 00:07
@blackboxsw blackboxsw removed the incomplete Action required by submitter label Feb 12, 2026
@blackboxsw blackboxsw requested a review from holmanb February 12, 2026 00:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation This Pull Request changes documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants