Skip to content

GH-49521: [CI][Packaging] Try removing KEY that seems bad from downloaded KEYS file#49525

Merged
kou merged 2 commits intoapache:mainfrom
raulcd:GH-49521
Mar 16, 2026
Merged

GH-49521: [CI][Packaging] Try removing KEY that seems bad from downloaded KEYS file#49525
kou merged 2 commits intoapache:mainfrom
raulcd:GH-49521

Conversation

@raulcd
Copy link
Member

@raulcd raulcd commented Mar 16, 2026

Rationale for this change

Some CI jobs fail validating a newly added GPG key.

What changes are included in this PR?

Remove this key from the processed ones on the packaging jobs as we do with others similar.

Are these changes tested?

Yes on CI

Are there any user-facing changes?

No

@raulcd raulcd added the CI: Extra: Package: Linux Run extra Linux Packages CI label Mar 16, 2026
@github-actions
Copy link

⚠️ GitHub issue #49521 has been automatically assigned in GitHub to PR creator.

@github-actions github-actions bot added the awaiting committer review Awaiting committer review label Mar 16, 2026
@raulcd raulcd marked this pull request as ready for review March 16, 2026 16:26
@raulcd
Copy link
Member Author

raulcd commented Mar 16, 2026

@kou I am not sure why the newly added key from @jbonofre made the jobs fail. If we skip it (as we do with a couple others) the jobs are successful again

@raulcd
Copy link
Member Author

raulcd commented Mar 16, 2026

Something about SHA1?

   Key imported successfully
  Importing GPG key 0xC8282E76:
   Userid     : "Jean-Baptiste Onofré <jbonofre@apache.org>"
   Fingerprint: 1AA8 CF92 D409 A733 93D0 B736 BFF2 EE42 C828 2E76
   From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-Apache-Arrow
  warning: Signature not supported. Hash algorithm SHA1 not available.
  Extra Packages for Enterprise Linux 9 - aarch64 1.6 MB/s | 1.6 kB     00:00   

Copy link
Member

@kou kou left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1

Yes. Newer distributions don't accept SHA1 for security.

@kou kou merged commit 9082b47 into apache:main Mar 16, 2026
59 of 60 checks passed
@kou kou removed the awaiting committer review Awaiting committer review label Mar 16, 2026
@github-actions github-actions bot added the awaiting merge Awaiting merge label Mar 16, 2026
@conbench-apache-arrow
Copy link

After merging your PR, Conbench analyzed the 3 benchmarking runs that have been run so far on merge-commit 9082b47.

There were no benchmark performance regressions. 🎉

The full Conbench report has more details. It also includes information about 1 possible false positive for unstable benchmarks that are known to sometimes produce them.

@raulcd raulcd deleted the GH-49521 branch March 17, 2026 09:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

awaiting merge Awaiting merge CI: Extra: Package: Linux Run extra Linux Packages CI

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants