From fe6baacdd307ef894764eef3cd2476d9538c2a5d Mon Sep 17 00:00:00 2001 From: Jean-Christophe Fillion-Robin Date: Mon, 21 Jul 2025 18:26:10 -0400 Subject: [PATCH] fix(install-gosu-binary): Prefer checking key from server using "hkps" protocol --- imagefiles/install-gosu-binary.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/imagefiles/install-gosu-binary.sh b/imagefiles/install-gosu-binary.sh index 76f1477..bb01403 100755 --- a/imagefiles/install-gosu-binary.sh +++ b/imagefiles/install-gosu-binary.sh @@ -56,6 +56,7 @@ url_key="https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-$ # download and verify the signature export GNUPGHOME="$(mktemp -d)" +gpg --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 || \ gpg --keyserver hkp://pool.sks-keyservers.net:80 --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 || \ gpg --keyserver hkp://pgp.key-server.io:80 --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 || \ gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4