[winswitch] [ANNOUNCE] new Xpra GPG key
Antoine Martin
totaam at xpra.org
Fri Jun 16 17:23:36 BST 2023
Hi,
As many of you have noticed, the GPG key used for signing the packages
and repositories had expired.
Although that key's expiry date was updated to be able to continue to
use all the files that had already been signed, it seemed like a good
time to use a brand new key: a stronger, better one, and one that
belonged to the project rather being tied to my personal keychain.
After many delays and false starts, this new key is now live for all the
repositories.
New installations following the download instructions should be seamless.
Here is how you update your systems to use the new key:
* Ubuntu and Debian systems using the old "xpra.list" sources.list.d files:
wget -qO - https://xpra.org/xpra-2023.asc | sudo apt-key add -
* Ubuntu and Debian systems using the new "xpra.sources" sources.list.d
files:
sudo wget -O "/usr/share/keyrings/xpra.asc" https://xpra.org/xpra.asc
* RPM distributions:
sudo rpm --import https://xpra.org/xpra.asc
If you prefer not to use global rpm import, you can edit your existing
repository file to point to:
https://xpra.org/xpra-2023.asc
(dnf will only download the new key if the key's URL is modified)
I have made it coincide with new releases so that this key is only used
with the newer packages going forward.
All the packages signed using the previous key have been moved to the
vault (~150GB):
https://xpra.org/vault/
They will be kept around on this read-only storage for a while and
eventually moved to offline storage.
Following this email, I will be sending release announcements for:
* xpra 4.4.6
* xpra 3.1.5
* xpra-html5 8.1
* xpra-html5 5.3
Most of the packages are already available, except for some of the arm64
builds which may take a few more days to complete.
If you are still having issues with the GPG, key please see here:
https://github.com/Xpra-org/xpra/issues/3863#issuecomment-1589560042
And create new github issues as needed, specifying your full
distribution version, installation method, error messages, etc
But please wait 24 hours for the full rebuild + repository sync to complete.
Cheers
Antoine
Here is the new key "0x73254CAD17978FAF":
pub rsa4096 2023-06-10 [SC] [expires: 2033-06-07]
B499 3B57 3231 48E3 7977 E5D8 7325 4CAD 1797 8FAF
uid Xpra <xpra at xpra.org>
It is available here:
https://xpra.org/xpra.gpg
https://xpra.org/xpra.asc
And on keyservers:
https://keyserver.ubuntu.com/pks/lookup?search=0x73254CAD17978FAF&op=index
https://pgp.mit.edu/pks/lookup?search=0x73254CAD17978FAF&op=index
More information about the shifter-users
mailing list