-
Notifications
You must be signed in to change notification settings - Fork 5
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
GPG signing key rotation for CUDA repositories #4
Comments
Adding some additional information Common errors on Debian-based distrosDuplicate
|
…py cuda dlls - CUDA gpg-key change cf. NVIDIA/cuda-repo-management#4
…py cuda dlls - CUDA gpg-key change cf. NVIDIA/cuda-repo-management#4
…py cuda dlls - CUDA gpg-key change cf. NVIDIA/cuda-repo-management#4
* - nproc * - YANEURAOU_ENGINE_MATERIAL* ビルドテストの一部省略 * - release build material lv1,lv9 * - pacboy -Syuu * - remove base-devel: from actions * - remove base-devel: * - pacman update * - POPCNT, BSF, BSR の実装パターン追加 * - MacOS * - NuGet packages bump up * - CUDA 11.6 Update 2, TensorRT 8.2 GA Update 3, cuda-nvrtc, remove copy cuda dlls - CUDA gpg-key change cf. NVIDIA/cuda-repo-management#4 * - clang-15 * - DNN_Batch_Size max 1024 * - fp16 * - .gitignore * - badge MacOS, WebAssembly * - WASM port cf. https://github.com/arashigaoka/YaneuraOu.wasm cf. https://github.com/niklasf/stockfish.wasm cf. https://github.com/hi-ogawa/Stockfish * - wasm_build * - github workflows: wasm
Method 3 does not work. There are no entries that match this format: For example, this doesn't exist: |
Hi @andresgalaviz
(Later on I will add those .list files on the website so then can just be |
CUDA: 11.2.1 |
For people who are not very skilled in Linux (like me). @kmittman 's comment on common problems is very helpful but needs some slight expansion. |
After I followed the instruction, I got the following warnings:
|
Hi @k-jeon I would suggest removing old NVIDIA local repositories from your system. For example,
New local repository installers will no longer use this key. See the CUDA Linux Installation Guide for more details for instructions on enrolling ephemeral keys. We have no plans to re-release old local repository installers, such as the two enabled on your system. These packages are available, re-signed with a new key in the CUDA network repository. |
This works for me! Thanks a lot for the prompt answer!
|
For example) https://developer.download.nvidia.com/compute/cuda/repos/ubuntu2004/x86_64/3bf863cc.pub
I use nvidia docker, I fixed it temporarily like this |
For this comment, note that the |
Thank you @kylevedder, I have updated the earlier comment. Sorry I was just going from memory. |
Hi, I am having problems updating the key, because the file has an unexpected size:
|
Blog post
Forum post
To best ensure the security and reliability of our RPM and Debian package repositories, NVIDIA is updating and rotating the GPG signing keys used by
apt
,dnf
/yum
, andzypper
package managers. Failure to update your repository signing keys will result in package management errors when attempting to access or install packages from the CUDA repositories.The new GPG public keys for the CUDA repository
To ensure continued access to the latest NVIDIA software, please complete the following steps:
For Debian-based distributions, including Ubuntu, replace
$distro/$arch
in the following commands with appropriate valueFor RPM-based distributions, including SUSE, replace
$distro/$arch
in the following commands with appropriate valueRemove Outdated Signing Key
Debian, Ubuntu, WSL
Fedora, RHEL, openSUSE, SLES
$ sudo rpm --erase gpg-pubkey-7fa2af80*
Install New Key (Debian-based distros)
Method 1:
cuda-keyring
packageTo avoid the need for manual key installation steps, NVIDIA is providing a new helper package that will automate the installation of new signing keys for the NVIDIA repositories.
Method 2:
apt-key
(deprecated)Method 3:
wget
andmv
Install New Key (RPM-based distros)
On fresh installation Fedora, RHEL, openSUSE, or SLES the dnf/yum/zypper package manager will prompt the user to accept new keys when installing packages the first time. Indicate you accept the change when prompted:
y
For upgrades existing installations, you must additionally complete the following (package manager specific) step to pick up the new key:
Fedora and RHEL 8
RHEL 7
$ sudo yum-config-manager --add-repo https://developer.download.nvidia.com/compute/cuda/repos/rhel7/$arch/cuda-rhel7.repo
openSUSE and SLES
Example error messages
apt-get
dnf
andyum
zypper
The text was updated successfully, but these errors were encountered: