You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We have signed artifacts and keys so we might as well use them as intended vs checksums. It turns out, embedding the keys adds more complexity than I'm OK with ( psftw@465e064 ). Splitting up the single RUN command similarly without embedding keys would also help with flakiness, which seems like the right approach.
Note: the original GitHub repository was deleted recently, so we've lost all the issues/discussion 😢
Building this image is difficult due to issues with GnuPG and key servers. More details in https://github.com/docker-library/faq#openpgp--gnupg-keys-and-verification
The most straight-forward solution would be to directly embed the keys in this repository, though this is not ideal.
The text was updated successfully, but these errors were encountered: