Trust the Intel OneAPI PGP key until it satisfies new APT PGP requirments (#692)

Signed-off-by: Yuki Iwai <yuki.iwai.tz@gmail.com>
This commit is contained in:
Yuki Iwai 2025-04-14 16:21:08 +09:00 committed by GitHub
parent 90615e9b75
commit 44941a1631
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 6 additions and 2 deletions

View File

@ -11,7 +11,9 @@ RUN apt update \
&& apt install -y --no-install-recommends gnupg2 ca-certificates apt-transport-https \
&& gpg --dearmor -o /usr/share/keyrings/oneapi-archive-keyring.gpg /tmp/key.PUB \
&& rm /tmp/key.PUB \
&& echo "deb [signed-by=/usr/share/keyrings/oneapi-archive-keyring.gpg] https://apt.repos.intel.com/oneapi all main" | tee /etc/apt/sources.list.d/oneAPI.list \
# TODO (tenzen-y): Once Intel OneAPI supports new parsable PGP format for apt, we should remove `trusted=yes` option.
# REF: https://github.com/kubeflow/mpi-operator/issues/691
&& echo "deb [signed-by=/usr/share/keyrings/oneapi-archive-keyring.gpg trusted=yes] https://apt.repos.intel.com/oneapi all main" | tee /etc/apt/sources.list.d/oneAPI.list \
&& apt update \
&& apt install -y --no-install-recommends \
libstdc++-12-dev binutils procps clang \

View File

@ -13,7 +13,9 @@ RUN apt update \
&& apt install -y --no-install-recommends gnupg2 ca-certificates apt-transport-https \
&& gpg --dearmor -o /usr/share/keyrings/oneapi-archive-keyring.gpg /tmp/key.PUB \
&& rm /tmp/key.PUB \
&& echo "deb [signed-by=/usr/share/keyrings/oneapi-archive-keyring.gpg] https://apt.repos.intel.com/oneapi all main" | tee /etc/apt/sources.list.d/oneAPI.list \
# TODO (tenzen-y): Once Intel OneAPI supports new parsable PGP format for apt, we should remove `trusted=yes` option.
# REF: https://github.com/kubeflow/mpi-operator/issues/691
&& echo "deb [signed-by=/usr/share/keyrings/oneapi-archive-keyring.gpg trusted=yes] https://apt.repos.intel.com/oneapi all main" | tee /etc/apt/sources.list.d/oneAPI.list \
&& apt update \
&& apt install -y --no-install-recommends \
dnsutils \