Skip to content

debsig: Failed verification for msft-git.deb. #706

@alexanderilyin

Description

@alexanderilyin

Snippet from readme doesn't work out of the box:

⬢ [Docker] ❯ lsb_release -d
No LSB modules are available.
Description:    Debian GNU/Linux 12 (bookworm)
⬢ [Docker] ❯ grep FROM .devcontainer/Dockerfile 
FROM mcr.microsoft.com/devcontainers/typescript-node:1-22-bookworm
⬢ [Docker] ❯ .devcontainer/git.sh
+ sudo apt-get install -y curl debsig-verify
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
curl is already the newest version (7.88.1-10+deb12u8).
Suggested packages:
  debian-keyring debsigs
The following NEW packages will be installed:
  debsig-verify
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 37.1 kB of archives.
After this operation, 102 kB of additional disk space will be used.
Get:1 http://deb.debian.org/debian bookworm/main amd64 debsig-verify amd64 0.28+b3 [37.1 kB]
Fetched 37.1 kB in 0s (197 kB/s)         
Selecting previously unselected package debsig-verify.
(Reading database ... 48238 files and directories currently installed.)
Preparing to unpack .../debsig-verify_0.28+b3_amd64.deb ...
Unpacking debsig-verify (0.28+b3) ...
Setting up debsig-verify (0.28+b3) ...
Processing triggers for man-db (2.11.2-2) ...
+ curl -s https://api.github.com/repos/microsoft/git/releases/latest
+ grep -E 'browser_download_url.*msft-git-public.asc'
+ cut -d : -f 2,3
+ tr -d '"'
+ xargs -I url curl -L -o msft-git-public.asc url
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100  2468  100  2468    0     0   3592      0 --:--:-- --:--:-- --:--:--  6652
+ gpg --output msft-git-public.gpg --dearmor msft-git-public.asc
+ gpg --show-keys msft-git-public.asc
+ head -n 2
+ tail -n 1
+ tail -c 17
B8F12E25441124E1
+ sudo mkdir /usr/share/debsig/keyrings/B8F12E25441124E1
+ sudo mv msft-git-public.gpg /usr/share/debsig/keyrings/B8F12E25441124E1/
+ sudo mkdir /etc/debsig/policies/B8F12E25441124E1
+ cat
+ sudo mv generic.pol /etc/debsig/policies/B8F12E25441124E1/generic.pol
+ curl -s https://api.github.com/repos/microsoft/git/releases/latest
+ grep 'browser_download_url.*deb'
+ cut -d : -f 2,3
+ xargs -I url curl -L -o msft-git.deb url
+ tr -d '"'
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:--  0:00:08 --:--:--     0
100 66.2M  100 66.2M    0     0  5700k      0  0:00:11  0:00:11 --:--:-- 25.0M
+ debsig-verify msft-git.deb
debsig: Failed verification for msft-git.deb.

I came from here:

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions