Skip to content

Commit 07e84f6

Browse files
marcoandredinismarcoandredinis
committed
Teleport Install scripts: use /etc/apt/trusted.gpg.d/ for DEB packages
1 parent f93eca5 commit 07e84f6

File tree

7 files changed

+20
-20
lines changed

7 files changed

+20
-20
lines changed

‎api/types/installers/agentless-installer.sh.tmpl

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -123,8 +123,8 @@ install_teleport() {
123123
echo "deb https://apt.releases.teleport.dev/ubuntu ${VERSION_CODENAME?} {{ .RepoChannel }}" | sudo tee /etc/apt/sources.list.d/teleport.list
124124
rm /tmp/teleport-pubkey.asc
125125
else
126-
curl https://apt.releases.teleport.dev/gpg | sudo tee /usr/share/keyrings/teleport-archive-keyring.asc
127-
echo "deb [signed-by=/usr/share/keyrings/teleport-archive-keyring.asc] https://apt.releases.teleport.dev/${ID?} ${VERSION_CODENAME?} {{ .RepoChannel }}" | sudo tee /etc/apt/sources.list.d/teleport.list >/dev/null
126+
curl https://apt.releases.teleport.dev/gpg | sudo tee /etc/apt/trusted.gpg.d/teleport-archive-keyring.asc
127+
echo "deb [signed-by=/etc/apt/trusted.gpg.d/teleport-archive-keyring.asc] https://apt.releases.teleport.dev/${ID?} ${VERSION_CODENAME?} {{ .RepoChannel }}" | sudo tee /etc/apt/sources.list.d/teleport.list >/dev/null
128128
fi
129129
sudo apt-get update
130130

‎assets/install-scripts/install-connect.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -129,9 +129,9 @@ add_apt_key() {
129129
TMP_KEY="$TEMP_DIR/teleport-pubkey.gpg"
130130
download "https://apt.releases.teleport.dev/gpg" "$TMP_KEY"
131131
set -x
132-
cat $TMP_KEY | $SUDO tee /usr/share/keyrings/teleport-archive-keyring.asc >/dev/null
132+
cat $TMP_KEY | $SUDO tee /etc/apt/trusted.gpg.d/teleport-archive-keyring.asc >/dev/null
133133
set +x
134-
TELEPORT_REPO="deb [signed-by=/usr/share/keyrings/teleport-archive-keyring.asc] https://apt.releases.teleport.dev/${APT_REPO_ID?} ${APT_REPO_VERSION_CODENAME?} stable/v${MAJOR}"
134+
TELEPORT_REPO="deb [signed-by=/etc/apt/trusted.gpg.d/teleport-archive-keyring.asc] https://apt.releases.teleport.dev/${APT_REPO_ID?} ${APT_REPO_VERSION_CODENAME?} stable/v${MAJOR}"
135135
fi
136136

137137
set -x

‎assets/install-scripts/install.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -129,9 +129,9 @@ add_apt_key() {
129129
TMP_KEY="$TEMP_DIR/teleport-pubkey.gpg"
130130
download "https://apt.releases.teleport.dev/gpg" "$TMP_KEY"
131131
set -x
132-
$SUDO cp "$TMP_KEY" /usr/share/keyrings/teleport-archive-keyring.asc
132+
$SUDO cp "$TMP_KEY" /etc/apt/trusted.gpg.d/teleport-archive-keyring.asc
133133
set +x
134-
TELEPORT_REPO="deb [signed-by=/usr/share/keyrings/teleport-archive-keyring.asc] https://apt.releases.teleport.dev/${APT_REPO_ID?} ${APT_REPO_VERSION_CODENAME?} ${CHANNEL}"
134+
TELEPORT_REPO="deb [signed-by=/etc/apt/trusted.gpg.d/teleport-archive-keyring.asc] https://apt.releases.teleport.dev/${APT_REPO_ID?} ${APT_REPO_VERSION_CODENAME?} ${CHANNEL}"
135135
fi
136136

