Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix Intel APT ONEAPI repository signature verification #502

Open
wants to merge 5 commits into
base: master
Choose a base branch
from

Conversation

kristofkessler
Copy link
Contributor

@kristofkessler kristofkessler commented Oct 10, 2024

Pull Request Description

We are receiving a signature verification issue when using the Intel APT OneAPI repository. The pull request fixes this issue by explicitly indicating the GPG Key used for the repository.

Signature verification issue:

#17 [12/26] RUN mkdir -p /usr/share/keyrings &&     rm -f /usr/share/keyrings/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2023.gpg &&     wget -qO - https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2023.PUB | gpg --dearmor -o /usr/share/keyrings/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2023.gpg &&     echo "deb https://apt.repos.intel.com/oneapi all main" >> /etc/apt/sources.list.d/hpccm.list &&     apt-get update -y &&     DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends         intel-oneapi-mkl-devel-2021.4.0 &&     rm -rf /var/lib/apt/lists/*

#17 0.540 Get:1 https://apt.repos.intel.com/oneapi all InRelease [5680 B]

#17 0.696 Get:2 http://security.ubuntu.com/ubuntu noble-security InRelease [126 kB]

#17 0.751 Err:1 https://apt.repos.intel.com/oneapi all InRelease

#17 0.751   The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BAC6F0C353D04109

#17 0.928 Get:3 http://archive.ubuntu.com/ubuntu noble InRelease [256 kB]

#17 1.055 Get:4 http://security.ubuntu.com/ubuntu noble-security/main amd64 Packages [479 kB]

#17 1.354 Get:5 http://security.ubuntu.com/ubuntu noble-security/universe amd64 Packages [370 kB]

#17 1.614 Get:6 http://security.ubuntu.com/ubuntu noble-security/restricted amd64 Packages [446 kB]

#17 1.803 Get:7 http://archive.ubuntu.com/ubuntu noble-updates InRelease [126 kB]

#17 1.834 Get:8 http://security.ubuntu.com/ubuntu noble-security/multiverse amd64 Packages [13.7 kB]

#17 2.521 Get:9 http://archive.ubuntu.com/ubuntu noble-backports InRelease [126 kB]

#17 3.562 Get:10 http://archive.ubuntu.com/ubuntu noble/main amd64 Packages [1808 kB]

#17 5.624 Get:11 http://archive.ubuntu.com/ubuntu noble/restricted amd64 Packages [117 kB]

#17 6.326 Get:12 http://archive.ubuntu.com/ubuntu noble/multiverse amd64 Packages [331 kB]

#17 7.501 Get:13 http://archive.ubuntu.com/ubuntu noble/universe amd64 Packages [19.3 MB]

#17 80.92 Ign:14 http://archive.ubuntu.com/ubuntu noble-updates/multiverse amd64 Packages

#17 82.01 Get:15 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 Packages [682 kB]

#17 83.61 Get:16 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 Packages [512 kB]

#17 84.60 Get:17 http://archive.ubuntu.com/ubuntu noble-updates/restricted amd64 Packages [446 kB]

#17 85.40 Get:18 http://archive.ubuntu.com/ubuntu noble-backports/universe amd64 Packages [11.8 kB]

#17 85.52 Get:14 http://archive.ubuntu.com/ubuntu noble-updates/multiverse amd64 Packages [17.8 kB]

#17 85.55 Reading package lists...

#17 86.21 W: GPG error: https://apt.repos.intel.com/oneapi all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BAC6F0C353D04109

#17 86.21 E: The repository 'https://apt.repos.intel.com/oneapi all InRelease' is not signed.

#17 ERROR: process "/bin/sh -c mkdir -p /usr/share/keyrings &&     rm -f /usr/share/keyrings/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2023.gpg &&     wget -qO - https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2023.PUB | gpg --dearmor -o /usr/share/keyrings/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2023.gpg &&     echo \"deb https://apt.repos.intel.com/oneapi all main\" >> /etc/apt/sources.list.d/hpccm.list &&     apt-get update -y &&     DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends         intel-oneapi-mkl-devel-2021.4.0 &&     rm -rf /var/lib/apt/lists/*" did not complete successfully: exit code: 100

------

 > [12/26] RUN mkdir -p /usr/share/keyrings &&     rm -f /usr/share/keyrings/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2023.gpg &&     wget -qO - https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2023.PUB | gpg --dearmor -o /usr/share/keyrings/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2023.gpg &&     echo "deb https://apt.repos.intel.com/oneapi all main" >> /etc/apt/sources.list.d/hpccm.list &&     apt-get update -y &&     DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends         intel-oneapi-mkl-devel-2021.4.0 &&     rm -rf /var/lib/apt/lists/*:

7.501 Get:13 http://archive.ubuntu.com/ubuntu noble/universe amd64 Packages [19.3 MB]

80.92 Ign:14 http://archive.ubuntu.com/ubuntu noble-updates/multiverse amd64 Packages

82.01 Get:15 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 Packages [682 kB]

83.61 Get:16 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 Packages [512 kB]

84.60 Get:17 http://archive.ubuntu.com/ubuntu noble-updates/restricted amd64 Packages [446 kB]

85.40 Get:18 http://archive.ubuntu.com/ubuntu noble-backports/universe amd64 Packages [11.8 kB]

85.52 Get:14 http://archive.ubuntu.com/ubuntu noble-updates/multiverse amd64 Packages [17.8 kB]


86.21 W: GPG error: https://apt.repos.intel.com/oneapi all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BAC6F0C353D04109

86.21 E: The repository 'https://apt.repos.intel.com/oneapi all InRelease' is not signed.

Author Checklist

  • Updated documentation (pydocmd generate) if any docstrings have been modified -> not applicable
  • Passes all unit tests

hpccm/building_blocks/mkl.py Outdated Show resolved Hide resolved
hpccm/building_blocks/mkl.py Outdated Show resolved Hide resolved
@samcmill
Copy link
Collaborator

The test cases need to be updated for _apt_key=False, but otherwise looks good to me.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants