Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use GPG for rvm verification. #285

Merged
merged 3 commits into from
Dec 20, 2014

Conversation

lukeasrodgers
Copy link
Contributor

rvm will fail to install if GPG is present on the system, but the key for rvm is not found.
This behaviour will be skipped if the gpg_key node is an empty string.
Fixes #278

Based on this fix, IndependentIP@56f2459, by @marijnm.

rvm will fail to install if GPG is present on the system, but the key
for rvm is not found.
This behaviour will be skipped if the `gpg_key` node is an empty string.
Fixes sous-chefs#278
@mpapis
Copy link
Contributor

mpapis commented Dec 19, 2014

and 👍

Apparently some servers may have the former instead of the latter.
@lukeasrodgers
Copy link
Contributor Author

@fnichol let me know if you'd like these commits squashed before merging.

@@ -30,4 +30,10 @@
g.run_action(:create)
end

execute 'Adding gpg key' do
command "gpg --keyserver hkp://keys.gnupg.net --recv-keys #{node['rvm']['gpg_key']}"
only_if 'which gpg || which gpg2'
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

with this check you need to change the command to something like:

"`which gpg || which gpg2` --keyserver hkp://keys.gnupg.net --recv-keys #{node['rvm']['gpg_key']}"

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

also in RVM the check order is reversed to which gpg2 || which gpg - although they are supposed to be compatible the v2 might be safer one day

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah right, duh, thanks.

@mpapis
Copy link
Contributor

mpapis commented Dec 19, 2014

@martinisoft this looks good - can you review?

@martinisoft
Copy link
Contributor

Looks good enough to me. Currently the test suites have been proven to be broken all along and the re-factor to LWRPs is still pending. Will be giving it some attention this weekend and next week so this seems like a great idea to roll in to master for now. Can't hurt 👍

martinisoft added a commit that referenced this pull request Dec 20, 2014
@martinisoft martinisoft merged commit 87cc2fe into sous-chefs:master Dec 20, 2014
martinisoft added a commit that referenced this pull request Dec 20, 2014
@lukeasrodgers lukeasrodgers deleted the verify-with-gpg branch September 9, 2016 18:29
@lock
Copy link

lock bot commented Apr 25, 2020

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@lock lock bot locked as resolved and limited conversation to collaborators Apr 25, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

GPG verification error
4 participants