137137
set -x

‎lib/srv/server/installer/autodiscover_test.go

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -745,16 +745,16 @@ func TestAutoDiscoverNode(t *testing.T) {
745745
// SLES 12, 15
746746
var wellKnownOS = map[string]map[string]map[string]string{
747747
"debian": {
748-
"9": {etcOSReleaseFile: debian9OSRelease, "/usr/share/keyrings/": "", "/etc/apt/sources.list.d/": ""},
749-
"10": {etcOSReleaseFile: debian10OSRelease, "/usr/share/keyrings/": "", "/etc/apt/sources.list.d/": ""},
750-
"11": {etcOSReleaseFile: debian11OSRelease, "/usr/share/keyrings/": "", "/etc/apt/sources.list.d/": ""},
751-
"12": {etcOSReleaseFile: debian12OSRelease, "/usr/share/keyrings/": "", "/etc/apt/sources.list.d/": ""},
748+
"9": {etcOSReleaseFile: debian9OSRelease, "/etc/apt/trusted.gpg.d/": "", "/etc/apt/sources.list.d/": ""},
749+
"10": {etcOSReleaseFile: debian10OSRelease, "/etc/apt/trusted.gpg.d/": "", "/etc/apt/sources.list.d/": ""},
750+
"11": {etcOSReleaseFile: debian11OSRelease, "/etc/apt/trusted.gpg.d/": "", "/etc/apt/sources.list.d/": ""},
751+
"12": {etcOSReleaseFile: debian12OSRelease, "/etc/apt/trusted.gpg.d/": "", "/etc/apt/sources.list.d/": ""},
752752
},
753753
"ubuntu": {
754-
"18.04": {etcOSReleaseFile: ubuntu1804OSRelease, "/usr/share/keyrings/": "", "/etc/apt/sources.list.d/": ""},
755-
"20.04": {etcOSReleaseFile: ubuntu2004OSRelease, "/usr/share/keyrings/": "", "/etc/apt/sources.list.d/": ""},
756-
"22.04": {etcOSReleaseFile: ubuntu2204OSRelease, "/usr/share/keyrings/": "", "/etc/apt/sources.list.d/": ""},
757-
"24.04": {etcOSReleaseFile: ubuntu2404OSRelease, "/usr/share/keyrings/": "", "/etc/apt/sources.list.d/": ""},
754+
"18.04": {etcOSReleaseFile: ubuntu1804OSRelease, "/etc/apt/trusted.gpg.d/": "", "/etc/apt/sources.list.d/": ""},
755+
"20.04": {etcOSReleaseFile: ubuntu2004OSRelease, "/etc/apt/trusted.gpg.d/": "", "/etc/apt/sources.list.d/": ""},
756+
"22.04": {etcOSReleaseFile: ubuntu2204OSRelease, "/etc/apt/trusted.gpg.d/": "", "/etc/apt/sources.list.d/": ""},
757+
"24.04": {etcOSReleaseFile: ubuntu2404OSRelease, "/etc/apt/trusted.gpg.d/": "", "/etc/apt/sources.list.d/": ""},
758758
},
759759
"amzn": {
760760
"2": {etcOSReleaseFile: amzn2OSRelease},

‎lib/utils/packagemanager/apt.go

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ const (
4040
aptRepoEndpoint = "https://apt.releases.teleport.dev/"
4141

4242
aptTeleportSourceListFileRelative = "/etc/apt/sources.list.d/teleport.list"
43-
aptTeleportPublicKeyFileRelative = "/usr/share/keyrings/teleport-archive-keyring.asc"
43+
aptTeleportPublicKeyFileRelative = "/etc/apt/trusted.gpg.d/teleport-archive-keyring.asc"
4444

4545
aptFilePermsRepository = 0o644
4646
)
@@ -128,7 +128,7 @@ func (pm *APT) AddTeleportRepository(ctx context.Context, linuxInfo *linux.OSRel
128128
aptTeleportSourceListFile := filepath.Join(pm.fsRootPrefix, aptTeleportSourceListFileRelative)
129129
aptTeleportPublicKeyFile := filepath.Join(pm.fsRootPrefix, aptTeleportPublicKeyFileRelative)
130130
// Format for teleport repo entry should look like this:
131-
// deb [signed-by=/usr/share/keyrings/teleport-archive-keyring.asc] https://apt.releases.teleport.dev/${ID?} ${VERSION_CODENAME?} $RepoChannel"
131+
// deb [signed-by=/etc/apt/trusted.gpg.d/teleport-archive-keyring.asc] https://apt.releases.teleport.dev/${ID?} ${VERSION_CODENAME?} $RepoChannel"
132132
teleportRepoMetadata := fmt.Sprintf("deb [signed-by=%s] %s%s %s %s", aptTeleportPublicKeyFile, aptRepoEndpoint, linuxInfo.ID, linuxInfo.VersionCodename, repoChannel)
133133

134134
switch {

‎lib/web/scripts/node-join/install.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -938,8 +938,8 @@ install_from_repo() {
938938
echo "deb https://apt.releases.teleport.dev/${ID} ${VERSION_CODENAME} ${REPO_CHANNEL}" > /etc/apt/sources.list.d/teleport.list
939939
else
940940
curl -fsSL https://apt.releases.teleport.dev/gpg \
941-
-o /usr/share/keyrings/teleport-archive-keyring.asc
942-
echo "deb [signed-by=/usr/share/keyrings/teleport-archive-keyring.asc] \
941+
-o /etc/apt/trusted.gpg.d/teleport-archive-keyring.asc
942+
echo "deb [signed-by=/etc/apt/trusted.gpg.d/teleport-archive-keyring.asc] \
943943
https://apt.releases.teleport.dev/${ID} ${VERSION_CODENAME} ${REPO_CHANNEL}" > /etc/apt/sources.list.d/teleport.list
944944
fi
945945
apt-get update

‎web/packages/shared/components/TextSelectCopy/TextSelectCopyMulti.story.tsx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -45,15 +45,15 @@ export const BashMultiWithComment = () => {
4545
<Component
4646
lines={[
4747
{
48-
text: `sudo curl https://apt.releases.teleport.dev/gpg \\\n-o /usr/share/keyrings/teleport-archive-keyring.asc`,
48+
text: `sudo curl https://apt.releases.teleport.dev/gpg \\\n-o /etc/apt/trusted.gpg.d/teleport-archive-keyring.asc`,
4949
comment: `Download Teleport's PGP public key`,
5050
},
5151
{
5252
text: 'sudo DEBUG=1 teleport start -c cfg-all -d',
5353
},
5454
{
5555
text:
56-
`echo "deb [signed-by=/usr/share/keyrings/teleport-archive-keyring.asc] \\\n` +
56+
`echo "deb [signed-by=/etc/apt/trusted.gpg.d/teleport-archive-keyring.asc] \\\n` +
5757
`https://apt.releases.teleport.dev/stable/v10" \\\n` +
5858
`| sudo tee /etc/apt/sources.list.d/teleport.list > /dev/null`,
5959
comment:

0 commit comments

Comments
 (0)