fix: retry key receiving on port TCP/80 if using default keyserver
Metadata
Current evaluation
Merged fix that retries GPG key retrieval on TCP/80 when default port 11371 times out, and optimizes AptGPGKeyInstallError after the apt-key to gpg migration. Approved by three reviewers, passed all CI checks, and resolves #165 and CRAFT-4560.
Suggested action: —
No scores available.
Issue body
- [x] Have you followed the guidelines for contributing?
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [x] Have you successfully run `make lint && make test`?
---
By default gpg uses the hkp protocol (over HTTP) on port TCP/11371. This port may be filtered in some environments and may not be accepted by proxies. When gpg timeout trying to connect to the default keyserver, retry with on port TCP/80. The default protocol is unchanged but must be explicitly set when setting a port.
Also fix AptGPGKeyInstallError doing unnecessary work since moving from apt-key to gpg.
Fixes #165
CRAFT-4560
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged fix that retries GPG key retrieval on TCP/80 when default port 11371 times out, and optimizes AptGPGKeyInstallError after the apt-key to gpg migration. Approved by three reviewers, passed all CI checks, and resolves #165 and CRAFT-4560. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged fix for GPG key retrieval timeouts by retrying on TCP port 80 when default port 11371 is blocked. Updated AptGPGKeyInstallError to remove legacy apt-key overhead. Resolves #165 and CRAFT-4560. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #5670 fix: hkp://keyserver.ubuntu.com:80 as default keyserver | snapcraft | merged | Merged after reviewer approval and CI validation. Updates the default keyserver to hkp://keyserver.ubuntu.com:80, resolving #5635 and CRAFT-4560. An unrelated CI failure was noted, and the branch was rebased onto hotfix/8.11 prior to merge. | |
| #229 fix: try proxy settings with another gpg error | craft-archives | merged | Merged a fix handling GPG network unreachable errors by applying proxy settings when timeouts fail. Approved by two reviewers, passed CI checks, and modified four files. Resolves proxy-related GPG connectivity issues. | |
| #29 repo: replace "apt-key" with "gpg" to handle keys | craft-archives | merged | Merged update replacing the deprecated apt-key command with gpg for repository key management. Adds integration tests, removes an obsolete mock, and resolves CRAFT-1626. Approved by reviewers, passed CI checks, and increased test coverage by 0.03%. |