Skip to content

update key early in the process - #9

Merged
marc-hanheide merged 2 commits into
mainfrom
marc-hanheide-patch-1
Jun 29, 2025
Merged

update key early in the process#9
marc-hanheide merged 2 commits into
mainfrom
marc-hanheide-patch-1

Conversation

@marc-hanheide

Copy link
Copy Markdown
Member

fixes #8

This pull request introduces a minor change to the Dockerfile. It adds a command to download and save the ROS archive keyring, which is likely a prerequisite for working with ROS packages.

@marc-hanheide
marc-hanheide requested a review from Copilot June 29, 2025 18:17
@marc-hanheide marc-hanheide self-assigned this Jun 29, 2025

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Adds a command to download and save the ROS archive keyring early in the Docker build process.

  • Introduces a curl step to fetch the ROS GPG key before package operations
  • Keeps subsequent apt-get update && apt-get upgrade intact
Comments suppressed due to low confidence (1)

Dockerfile:8

  • Ensure that curl (and any required SSL certificates) is installed before this RUN step; consider combining it with the apt-get install command to avoid missing dependencies and extra layers.
RUN curl -sSL https://raw.githubusercontent.com/ros/rosdistro/master/ros.key -o /usr/share/keyrings/ros-archive-keyring.gpg

Comment thread Dockerfile Outdated

ENV DEBIAN_FRONTEND=noninteractive

RUN curl -sSL https://raw.githubusercontent.com/ros/rosdistro/master/ros.key -o /usr/share/keyrings/ros-archive-keyring.gpg

Copilot AI Jun 29, 2025

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Storing GPG keys in /usr/share/keyrings is fine, but Debian guidelines recommend /etc/apt/keyrings; consider moving the key to /etc/apt/keyrings/ros-archive-keyring.gpg for consistency.

Suggested change
RUN curl -sSL https://raw.githubusercontent.com/ros/rosdistro/master/ros.key -o /usr/share/keyrings/ros-archive-keyring.gpg
RUN mkdir -p /etc/apt/keyrings && curl -sSL https://raw.githubusercontent.com/ros/rosdistro/master/ros.key -o /etc/apt/keyrings/ros-archive-keyring.gpg

Copilot uses AI. Check for mistakes.
@marc-hanheide
marc-hanheide merged commit 466bca4 into main Jun 29, 2025
5 checks passed
@marc-hanheide
marc-hanheide deleted the marc-hanheide-patch-1 branch June 29, 2025 20:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[BUG]: Open Robotics GPG Key Expired

2 participants