我如何获取 ksplice 的公钥?

我如何获取 ksplice 的公钥?

(我知道安装第三方软件包会带来理论上的安全风险。)

我在用拼接为正在运行的系统应用内核更新。安装后,我无法运行

sudo apt-get update

不再有抱怨:

Get:8 http://www.ksplice.com/apt focal InRelease [3.483 B]              
Err:8 http://www.ksplice.com/apt focal InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 82562EA9AD986DA3
Reading package lists... Done
W: GPG error: http://www.ksplice.com/apt focal InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 82562EA9AD986DA3
E: The repository 'http://www.ksplice.com/apt focal InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

这是可以预料到的,我认为我可以通过以下方式安装公钥:

sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 82562EA9AD986DA3

尽管通过以下方式失败:

gpg: keyserver receive failed: No data

我假设我使用了错误的密钥服务器。我在谷歌上搜索密钥哈希时找不到任何结果,而且用户指南也没有提供任何关于密钥的提示。

我可以在哪里获取 ksplice 的公钥?


NObert 提出的解决方案不起作用,它仍然抱怨:

$ cat ksplice-archive.asc 
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.6 (GNU/Linux)

mQENBEoTaW8BCADXQtpKT5gzOC+/Me50Z07GHfZqkjAThrY+XGhKenklDrZA8nXe
FDcmlmMvfeSViP5UH+X7tzjUFT2FcUh65+Onggi/J9nFIDweQXxpzDYyWCK+B0RX
InKsq3TfEs5G0yIfYuKi/pgLYkFBls0stWC+1BS+3Lx4uDRTb/44D4LgzHKoAfy1
Soho8nDDL1pWEpQAq/5yVSgRc1Vvs1s+CmR8zE5gVi3cfGS0kigdfZJVEdAY/w99
t3abgYo1Eq3+Vc1bb+5DiEQZlZsWxWglQlvSyx60U2oxr05Ki+3ZyBomfFCTfL2m
fzzJ8cyglzNhFKhyFQIHqzoPR+Sxl8ppcnEJABEBAAG0NktzcGxpY2UgQVBUIFJl
cG9zaXRvcnkgU2lnbmluZyBLZXkgPGRldmVsQGtzcGxpY2UuY29tPokBNgQTAQgA
IAUCShNpbwIbAwULCQgHAwQVCgkIBRYCAwEAAh4BAheAAAoJEPfKYmW21AOO/pUH
/jKDtB3iRU2B4jii71CSFyFaz3BvJvgRMmIf53L85h3sUvqeVJiy8MoreWeoxst9
uJBnp8W61QwolCbU6awqdZ2ywRi7JyYNopaEKptxJ3EgBYm+Dq0S7srQK0qCMdRX
k7OrhCoJEmev7SazhpdIkMWPtRyksgktBMlwQ5/PyLyW+mP3a8ujYDjMIqzScyDV
YBTKK8HtXaLb6Y2Fu4jinAm4YLP3XfnAyNE1Xi9fkzTBWgC4AZ4wctQWxViu6Q91
HBB1xBjQYD6aCrPLB8/EtYO6n9UoIov6We8qwDDq7oufEKt8/uLXsomEbaWgOqAv
wZzpU6ZHueA8JEmNQYzf6pU=
=8Hod
-----END PGP PUBLIC KEY BLOCK-----
$ sudo apt-key add ksplice-archive.asc
OK

 $ sudo apt update
Hit:1 http://ppa.launchpad.net/phoerious/keepassxc/ubuntu focal InRelease
Hit:2 http://de.archive.ubuntu.com/ubuntu focal InRelease                                 
Get:3 http://security.ubuntu.com/ubuntu focal-security InRelease [107 kB]                 
Hit:4 http://de.archive.ubuntu.com/ubuntu focal-updates InRelease                         
Hit:5 http://dl.google.com/linux/chrome/deb stable InRelease                              
Hit:6 https://download.docker.com/linux/ubuntu focal InRelease                            
Hit:7 http://de.archive.ubuntu.com/ubuntu focal-backports InRelease                       
Get:8 http://www.ksplice.com/apt focal InRelease [3.483 B]                         
Err:8 http://www.ksplice.com/apt focal InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 82562EA9AD986DA3
Reading package lists... Done
W: GPG error: http://www.ksplice.com/apt focal InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 82562EA9AD986DA3
E: The repository 'http://www.ksplice.com/apt focal InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

答案1

您必须遵循位于的 Ubuntu 文档https://wiki.ubuntu.com/Ksplice然后使用它的命令来添加密钥

sudo wget -N https://www.ksplice.com/apt/ksplice-archive.asc
sudo apt-key add ksplice-archive.asc

相关内容