Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Follow ROS security updates & remove EOL distro Indigo #1319

Closed
1 of 2 tasks
MichaelGrupp opened this issue Jun 13, 2019 · 2 comments
Closed
1 of 2 tasks

Follow ROS security updates & remove EOL distro Indigo #1319

MichaelGrupp opened this issue Jun 13, 2019 · 2 comments

Comments

@MichaelGrupp
Copy link
Contributor

MichaelGrupp commented Jun 13, 2019

GPG keys of pakages.ros.org have changed because of a security issue:
https://discourse.ros.org/t/security-issue-on-ros-build-farm/9342
https://discourse.ros.org/t/new-gpg-keys-deployed-for-packages-ros-org/9454

The melodic base image of cartographer_ros has the outdated key. This leads to problems while updating rosdeps (if no caching is used), see this CI log of our dummy repository:

Err:2 http://packages.ros.org/ros/ubuntu bionic InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY F42ED6FBAB17C654

Additionally, ROS Indigo has reached EOL and can be removed from CI builds. They are currently broken because of that.


@bochen87
Copy link
Contributor

@MichaelGrupp I just noticed CI is broken since merge of #1379
Do you know who has access to the melodic base image? It seems to be stored on the Google Cloud Platform

@bochen87
Copy link
Contributor

should be fixed by #1484

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants