fix(repo): Dearmor GPG key on import in install.sh (ref #80)

The served keyring at /secubox-keyring.gpg is ASCII-armored, but
apt's signed-by= expects the binary OpenPGP format. Without
gpg --dearmor, apt rejects InRelease with NO_PUBKEY.

Verified end-to-end from a fresh bookworm chroot:
  curl -fsSL https://apt.secubox.in/install.sh | bash
  apt-get update      # Hit: https://apt.secubox.in bookworm InRelease
  apt-cache search secubox    # 15 packages listed

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
CyberMind-FR 2026-05-12 10:09:09 +02:00
parent 1bd9daaefa
commit 676b842f23

View File

@ -48,7 +48,7 @@ apt-get install -y -qq curl gnupg ca-certificates >/dev/null
# Download and install GPG key
log "Adding GPG key..."
curl -fsSL "${REPO_URL}/secubox-keyring.gpg" | tee "${KEYRING_PATH}" >/dev/null
curl -fsSL "${REPO_URL}/secubox-keyring.gpg" | gpg --dearmor | tee "${KEYRING_PATH}" >/dev/null
chmod 644 "${KEYRING_PATH}"
ok "GPG key installed"