Skip to content

Conversation

@theihor
Copy link
Contributor

@theihor theihor commented Feb 3, 2026

TL;DR Don't use llvm.sh on Debian.

There are a couple of issues with using official llvm.sh installation script on recent debians. The first one is this:

61.12 W: OpenPGP signature verification failed:
https://apt.llvm.org/unstable llvm-toolchain-21 InRelease: Sub-process
/usr/bin/sqv returned an error code (1), error message is: Signing key
on 6084F3CF814B57C1CF12EFD515CF4D18AF4F7421 is not bound:
No binding signature at time 2025-12-21T23:13:57Z   because: Policy
rejected non-revocation signature (PositiveCertification) requiring
second pre-image resistance   because: SHA1 is not considered secure
since 2026-02-01T00:00:00Z

Which requires updates on LLVM distribution side.

The second is that debian removed software-properties-common package due to a bug [1].

All this is unimportant on Debian though, because LLVM 21 is available in default debian PPAs. So simply install llvm packages directly, if we are on Debian.

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038747

TL;DR Don't use llvm.sh on Debian.

There are a couple of issues with using official llvm.sh installation
script on recent debians. The first one is this:

    61.12 W: OpenPGP signature verification failed:
    https://apt.llvm.org/unstable llvm-toolchain-21 InRelease: Sub-process
    /usr/bin/sqv returned an error code (1), error message is: Signing key
    on 6084F3CF814B57C1CF12EFD515CF4D18AF4F7421 is not bound:
    No binding signature at time 2025-12-21T23:13:57Z   because: Policy
    rejected non-revocation signature (PositiveCertification) requiring
    second pre-image resistance   because: SHA1 is not considered secure
    since 2026-02-01T00:00:00Z

Which requires updates on LLVM distribution side.

The second is that debian removed software-properties-common package
due to a bug [1].

All this is unimportant on Debian though, because LLVM 21 is available
in default debian PPAs. So simply install llvm packages directly, if
we are on Debian.

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038747
@theihor theihor merged commit af3742c into main Feb 3, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants