无法在Debian11上升级Jenkins，公钥不可用: NO_PUBKEY FCEF32E745F2C3D5

Question

我试着升级詹金斯。

我使用了使用gpg键的新方法：

wget https://pkg.jenkins.io/debian-stable/jenkins.io.key 
gpg --dearmor jenkins.io.key
mv jenkins.io.key.gpg /usr/share/keyrings/jenkins-keyring.asc

cat /etc/apt/sources.list.d/jenkins.list

deb [signed-by=/usr/share/keyrings/jenkins-keyring.asc] https://pkg.jenkins.io/debian-stable binary/

apt-键：

apt-key list | grep -i jenkins # nothing

# file /usr/share/keyrings/jenkins-keyring.asc
/usr/share/keyrings/jenkins-keyring.asc: PGP/GPG key public ring (v4) created Mon Mar 30 15:10:17 2020 RSA (Encrypt or Sign) 4096 bits MPI=0x99a14538d6e6150d...

但是当我运行apt update时：

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://pkg.jenkins.io/debian-stable binary/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY FCEF32E745F2C3D5
W: Failed to fetch https://pkg.jenkins.io/debian-stable/binary/Release.gpg  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY FCEF32E745F2C3D5
W: Some index files failed to download. They have been ignored, or old ones used instead.

怎么了？

Answer 1

存储库签名密钥被更改。

从2023年3月28日开始，Jenkins每周发行版将为Linux安装包使用新的存储库签名密钥。从2023年4月5日开始，Jenkins LTS的发布也将发生同样的变化。Linux系统的管理员必须在安装Jenkins周报2.397或Jenkins 2.387.2之前在其Linux服务器上安装新的签名密钥。

https://www.jenkins.io/blog/2023/03/27/repository-signing-keys-changing/

安装新的签名密钥，直到4月5日才更新由新密钥签名的存储库。