Bazel: Ubuntu PPA Key Expired

[zac-hopkinson]

Description of the problem / feature request:

The Ubuntu PPA key has expired which is causing installation of Bazel to fail.

Feature requests: what underlying problem are you trying to solve with this feature?

Trying to install Bazel on Ubuntu using the instructions here: https://docs.bazel.build/versions/master/install-ubuntu.html

Bugs: what's the simplest, easiest way to reproduce this bug? Please provide a minimal example if possible.

docker run --rm -it ubuntu:18.04 bash
apt-get update && apt-get install -y gnupg curl
curl https://bazel.build/bazel-release.pub.gpg | gpg -v
exit

Outputs:

gpg: Note: signature key 3D5919B448457EE0 expired Sat May 23 13:10:53 2020 UTC
pub   rsa4096 2016-05-24 [SC] [expired: 2020-05-23]
      71A1D0EFCFEB6281FD0437C93D5919B448457EE0
uid           Bazel Developer (Bazel APT repository key) <[email protected]>
sig        DD3EF963991F1EC2 2016-10-28   [User ID not found]
sig        3D5919B448457EE0 2018-05-24   [selfsig]
sig        3D5919B448457EE0 2016-05-24   [selfsig]
sub   rsa4096 2016-05-24 [E] [expired: 2020-05-23]
sig        3D5919B448457EE0 2018-05-24   [keybind]

What operating system are you running Bazel on?

Ubuntu 18.04

What's the output of bazel info release?

N/A

Have you found anything relevant by searching the web?

Related issue the last time this happened: https://github.com/bazelbuild/bazel/issues/5261

[philwo]

Sorry 😬 I'm currently fixing this, will ping here when the new keys have been uploaded.

[philwo]

I think I did everything that's required to fix this:

• [x] Extend validity of Bazel's release signing key until May 2022
• [x] Push updated key to https://storage.googleapis.com/bazel-apt/doc/apt-key.pub.gpg
• [x] Push updated key to https://bazel.build/bazel-release.pub.gpg via https://github.com/bazelbuild/bazel-website/pull/247.
• [x] Push updated key to http://pool.sks-keyservers.net/
• [x] Push updated key to https://keyserver.ubuntu.com/

Please note that it can take ~1 hour for bazel.build to give the new key due to the time it requires to build the website and for caches to expire.

[jin]

You may have to manually update your apt keyring with the new key:

$ curl https://bazel.build/bazel-release.pub.gpg | sudo apt-key add -
$ sudo apt-get update

[malkia]

You may have to manually update your apt keyring with the new key:

$ curl https://bazel.build/bazel-release.pub.gpg | sudo apt-key add -
$ sudo apt-get update

This works for me now (Earlier this week, these same commands did nothing for me).

[gslndlb]

You may have to manually update your apt keyring with the new key:

$ curl https://bazel.build/bazel-release.pub.gpg | sudo apt-key add -
$ sudo apt-get update

Fix tested and it worked for me.