Stack Overflow
Stack Overflow

Questions tagged [gpg-signature]

127 questions
713
votes
51 answers

gpg failed to sign the data fatal: failed to write commit object [Git 2.10.0]

I followed few articles over the pretty attributes on Git 2.10 release note. Going through which upgraded the git to 2.10.0 and made changes to global .gitconfig resulting as follows - [filter "lfs"] clean = git-lfs clean %f smudge =…
Naman
  • 27,789
  • 26
  • 218
  • 353
37
votes
6 answers

GPG error in Ubuntu 21.04 after second apt-get update during Docker build

Getting error while building the following Docker file FROM ubuntu:21.04 RUN apt-get update && \ apt-get install --no-install-recommends -y curl=7.\* && \ apt-get install --no-install-recommends -y unzip=6.\* &&\ rm -rf…
Tanmaya
  • 570
  • 1
  • 4
  • 10
34
votes
1 answer

What is GitHub's public GPG key?

If you make an edit through GitHub's website, or merge a pull request, then the resulting commits are automatically signed with GitHub's GPG key. It looks like this: I would like to have the full public key so that I can add it as a trusted key on…
Aaron Franke
  • 3,268
  • 4
  • 31
  • 51
34
votes
2 answers

Should I keep gitconfig's "signingKey" private?

I have recently set up GPG to sign my Git commits so now I have a signingKey field in my gitconfig. I'm not very familiar with details of GPG – is this signingKey a sensitive piece of information that I should keep private or does it fall into the…
Milad
  • 4,901
  • 5
  • 32
  • 43
27
votes
4 answers

Why does git sign with GPG keys rather than using SSH keys?

What are the differences between SSH and GPG asymmetric keys and why does git support signing with GPG rather than using the SSH agent?
Dan Kowalczyk
  • 4,103
  • 2
  • 18
  • 29
21
votes
3 answers

How can I manage keyring files in trusted.gpg.d with ansible playbook since apt-key is deprecated?

Before apt-key was deprecated, I was using Ansible playbooks to add and update keys in my servers. At the moment, apt-key no longer updates the keys. In few searches, I found that I need to use gpg now. However, I have many servers and I don't want…
ecemnaz
  • 311
  • 1
  • 2
  • 3
21
votes
3 answers

Could not make my second mail's commits as "verified" on GitHub

Currently, I use 2 emails, (Personal + Company) with one SSH key to log in to GitHub. But I use the same GPG key for signing. Both are verified on my GitHub Email Settings page. On the first one (personal), no issue, when I do a commit it appears as…
Dentrax
  • 574
  • 8
  • 22
19
votes
1 answer

What are the meaningful differences between .gpg, .sig., & .asc?

I’m aware that .asc signatures are output as a text file, while .sig & .gpg are binary. That aside: Are .sig and .gpg the same file with different extensions? If not, why use one over the other? Between text files and binary files, what are the…
CuriousCat
  • 205
  • 1
  • 2
  • 5
16
votes
3 answers

manage 2 git users gpg key and choose gpg sign per user

I have 1 github user and another gitlab user, and I have created 1 gpg key for each because my email address differs. The problem is I have to execute git config --global user.signingkey everytime I want to commit to different git repos. Is there a…
slifer2015
  • 682
  • 6
  • 12
12
votes
3 answers

Git commit failed : Couldn't load public key

I cannot commit to git . Every time I try it shows this message. error: Couldn't load public key 632EA751459C3A1A: No such file or directory? fatal: failed to write commit object I'm using Gpg4Win.
Dinuka Dilshan
  • 552
  • 6
  • 12
11
votes
3 answers

NO_PUBKEY for apt.releases.hashicorp.com in apt

When running sudo apt update, I am presented with the following error: Err:4 https://apt.releases.hashicorp.com focal InRelease The following signatures couldn't be…
MacroMan
  • 2,335
  • 1
  • 27
  • 36
10
votes
2 answers

How squash and merge a Pull Request with GPG signing via command line?

https://help.github.com/articles/about-pull-request-merges/#squash-and-merge-your-pull-request-commits Is there way to squash and merge a Pull Request with my GPG signing via command line? Merging a Pull Request on UI doesn't supports GPG signing.…
okuryu
  • 221
  • 1
  • 9
9
votes
5 answers

`gpg: keyserver send failed: No keyserver available` when sending to hkp://pool.sks-keyservers.net

I'm using the below command gpg --keyserver hkp://pool.sks-keyservers.net --send-keys as per guided by this article https://getstream.io/blog/publishing-libraries-to-mavencentral-2021/ However, when I try it, it reports gpg:…
Elye
  • 53,639
  • 54
  • 212
  • 474
9
votes
4 answers

Nexus could not find signature of project's pom.xml

I have uploaded a multi-module-project to central as a bundle.jar and this problem appears: So Nexus could not found the pom.asc. But how can the file be missing if it is available under
Grim
  • 1,938
  • 10
  • 56
  • 123
8
votes
3 answers

GitHub Actions : How to resolve : "The process '/usr/bin/gpg' failed with exit code 2" problem on actions/setup-java@v3

Introduction Currently, I'm trying to contribute on a GitHub Action that automatically publishes a java library. The branch where I'm developing: https://github.com/MathieuSoysal/Java-maven-library-publisher/tree/2-add-automated-tests The yaml code…
ThrowsError
  • 1,169
  • 1
  • 11
  • 43
1
2 3
…
8 9