Development container broken due to expired GPG key

[koxu1996]

The latest devcontainer dev is based on devbox:1.0 image:

aztec-packages/.devcontainer/dev/devcontainer.json

Line 3 in 19a500f

"image": "aztecprotocol/devbox:1.0",

However, if you try to use it, installation of docker-in-docker fails with:

GPG error: https://cli.github.com/packages stable InRelease: The following signatures were invalid: EXPKEYSIG 23F3D4EA75716059 GitHub CLI <[email protected]>

You can trigger the same GPG issue with a below one-liner:

docker run -it --rm --entrypoint /bin/bash aztecprotocol/devbox:1.0 -c "apt update"

For upstream report see cli/cli#9569.

The simplest solution is to update devbox image, you can either:

• rebuild container from scratch,
• add step fetching new GPG key.

[koxu1996]

Workaround

1. Prepare empty directory:

mkdir /tmp/devbox-fixed
cd /tmp/devbox-fixed

2. Create the following Dockerfile:

FROM docker.io/aztecprotocol/devbox:1.0

RUN wget -qO- https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo tee /etc/apt/keyrings/githubcli-archive-keyring.gpg > /dev/null \
    && chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg

3. Build image, while overwriting the original tag:

docker build -t aztecprotocol/devbox:1.0 .

4. Run devcontainer dev and be happy that it works 😌.

[alexghr]

Hi @koxu1996, thanks for raising this. devbox:1.0 is an old version of the dev container image. You can use aztecprotocol/devbox:1.1 which contains the right versions of our toolchains.

PR here to bump devcontainer #10836