From 64ea653acfe2346ee9e0cb44699d545416a3a0d9 Mon Sep 17 00:00:00 2001 From: Andrey Koltsov Date: Mon, 28 Aug 2023 10:52:13 +0200 Subject: [PATCH] [TW-83304] Agent Docker image's apt package manager doesn't trust the key of the apt Perforce repository (#101) * Add documentation about untrusted repository key @ TeamCity Server Dockerhub documentation. --------- Co-authored-by: Valrravn <37902124+Valrravn@users.noreply.github.com> --- dockerhub/teamcity-agent/README.md | 21 +++++++++++++++++++++ dockerhub/teamcity-minimal-agent/README.md | 22 ++++++++++++++++++++++ dockerhub/teamcity-server/README.md | 22 ++++++++++++++++++++++ 3 files changed, 65 insertions(+) diff --git a/dockerhub/teamcity-agent/README.md b/dockerhub/teamcity-agent/README.md index f993ffddc..2a3710f98 100644 --- a/dockerhub/teamcity-agent/README.md +++ b/dockerhub/teamcity-agent/README.md @@ -158,6 +158,27 @@ docker commit my-customized-agent +… +``` +To avoid this issue, execute this command in a container or include it in a Docker image +build step before altering packages: +``` +sudo apt-key adv --fetch-keys https://package.perforce.com/perforce.pubkey +``` + ## Feedback Report issues of suggestions to the official TeamCity [issue tracker](https://youtrack.jetbrains.com/issues/TW). diff --git a/dockerhub/teamcity-minimal-agent/README.md b/dockerhub/teamcity-minimal-agent/README.md index c633f8ee3..124b9d5a2 100644 --- a/dockerhub/teamcity-minimal-agent/README.md +++ b/dockerhub/teamcity-minimal-agent/README.md @@ -84,6 +84,28 @@ docker commit my-customized-agent +… +``` +To avoid this issue, execute this command in a container or include it in a Docker image +build step before altering packages: +``` +sudo apt-key adv --fetch-keys https://package.perforce.com/perforce.pubkey +``` + + ## Feedback Report issues of suggestions to the official TeamCity [issue tracker](https://youtrack.jetbrains.com/issues/TW). diff --git a/dockerhub/teamcity-server/README.md b/dockerhub/teamcity-server/README.md index d4b3323bc..d36733411 100644 --- a/dockerhub/teamcity-server/README.md +++ b/dockerhub/teamcity-server/README.md @@ -164,6 +164,28 @@ If you changed the image, you will need to replicate the changes to the new Team The image is available under the [TeamCity license](https://www.jetbrains.com/teamcity/buy/license.html). TeamCity is free for perpetual use with the limitation of 100 build configurations (jobs) and 3 agents. [Licensing details](https://www.jetbrains.com/help/teamcity/licensing-policy.html). +## Troubleshooting + +### Apt manager distrusts the apt Perforce repository key + +This issue may occur for Docker images released **prior to August 14, 2023** +([TW-83304](https://youtrack.jetbrains.com/issue/TW-83304/Agent-Docker-images-apt-package-manager-doesnt-trust-the-key-of-the-apt-Perforce-repository)). + +The [Perforce Package key](https://www.perforce.com/perforce-packages) expired and was updated on August 14, 2023. This results in the following error that occurs if you modify the `apt` packages in images based on containers released before this date: +``` +$ apt-get update +... +Err:15 https://package.perforce.com/apt/ubuntu focal InRelease + The following signatures were invalid: EXPKEYSIG 7123CB760FF18869 Perforce Software (Package Signing) +… +``` +To avoid this issue, execute this command in a container or include it in a Docker image +build step before altering packages: +``` +sudo apt-key adv --fetch-keys https://package.perforce.com/perforce.pubkey +``` + + ## Feedback Report issues of suggestions to the official TeamCity [issue tracker](https://youtrack.jetbrains.com/issues/TW).