opsi-server package update for new apt keys

opsi-server package update for new apt keys

Our opsi server packages are built on the OpenBuildService, OBS for short. This OBS signs the packages with a key which expires in regular intervals of two years and has to be renewed. Now the time has come to renew the key again. The current key expires on November 9th. On the OBS we already renewed the key about a month ago. Unfortunately this does not happen automatically on Debian-based Linux systems.

There are two ways to get the new key now:

  • update the opsi-server package
  • get the key manually

The first option is done with a simple apt update && apt upgrade. The version of opsi-server is 4.2.0.73-1 and can be found in opsi 4.2 stable.

The key can be fetched manually with one of the following commands and placed in the apt store, depending on the operating system:

  • Ubuntu 20-04
curl -fsSL https://download.opensuse.org/repositories/home:/uibmz:/opsi:/4.2:/stable/xUbuntu_20.04/Release.key | gpg --dearmor | sudo tee /usr/local/share/keyrings/opsi-obs.gpg > /dev/null
  • Ubuntu 22-04
curl -fsSL https://download.opensuse.org/repositories/home:/uibmz:/opsi:/4.2:/stable/xUbuntu_22.04/Release.key | gpg --dearmor | sudo tee /usr/local/share/keyrings/opsi-obs.gpg > /dev/null
  • Debian 10
curl -fsSL https://download.opensuse.org/repositories/home:/uibmz:/opsi:/4.2:/stable/Debian_10//Release.key | gpg --dearmor | sudo tee /usr/local/share/keyrings/opsi-obs.gpg > /dev/null
  • Debian 11
curl -fsSL https://download.opensuse.org/repositories/home:/uibmz:/opsi:/4.2:/stable/Debian_11/Release.key | gpg --dearmor | sudo tee /usr/local/share/keyrings/opsi-obs.gpg > /dev/null
  • UCS 4.4
curl -fsSL https://download.opensuse.org/repositories/home:/uibmz:/opsi:/4.2:/stable/Univention_4.4/Release.key | gpg --dearmor | sudo tee /usr/local/share/keyrings/opsi-obs.gpg > /dev/null
  • UCS 5.0
curl -fsSL https://download.opensuse.org/repositories/home:/uibmz:/opsi:/4.2:/stable/Univention_5.0/Release.key | gpg --dearmor | sudo tee /usr/local/share/keyrings/opsi-obs.gpg > /dev/null

After that, the current key should now be installed and can be traced using apt-key list.

Tags :

Related Posts

Remote Client Administration: An Introduction to Client Actions with _opsi-cli_

Remote Client Administration: An Introduction to Client Actions with opsi-cli

Are you tired of manually setting dozens of action requests for your clients? Or are you looking for a way to automate weekly updates? This blog post demonstrates how to make these things easier with opsi-cli and its command client-action. You can use it to set action requests for specific products or product groups on certain clients or client groups.

Read More
Simplifying Remote Administration: An Introduction to JSON-RPC and opsi-cli

Simplifying Remote Administration: An Introduction to JSON-RPC and opsi-cli

Are you looking for a more efficient way to access your opsi server remotely? This blog post explores the benefits of JSON-RPC, a stateless and lightweight protocol which simplifies the transmission of data between a server and a client.

Read More
opsi at FrOSCon 2023: Looking back at a great Weekend

opsi at FrOSCon 2023: Looking back at a great Weekend

The 18th edition of FrOSCon took place on August, 5 and 6, at the Bonn-Rhein-Sieg University of Applied Sciences. This year, a team from uib travelled to Sankt Augustin to present opsi and provide support to the Open Source community.

Read More