debsig: Failed verification for msft-git.deb. #706
Description
Snippet from readme doesn't work out of the box:
⬢ [Docker] ❯ lsb_release -d
No LSB modules are available.
Description: Debian GNU/Linux 12 (bookworm)
⬢ [Docker] ❯ grep FROM .devcontainer/Dockerfile
FROM mcr.microsoft.com/devcontainers/typescript-node:1-22-bookworm
⬢ [Docker] ❯ .devcontainer/git.sh
+ sudo apt-get install -y curl debsig-verify
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
curl is already the newest version (7.88.1-10+deb12u8).
Suggested packages:
debian-keyring debsigs
The following NEW packages will be installed:
debsig-verify
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 37.1 kB of archives.
After this operation, 102 kB of additional disk space will be used.
Get:1 http://deb.debian.org/debian bookworm/main amd64 debsig-verify amd64 0.28+b3 [37.1 kB]
Fetched 37.1 kB in 0s (197 kB/s)
Selecting previously unselected package debsig-verify.
(Reading database ... 48238 files and directories currently installed.)
Preparing to unpack .../debsig-verify_0.28+b3_amd64.deb ...
Unpacking debsig-verify (0.28+b3) ...
Setting up debsig-verify (0.28+b3) ...
Processing triggers for man-db (2.11.2-2) ...
+ curl -s https://api.github.com/repos/microsoft/git/releases/latest
+ grep -E 'browser_download_url.*msft-git-public.asc'
+ cut -d : -f 2,3
+ tr -d '"'
+ xargs -I url curl -L -o msft-git-public.asc url
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
100 2468 100 2468 0 0 3592 0 --:--:-- --:--:-- --:--:-- 6652
+ gpg --output msft-git-public.gpg --dearmor msft-git-public.asc
+ gpg --show-keys msft-git-public.asc
+ head -n 2
+ tail -n 1
+ tail -c 17
B8F12E25441124E1
+ sudo mkdir /usr/share/debsig/keyrings/B8F12E25441124E1
+ sudo mv msft-git-public.gpg /usr/share/debsig/keyrings/B8F12E25441124E1/
+ sudo mkdir /etc/debsig/policies/B8F12E25441124E1
+ cat
+ sudo mv generic.pol /etc/debsig/policies/B8F12E25441124E1/generic.pol
+ curl -s https://api.github.com/repos/microsoft/git/releases/latest
+ grep 'browser_download_url.*deb'
+ cut -d : -f 2,3
+ xargs -I url curl -L -o msft-git.deb url
+ tr -d '"'
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- 0:00:08 --:--:-- 0
100 66.2M 100 66.2M 0 0 5700k 0 0:00:11 0:00:11 --:--:-- 25.0M
+ debsig-verify msft-git.deb
debsig: Failed verification for msft-git.deb.
I came from here: