Skip to content

Unable to verify gpg signature #9

@omars44

Description

@omars44

I'm trying to download the latest curl on a debian 11 docker base image with the following, and unable to verify with the following error: any ideas?

#0 9.767 gpg: directory '/root/.gnupg' created
#0 9.768 gpg: keybox '/root/.gnupg/pubring.kbx' created
#0 11.19 gpg: keyserver receive failed: No data

Dockerfile

# Install required packages and download the latest version of curl and its signature
RUN apt-get update && \
    apt-get install -y gnupg && \
    curl https://github.com/moparisthebest/static-curl/releases/download/v8.0.1/curl-amd64 -o /usr/local/bin/curl && \
    curl https://github.com/moparisthebest/static-curl/releases/download/v8.0.1/sha256sum.txt -o sha256sum.txt && \
    curl https://github.com/moparisthebest/static-curl/releases/download/v8.0.1/sha256sum.txt.asc -o sha256sum.txt.asc && \
    gpg --keyserver hkps://keys.openpgp.org --recv-keys 7D21F91B8D5E1C63 && \
    gpg --verify sha256sum.txt.asc sha256sum.txt && \
    sha256sum -c --ignore-missing sha256sum.txt && \
    chmod +x /usr/local/bin/curl && \
    apt-get remove -y gnupg && \
    apt-get -y autoremove && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions