problems on revoking a gpg key for signing assertions
Metadata
Current evaluation
Ubuntu Store advertised a nonexistent Snapcraft revoke-key command; maintainers marked it high priority, and current key commands still omit key revocation.
Suggested action: keep open
Reason: The report provides the exact failing command, output, and Snapcraft 2.27.1, while the maintainer explicitly said that revoke-key should be added and rated it high priority. The current key command module still exposes keys, create-key, register-key, and sign-build, but no revoke-key support, so this remains a valid, actionable gap rather than stale work. Implementation complexity is moderate because it requires store API, authentication, and local-key behavior to be defined and tested.
Evaluated by: mr-cal-bot
Impact:
40
Quick Win:
16
Complexity:
50
Confidence:
90
Actionability:
78
Issue body
I registered a key for my first assertion, then I received a mail from
Ubuntu store with the command able to remove a gpg key from backend:
snapcraft revoke-key name_of_key
This command don't work and produces the following output:
snapcraft revoke-key name_of_key
Usage:
snapcraft [options] [--enable-geoip --no-parallel-build]
snapcraft [options] init
snapcraft [options] pull [<part> ...] [--enable-geoip]
snapcraft [options] build [<part> ...] [--no-parallel-build]
snapcraft [options] stage [<part> ...]
snapcraft [options] prime [<part> ...]
snapcraft [options] strip [<part> ...]
snapcraft [options] clean [<part> ...] [--step <step>]
snapcraft [options] snap [<directory> --output <snap-file>]
snapcraft [options] cleanbuild [--remote=<remote>]
snapcraft [options] login
snapcraft [options] logout
snapcraft [options] list-registered
snapcraft [options] registered
snapcraft [options] list-keys
snapcraft [options] keys
snapcraft [options] create-key [<key-name>]
snapcraft [options] register-key [<key-name>]
snapcraft [options] register <snap-name> [--private]
snapcraft [options] sign-build <snap-file> [--key-name=<key-name>]
[--local]
snapcraft [options] upload <snap-file>
snapcraft [options] push <snap-file> [--release <channels>]
snapcraft [options] release <snap-name> <revision> <channel>
snapcraft [options] status <snap-name> [--series=<series>] [--arch=<arch>]
snapcraft [options] history <snap-name> [--series=<series>]
[--arch=<arch>]
snapcraft [options] close <snap-name> <channel_names>...
snapcraft [options] list-plugins
snapcraft [options] plugins
snapcraft [options] tour [<directory>]
snapcraft [options] update
snapcraft [options] gated <snap-name>
snapcraft [options] validate <snap-name> <validation>...
[--key-name=<key-name>]
snapcraft [options] define <part-name>
snapcraft [options] search [<query> ...]
snapcraft [options] enable-ci [<ci-system>] [--refresh]
snapcraft [options] help (topics | <plugin> | <topic>) [--devel]
snapcraft (-h | --help)
snapcraft --version
snapcraft --version -> 2.27.1
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha |
Impact:
40
Quick Win:
16
Complexity:
50
Confidence:
90
Actionability:
78
|
keep open | Ubuntu Store advertised a nonexistent Snapcraft revoke-key command; maintainers marked it high priority, and current key commands still omit key revocation. | |
| stealth/space-bunny-alpha |
Impact:
48
Quick Win:
16
Complexity:
55
Confidence:
91
Actionability:
72
|
keep open | Ubuntu Store advertised `snapcraft revoke-key`, but Snapcraft 2.27.1 had no such command; the maintainer prioritized implementing it, and it remains absent from current source. | |
| qwen/qwen3.6-35b-a3b |
Impact:
15
Quick Win:
6
Complexity:
30
Confidence:
75
Actionability:
60
|
close not a bug | snapcraft revoke-key command was never implemented; key revocation is now handled via snap command or Ubuntu Store web interface. | |
| qwen/qwen3.8-27b |
Impact:
15
Quick Win:
13
Staleness:
95
Complexity:
15
Confidence:
75
Support Request:
20
|
close stale | snapcraft revoke-key prints usage help instead of revoking a GPG key (snapcraft 2.27.1). No comments or maintainer response for ~9.5 years. Version is long deprecated and store commands were reorganized under the snapcraft store subcommand. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
98
Complexity:
15
Confidence:
95
Support Request:
20
|
close stale | snapcraft revoke-key command shows help text instead of revoking a GPG key. Report is over 9 years old and references deprecated snapcraft v2.27.1. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
99
Complexity:
15
Confidence:
95
Support Request:
20
|
close stale | Report that snapcraft revoke-key fails and shows help output instead. Issue is over 9 years old with no maintainer interaction and references an ancient snapcraft version. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
98
Complexity:
10
Confidence:
90
Support Request:
85
|
close stale | Reports missing revoke-key command in snapcraft 2.27.1. No maintainer response, inactive for over 9 years, and the command and version are obsolete. |
Update history
| Date | Change |
|---|---|
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1800825 Missing account-key revocation support | snapcraft (launchpad) | open | Feature request (2020) for account-key revocation in snapcraft, plus interim CLI guidance on backing up/restoring GPG keys and key-name conflicts. Still unimplemented: no revoke-key command exists in snapcraft/commands/keys.py. |