From ec9480eb60d6f24dfb10f38513b1fc4a1bb2a495 Mon Sep 17 00:00:00 2001 From: robojerk Date: Sun, 7 Sep 2025 17:33:37 -0700 Subject: [PATCH] CRITICAL FIX: Move GPG key installation before first apt-get update - Move debian-archive-keyring installation to the very beginning - This must happen before any apt-get update to avoid GPG signature errors - Install curl after GPG keys are in place - This fixes the 'repository not signed' error from run #18 The GPG key installation was happening after the first apt-get update, causing the build to fail early. This reorders the commands correctly. --- .forgejo/workflows/ci.yml | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml index 482ad7f..d24ab05 100644 --- a/.forgejo/workflows/ci.yml +++ b/.forgejo/workflows/ci.yml @@ -41,9 +41,13 @@ jobs: bash -c ' set -e - # Install curl first - echo "Installing curl..." + # Add Debian GPG keys FIRST - this must happen before any apt-get update + echo "Adding Debian GPG keys..." apt-get update + apt-get install -y debian-archive-keyring + + # Install curl + echo "Installing curl..." apt-get install -y curl # Try apt-cacher-ng first, fallback to Debian's automatic mirror selection @@ -62,11 +66,6 @@ jobs: echo "Using httpredir.debian.org for automatic mirror selection" fi - # Add Debian GPG keys - echo "Adding Debian GPG keys..." - apt-get update - apt-get install -y debian-archive-keyring - # Update and install remaining dependencies apt-get update apt-get install -y \