From 043bdbedb9963368eadbf86769b12fc6d8c86b60 Mon Sep 17 00:00:00 2001 From: Andy Feller Date: Fri, 6 Sep 2024 08:36:04 -0400 Subject: [PATCH 1/3] Remove note explaining 2 year old GPG ID change Relates #9569 Having been 2 years since the GitHub CLI changed GPG keys used to sign our releases, it no longer seems relevant to keep these notes in our installation docs as they are confusing to the uninitiated. --- docs/install_linux.md | 6 ------ 1 file changed, 6 deletions(-) diff --git a/docs/install_linux.md b/docs/install_linux.md index 15619fe96..e5b263fac 100644 --- a/docs/install_linux.md +++ b/docs/install_linux.md @@ -23,9 +23,6 @@ Install: && sudo apt install gh -y ``` -> **Note** -> We were recently forced to change our GPG signing key. If you've previously downloaded the `githubcli-archive-keyring.gpg` file, you should re-download it again per above instructions. If you are using a keyserver to download the key, the ID of the new key is `23F3D4EA75716059`. - Upgrade: ```bash @@ -65,9 +62,6 @@ sudo yum-config-manager --add-repo https://cli.github.com/packages/rpm/gh-cli.re sudo yum install gh ``` -> **Note** -> We were recently forced to change our GPG signing key. If you've added the repository previously and now you're getting a GPG signing key error, disable the repository first with `sudo yum-config-manager --disable gh-cli` and add it again with `sudo yum-config-manager --add-repo https://cli.github.com/packages/rpm/gh-cli.repo`. - Upgrade: ```bash From 78fa57dff7b92a6acbe3da1c7b9df74a56f43a0b Mon Sep 17 00:00:00 2001 From: Andy Feller Date: Fri, 6 Sep 2024 08:41:59 -0400 Subject: [PATCH 2/3] Revert "Remove note explaining 2 year old GPG ID change" This reverts commit 043bdbedb9963368eadbf86769b12fc6d8c86b60. --- docs/install_linux.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/install_linux.md b/docs/install_linux.md index e5b263fac..15619fe96 100644 --- a/docs/install_linux.md +++ b/docs/install_linux.md @@ -23,6 +23,9 @@ Install: && sudo apt install gh -y ``` +> **Note** +> We were recently forced to change our GPG signing key. If you've previously downloaded the `githubcli-archive-keyring.gpg` file, you should re-download it again per above instructions. If you are using a keyserver to download the key, the ID of the new key is `23F3D4EA75716059`. + Upgrade: ```bash @@ -62,6 +65,9 @@ sudo yum-config-manager --add-repo https://cli.github.com/packages/rpm/gh-cli.re sudo yum install gh ``` +> **Note** +> We were recently forced to change our GPG signing key. If you've added the repository previously and now you're getting a GPG signing key error, disable the repository first with `sudo yum-config-manager --disable gh-cli` and add it again with `sudo yum-config-manager --add-repo https://cli.github.com/packages/rpm/gh-cli.repo`. + Upgrade: ```bash From 5a7cdff9db891f6fd55a75ed74fe5519bd114905 Mon Sep 17 00:00:00 2001 From: Andy Feller Date: Fri, 6 Sep 2024 08:45:24 -0400 Subject: [PATCH 3/3] Update linux install to point to GPG troubleshoot Relates #9569 Updates notes from older 2 year GPG ID change to redirect users in case of GPG errors to recent issue. --- docs/install_linux.md | 24 ++++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/docs/install_linux.md b/docs/install_linux.md index 15619fe96..fabaa19aa 100644 --- a/docs/install_linux.md +++ b/docs/install_linux.md @@ -15,17 +15,14 @@ Install: ```bash (type -p wget >/dev/null || (sudo apt update && sudo apt-get install wget -y)) \ -&& sudo mkdir -p -m 755 /etc/apt/keyrings \ -&& wget -qO- https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo tee /etc/apt/keyrings/githubcli-archive-keyring.gpg > /dev/null \ -&& sudo chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg \ -&& echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" | sudo tee /etc/apt/sources.list.d/github-cli.list > /dev/null \ -&& sudo apt update \ -&& sudo apt install gh -y + && sudo mkdir -p -m 755 /etc/apt/keyrings \ + && wget -qO- https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo tee /etc/apt/keyrings/githubcli-archive-keyring.gpg > /dev/null \ + && sudo chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg \ + && echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" | sudo tee /etc/apt/sources.list.d/github-cli.list > /dev/null \ + && sudo apt update \ + && sudo apt install gh -y ``` -> **Note** -> We were recently forced to change our GPG signing key. If you've previously downloaded the `githubcli-archive-keyring.gpg` file, you should re-download it again per above instructions. If you are using a keyserver to download the key, the ID of the new key is `23F3D4EA75716059`. - Upgrade: ```bash @@ -33,6 +30,9 @@ sudo apt update sudo apt install gh ``` +> [!NOTE] +> If errors regarding GPG signatures occur, see [cli/cli#9569](https://github.com/cli/cli/issues/9569) for steps to fix this. + ### Fedora, CentOS, Red Hat Enterprise Linux (dnf) Install from our package repository for immediate access to latest releases: @@ -65,15 +65,15 @@ sudo yum-config-manager --add-repo https://cli.github.com/packages/rpm/gh-cli.re sudo yum install gh ``` -> **Note** -> We were recently forced to change our GPG signing key. If you've added the repository previously and now you're getting a GPG signing key error, disable the repository first with `sudo yum-config-manager --disable gh-cli` and add it again with `sudo yum-config-manager --add-repo https://cli.github.com/packages/rpm/gh-cli.repo`. - Upgrade: ```bash sudo yum update gh ``` +> [!NOTE] +> If errors regarding GPG signatures occur, see [cli/cli#9569](https://github.com/cli/cli/issues/9569) for steps to fix this. + ### openSUSE/SUSE Linux (zypper) Install: