R SIG Debian - Mar 2021 - Solution to apt-key depreciation

Michael,

Sounds great!

If it's any help, I put my solution in a bash script:

#!/bin/bash
KEY=/usr/local/share/keyrings/marutter.key

if [ -f "$KEY" ]; then
  echo "$KEY already exists"
  sudo apt install -y r-base
else
  wget -q -O marutter.key
"https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xe298a3a825c0d65dfd57cbb651716619e084dab9"
  if ! file marutter.key | grep -q "PGP public key"; then
    echo "marutter.key does not appear to be a valid PGP key -
aborting!"
    exit 1
  else
    sudo mkdir -p /usr/local/share/keyrings/
    sudo mv marutter.key /usr/local/share/keyrings/
    echo "deb [signed-by=/usr/local/share/keyrings/marutter.key]
https://cloud.r-project.org/bin/linux/ubuntu groovy-cran40/" | sudo tee -a
/etc/apt/sources.list
 fi
 sudo apt install -y r-base
fi

Nothing fancy by any means, but it works and could perhaps be useful.

Cheers,
Carl

Sent with ProtonMail Secure Email.

??????? Original Message ???????

On Wednesday, March 17th, 2021 at 16:04, Michael Rutter <marutter at
gmail.com> wrote:
> On 3/17/21 7:27 AM, Carl Delfin wrote:
>
> > Hi everyone,
> >
> > Since apt-key will be deprecated in future releases of Debian
(https://manpages.debian.org/testing/apt/apt-key.8.en.html), I recently got
around to figuring out how to properly import Michael Rutter's key, based on
this answer over at askubuntu: https://askubuntu.com/a/1307181.
> >
> > Perhaps something along those lines should be added to the README at
https://cran.r-project.org/bin/linux/ubuntu/fullREADME.html?
> >
> > Cheers,
> >
> > Carl
>
> Carl,
>
> Thank you. I need to read these posts over to see if the instructions
>
> can be condensed, but this is very helpful.
>
> Michael
>
> > Sent with ProtonMail Secure Email.
> >
> > [[alternative HTML version deleted]]
> >
> > R-SIG-Debian mailing list
> >
> > R-SIG-Debian at r-project.org
> >
> > https://stat.ethz.ch/mailman/listinfo/r-sig-debian
>
> R-SIG-Debian mailing list
>
> R-SIG-Debian at r-project.org
>
> https://stat.ethz.ch/mailman/listinfo/r-sig-debian

Hi all,

thanks for thoughts and valuable information on this issue. I think it will 
not make the CRAN repositories any safer to use. But I believe it will 
increase security of Debian/Ubuntu repositories in general.

As bullseye will still contain apt-key and Debians release cycle is a bit more 
relaxed, I can still afford to sit back for a while and watch...

Greetings,

Johannes

Am Mittwoch, 17. M?rz 2021, 16:52:17 CET schrieb Carl
Delfin:
> Michael,
> 
> Sounds great!
> 
> If it's any help, I put my solution in a bash script:
> 
> #!/bin/bash
> KEY=/usr/local/share/keyrings/marutter.key
> 
> if [ -f "$KEY" ]; then
>   echo "$KEY already exists"
>   sudo apt install -y r-base
> else
>   wget -q -O marutter.key
>
"https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xe298a3a825c0d65dfd
> 57cbb651716619e084dab9" if ! file marutter.key | grep -q "PGP
public key";
> then
>     echo "marutter.key does not appear to be a valid PGP key -
aborting!"
>     exit 1
>   else
>     sudo mkdir -p /usr/local/share/keyrings/
>     sudo mv marutter.key /usr/local/share/keyrings/
>     echo "deb [signed-by=/usr/local/share/keyrings/marutter.key]
> https://cloud.r-project.org/bin/linux/ubuntu groovy-cran40/" | sudo
tee -a
> /etc/apt/sources.list fi
>  sudo apt install -y r-base
> fi
> 
> Nothing fancy by any means, but it works and could perhaps be useful.
> 
> Cheers,
> Carl
> 
> Sent with ProtonMail Secure Email.
> 
> ??????? Original Message ???????
> 
> On Wednesday, March 17th, 2021 at 16:04, Michael Rutter <marutter at
gmail.com>
wrote:
> > On 3/17/21 7:27 AM, Carl Delfin wrote:
> > > Hi everyone,
> > > 
> > > Since apt-key will be deprecated in future releases of Debian
> > > (https://manpages.debian.org/testing/apt/apt-key.8.en.html), I
recently
> > > got around to figuring out how to properly import Michael
Rutter's key,
> > > based on this answer over at askubuntu:
> > > https://askubuntu.com/a/1307181.
> > > 
> > > Perhaps something along those lines should be added to the README
at
> > > https://cran.r-project.org/bin/linux/ubuntu/fullREADME.html?
> > > 
> > > Cheers,
> > > 
> > > Carl
> > 
> > Carl,
> > 
> > Thank you. I need to read these posts over to see if the instructions
> > 
> > can be condensed, but this is very helpful.
> > 
> > Michael
> > 
> > > Sent with ProtonMail Secure Email.
> > > 
> > > [[alternative HTML version deleted]]
> > > 
> > > R-SIG-Debian mailing list
> > > 
> > > R-SIG-Debian at r-project.org
> > > 
> > > https://stat.ethz.ch/mailman/listinfo/r-sig-debian
> > 
> > R-SIG-Debian mailing list
> > 
> > R-SIG-Debian at r-project.org
> > 
> > https://stat.ethz.ch/mailman/listinfo/r-sig-debian
> 
> _______________________________________________
> R-SIG-Debian mailing list
> R-SIG-Debian at r-project.org
> https://stat.ethz.ch/mailman/listinfo/r-sig-debian

-- 
Johannes Ranke
Wissenschaftlicher Berater
07624 8099027
https://jrwb.de