Skip to content

ci: add the Intel apt key without apt-key - #297

Closed
jharlow-intel wants to merge 1 commit into
mainfrom
ci/apt-keyring
Closed

jharlow-intel wants to merge 1 commit into
mainfrom
ci/apt-keyring

Conversation

@jharlow-intel

@jharlow-intel jharlow-intel commented Oct 28, 2026 •

Copy link
Copy Markdown
Collaborator

apt-key is gone from the ubuntu-latest image, so build-with-clang.yml fails at "Add Intel repository" with sudo: 'apt-key': command not found on every pull request (build-with-clang).

This adds Intel's apt key with gpg --dearmor into /usr/share/keyrings/oneapi-archive-keyring.gpg and points the source at it with signed-by, as Intel's install guide, dpnp and dpctl do. It also moves to the current key file, GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB, which they use.

coverity.yml has the same step, which is why the weekly Coverity scan has failed since 2026-10-26. It runs only on its schedule or by hand, and its submit step isn't limited to main, so a branch dispatch would replace main's results on scan.coverity.com; it gets checked by its next run after merge. The step is byte-identical to the build-with-clang.yml one that this pull request's CI runs.

apt-key is no longer on the ubuntu-latest image. Dearmor the key into
/usr/share/keyrings and reference it with signed-by, as dpnp and dpctl do.

@vchamarthi vchamarthi left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@antonwolfy

Copy link
Copy Markdown
Collaborator

That already covered by #296

@jharlow-intel

Copy link
Copy Markdown
Collaborator Author

oops, thanks!

@jharlow-intel
jharlow-intel deleted the ci/apt-keyring branch October 29, 2026 13:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants