Merge #1019: ci: Fix verify commits ci

40722b7 ci: Fix verify commits ci (Ava Chow)

Pull request description:

  Fixes #987 (comment)

  https://cirrus-ci.com/task/4947246632927232 is a sample run on a slightly modified version so that it would work on this pr branch.

ACKs for top commit:
  laanwj:
    ACK 40722b7

Tree-SHA512: 549de6068c56a3811a077fd70affd879b76fd89ca1c5575f6f0c6c004fd55c803860b8fc3683bf72a8d2d08d4bd29266a663d646452e573f73cb20e82b27ff53

Author: fanquake

.cirrus.yml

@@ -43,5 +43,13 @@ task:
   only_if: $CIRRUS_BRANCH == 'master'
   container:
     image: debian:latest
+  install_script:
+    - apt update
+    - >
+      apt install -y
+      git
+      gnupg
   verify_script:
+    - mapfile -t KEYS < contrib/verify-commits/trusted-keys
+    - gpg --keyserver hkps://keys.openpgp.org --recv-keys "${KEYS[@]}"
     - ./contrib/verify-commits/verify-commits.sh