kou commented on issue #41678:
URL: https://github.com/apache/arrow/issues/41678#issuecomment-2116854924

   We may not be able to use `apache-arrow-apt-source-lastest-XXX.deb{,.asc}` 
with old  https://downloads.apache.org/arrow/KEYS because  
`apache-arrow-apt-source-lastest-XXX.deb.asc` is generated with the latest 
https://downloads.apache.org/arrow/KEYS . The latest `KEYS` may include more 
keys that aren't included in an old `KEYS`.
   
   
   How about the following instructions with `KEYS` ( 
https://apache.jfrog.io/artifactory/arrow/debian/apache-arrow-keyring.gpg is 
based on `KEYS`) that was added by 
https://github.com/zulip/zulip/commit/5ccb408f194ea54c6137f650384d6daa3173ceec 
(2023-07-28)?
   
   1. Download the followings:
      * 
https://apache.jfrog.io/artifactory/arrow/debian/pool/bullseye/main/a/apache-arrow-apt-source/apache-arrow-apt-source_13.0.0-1_all.deb
      * 
https://apache.jfrog.io/artifactory/arrow/debian/pool/bullseye/main/a/apache-arrow-apt-source/apache-arrow-apt-source_13.0.0-1_all.deb.asc
   2. Verify the downloaded `.deb` with the added `KEYS`
   3. Install the verified `.deb`
   4. Download the followings:
      * 
https://apache.jfrog.io/artifactory/arrow/debian/pool/bullseye/main/a/apache-arrow-apt-source/apache-arrow-apt-source_14.0.0-1_all.deb
      * 
https://apache.jfrog.io/artifactory/arrow/debian/pool/bullseye/main/a/apache-arrow-apt-source/apache-arrow-apt-source_14.0.0-1_all.deb.asc
   5. Verify the downloaded `.deb` with the `KEYS` included in the installed 
`apache-arrow-apt-source_13.0.0-1`
   6. Install the verified `.deb`
   7. Download `apache-arrow-apt-source_15.0.0-1_all.deb{,.asc}`
   8. ...
   
   FYI: We can detect available `apache-arrow-apt-source`s at 
https://apache.jfrog.io/ui/native/arrow/debian/pool/bullseye/main/a/apache-arrow-apt-source/
 .
   
   (We can update `apache-arrow-apt-source` by `sudo apt update && sudo apt 
upgrade` but if the old `KEYS` is too old, `sudo apt update && sudo apt 
upgrade` may not work.)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to