homeblogupdated puppet gpg signing key

Updated Puppet GPG signing key

Editor's Note: This change to the GPG signing key affects both Puppet Enterprise users and open source Puppet users. If you're using Puppet Enterprise, you'll be getting the new key in the next release, or if you manually update your version of puppet-agent, you'll get it then.

The GPG signing key we’ve been using to sign Puppet products on Linux is expiring in January 2017, so we’ve recently switched to a new key. This means you’ll need to import the new key to be able to use our public apt and yum repositories. Here are three ways you can update to use the new key.

Update your puppetlabs-release packages

If you’re already setting up your repos using the puppetlabs-release or puppetlabs-release-pc1 packages, this is going to be the easiest way to get the updated key.

On EL and Fedora

or $ sudo yum update puppetlabs-release-pc1

On Debian and Ubuntu

or $ sudo apt-get upgrade puppetlabs-release

Update the key with Puppet

Here are some manifest snippets you can use to import the new GPG signing key with Puppet.

On EL and Fedora, Puppet >= 4.4.0

On EL and Fedora, Puppet < 4.4.0

On Debian and Ubuntu

Update the key manually

You can also update the key manually on your servers.

On EL and Fedora

On Debian and Ubuntu

Hopefully this helps get you up and running with our new GPG signing key. If you have any questions, feel free to ask on #puppet on freenode, #puppet on the puppet community slack, or the puppet-users Google group.

Morgan Rhodes is a release engineer at Puppet.

Learn more

  • For more information, see the mailing list discussion here.