puppetlabs-puppet_agent icon indicating copy to clipboard operation
puppetlabs-puppet_agent copied to clipboard

Published 20 hours ago • verified publisher icon puppetlabs

GPG expired for at least Ubuntu 22.04

Open tam116 opened this issue 7 months ago • 4 comments

Describe the Bug

The GPG used by the module to authenticate the APT repos is expired. At least on Puppet Enterprise installs

Steps to Reproduce

Steps to reproduce the behavior:

  1. Use this module to manage the puppet repos
  2. Run apt update

Environment

  • Version: 2023.8.2
  • Platform: Ubuntu 22.04, maybe others

Additional Context

Replacing https://github.com/puppetlabs/puppetlabs-puppet_agent/blob/main/files/GPG-KEY-puppet-20250406 with the contents of the GPG linked here resolves the issue https://portal.perforce.com/s/article/Expired-GPG-Key-agent-installation-fail-PE-2021-7-to-2023-8-Debian-Ubuntu-SLES15

tam116 avatar Apr 08 '25 14:04 tam116

Is there a new release planned to deploy the new key to existing clients? (soon?)

bjparki-cccs avatar Apr 09 '25 13:04 bjparki-cccs

The new key is here: https://apt.puppet.com/DEB-GPG-KEY-future It looks like all the effort is going into moving to puppet-core right now so there might not be another update here.

We are going to set $manage_repo to false and add the repo ourselves to buy us some time.

It would be good if we could get a simple release that just updates that key though.

choffee avatar Apr 09 '25 14:04 choffee

Pinning to the latest commit also works until there is a release. Example: https://github.com/kenyon/puppet/commit/d13379170314d349eb9a03b602a220c7989bd24a

kenyon avatar Apr 09 '25 19:04 kenyon

It does look like this issue has been fixed in newer versions of puppetlabs/puppetlabs-puppet_agent.

bmcnally-uw avatar Jun 13 '25 19:06 bmcnally-uw