Puppet Platform GPG signing was initially scheduled for November last year but it was delayed until just now.
Today I made the internal change to start signing with the updated key. On Wednesday, October 21, 2020 at 4:24:41 PM UTC-7 Eric Griswold wrote: > Why This Change > > Puppet sets its package signing keys to expire on a set schedule for good > security practices. > Summary > > On November 2, 2020, Puppet Release Engineering will start signing Puppet > Platform and Puppet Enterprise packages with an updated GPG key. > This is an explanation of how various existing users will be affected by > this change and what actions they will need to take. > > FOSS users can update their release packages and import the new GPG key > now so that when the GPG key changes, they will not see any problems > installing software. > Puppet Enterprise Users > > Puppet Enterprise users do not need to take any specific action, the GPG > change will be handled inside the PE installer. > FOSS Users > > Puppet Release Engineering updated the yum and apt release packages to > contain both the new key and the current key just before June 3, 2020. If > you have installed or updated the release package since that date you > should already have the new key. > > SLES users, however, need to take an additional step: > SLES Users > > SLES users need to take these steps. (Replace "puppet-release" with > "puppet5-release" or "puppet6-release" if you are using those packages) > > 1. > > Download the updated GPG key: $ curl --remote-name --location > https://yum.puppet.com/RPM-GPG-KEY-puppet-20250406 > 2. > > Import the updated GPG key: $ sudo rpm --import > RPM-GPG-KEY-puppet-20250406 > 3. > > Update the SLES puppet-release package $ zypper update puppet-release > > All Other FOSS users > > All other FOSS users need only upgrade to the latest puppet-release > package. (Replace "puppet-release" with "puppet5-release" or > "puppet6-release" if you are using those packages) > > For the apt users: $ sudo apt-get upgrade puppet-release > > For the yum users: $ sudo yum update puppet-release > Further Notes > > Puppet GPG signing key, 2020 edition > <https://puppet.com/blog/updated-puppet-gpg-signing-key-2020-edition> > contains this and some more information about updating the GPG key using > Puppet. > > Eric Griswold > > Puppet Release Engineering > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/30be45f7-cd44-40a9-ac95-48aa3ec79032n%40googlegroups.com.
