heavy-duty/stoke
7
1
Fork 1
Code Issues 1 Pull requests Projects Releases 3 Packages Wiki Activity Actions

fix: preserve apt signature verification #38

Merged
andres merged 8 commits from build/1-apt-signed-install into main 2026-08-31 16:05:04 +00:00
Conversation 18 Commits 8 Files changed 4 +5 -3
1 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit 9f34641545 - Show all commits

8
scripts/install-apt.sh
View file

@ -123,9 +123,11 @@ if [ "$($SUDO curl "${CURL_AUTH[@]}" -sSL -o /dev/null -w '%{http_code}' "$RELEA
fi
# Newer apt verifies with sqv (Sequoia), which rejects the signature Forgejo
# currently produces for its Debian registry (malformed Ed25519 MPI encoding
# in the upstream signing library). Try the properly signed source first so
# this heals automatically once the forge is fixed. Only that signature-error
# currently produces for its Debian registry. The cause is recorded on #1; it
# is not the key algorithm, because the registry serves an RSA-2048 signing
# key (`gpg --list-packets` on repository.key reports `algo 1` with a
# 2048-bit pkey[0]). Try the properly signed source first so this heals
# automatically once the forge is fixed. Only that signature-error
# class permits the compatibility fallback; auth, network, and other failures
# must leave verification enabled and retain apt's original diagnostic.
if update_output="$(update_only_source "$LIST" 2>&1)"; then