Decommissioning apt.opscode.com

Hey Chef community,

We’re planning to decommission the old apt package server at
apt.opscode.com on Wednesday this week between 3-4 p.m. Eastern.

This server contains really, really old versions of Chef that are no
longer maintained (10.18 and older). The recommended mechanism to
install Chef these days is via the self-contained full-stack
installer:

https://www.getchef.com/download-chef-client/

Regards,
Julian

On Nov 3, 2014, at 2:04 PM, Julian C. Dunn jdunn@aquezada.com wrote:

Hey Chef community,

We're planning to decommission the old apt package server at
apt.opscode.com on Wednesday this week between 3-4 p.m. Eastern.

This server contains really, really old versions of Chef that are no
longer maintained (10.18 and older). The recommended mechanism to
install Chef these days is via the self-contained full-stack
installer:

Download Chef Infra Client | Chef

And as a reminder, if you want apt repos for Chef check out Chef Apt Repositories – Noah Kantrowitz.

--Noah

Hi,

We are hosting chef-client and chef-server RPMs internally in our
repositories and we would like to download the RPM GPG key used to
sign the packages. It used to be available at
http://apt.opscode.com/packages@opscode.com.gpg.key

Could we get it somewhere official? Could you host it at
https://opscode-omnibus-packages.s3.amazonaws.com/ with every other
package/download so that we can download it easily?

Thanks

On Mon, Nov 3, 2014 at 11:52 PM, Noah Kantrowitz noah@coderanger.net wrote:

On Nov 3, 2014, at 2:04 PM, Julian C. Dunn jdunn@aquezada.com wrote:

Hey Chef community,

We're planning to decommission the old apt package server at
apt.opscode.com on Wednesday this week between 3-4 p.m. Eastern.

This server contains really, really old versions of Chef that are no
longer maintained (10.18 and older). The recommended mechanism to
install Chef these days is via the self-contained full-stack
installer:

Download Chef Infra Client | Chef

And as a reminder, if you want apt repos for Chef check out Chef Apt Repositories – Noah Kantrowitz.

--Noah

On Nov 6, 2014, at 4:29 AM, Maxime Brugidou maxime.brugidou@gmail.com wrote:

Hi,

We are hosting chef-client and chef-server RPMs internally in our
repositories and we would like to download the RPM GPG key used to
sign the packages. It used to be available at
http://apt.opscode.com/packages@opscode.com.gpg.key

Could we get it somewhere official? Could you host it at
https://opscode-omnibus-packages.s3.amazonaws.com/ with every other
package/download so that we can download it easily?

Yes. I failed to mention this in my earlier email. The official location for the package signing key is now (& hopefully will forever be):

https://downloads.getchef.com/chef.gpg.key

  • Julian

Thanks!

On Thu, Nov 6, 2014 at 12:40 PM, Julian C. Dunn jdunn@aquezada.com wrote:

On Nov 6, 2014, at 4:29 AM, Maxime Brugidou maxime.brugidou@gmail.com wrote:

Hi,

We are hosting chef-client and chef-server RPMs internally in our
repositories and we would like to download the RPM GPG key used to
sign the packages. It used to be available at
http://apt.opscode.com/packages@opscode.com.gpg.key

Could we get it somewhere official? Could you host it at
https://opscode-omnibus-packages.s3.amazonaws.com/ with every other
package/download so that we can download it easily?

Yes. I failed to mention this in my earlier email. The official location for the package signing key is now (& hopefully will forever be):

https://downloads.getchef.com/chef.gpg.key

  • Julian

Hey guys,

The new url (https://downloads.getchef.com/chef.gpg.key) is not available anymore, is there a new URL?

-----Original Message-----
From: Maxime Brugidou [mailto:maxime.brugidou@gmail.com]
Sent: jeudi 6 novembre 2014 19:00
To: chef@lists.opscode.com
Subject: [chef] Re: Re: Re: Re: Decommissioning apt.opscode.com

Thanks!

On Thu, Nov 6, 2014 at 12:40 PM, Julian C. Dunn jdunn@aquezada.com wrote:

On Nov 6, 2014, at 4:29 AM, Maxime Brugidou maxime.brugidou@gmail.com wrote:

Hi,

We are hosting chef-client and chef-server RPMs internally in our
repositories and we would like to download the RPM GPG key used to
sign the packages. It used to be available at
http://apt.opscode.com/packages@opscode.com.gpg.key

Could we get it somewhere official? Could you host it at
https://opscode-omnibus-packages.s3.amazonaws.com/ with every other
package/download so that we can download it easily?

Yes. I failed to mention this in my earlier email. The official location for the package signing key is now (& hopefully will forever be):

https://downloads.getchef.com/chef.gpg.key

  • Julian

Hi Jeremy,

Just wanted to drop a note mentioning that I'm looking into this.
There is a key available here:
https://downloads.chef.io/packages-chef-io-public.key but it is
different from the previous chef.gpg.key. I will follow up with our
release engineering team once they get online and get some
clarification on the situation.

Cheers,

Steven

On Wed, Dec 10, 2014 at 8:28 AM, Jeremy Mauro j.mauro@criteo.com wrote:

Hey guys,

The new url (https://downloads.getchef.com/chef.gpg.key) is not available anymore, is there a new URL?

-----Original Message-----
From: Maxime Brugidou [mailto:maxime.brugidou@gmail.com]
Sent: jeudi 6 novembre 2014 19:00
To: chef@lists.opscode.com
Subject: [chef] Re: Re: Re: Re: Decommissioning apt.opscode.com

Thanks!

On Thu, Nov 6, 2014 at 12:40 PM, Julian C. Dunn jdunn@aquezada.com wrote:

On Nov 6, 2014, at 4:29 AM, Maxime Brugidou maxime.brugidou@gmail.com wrote:

Hi,

We are hosting chef-client and chef-server RPMs internally in our
repositories and we would like to download the RPM GPG key used to
sign the packages. It used to be available at
http://apt.opscode.com/packages@opscode.com.gpg.key

Could we get it somewhere official? Could you host it at
https://opscode-omnibus-packages.s3.amazonaws.com/ with every other
package/download so that we can download it easily?

Yes. I failed to mention this in my earlier email. The official location for the package signing key is now (& hopefully will forever be):

https://downloads.getchef.com/chef.gpg.key

  • Julian

Hi,

A quick follow up. It looks like
https://downloads.chef.io/packages-chef-io-public.key is the same as
the old key (same gpg fingerprint) but the file is just in a slightly
different format and has a different uid. I also confirmed that this
key can be used to validate the most recent chef packages as well as
older chef packages. I'll still follow up with the Release Eng. team
to see if we can restore the old URL for those of you who might be
depending on it.

Cheers,

Steven

On Wed, Dec 10, 2014 at 9:55 AM, Steven Danna steve@chef.io wrote:

Hi Jeremy,

Just wanted to drop a note mentioning that I'm looking into this.
There is a key available here:
https://downloads.chef.io/packages-chef-io-public.key but it is
different from the previous chef.gpg.key. I will follow up with our
release engineering team once they get online and get some
clarification on the situation.

Cheers,

Steven

On Wed, Dec 10, 2014 at 8:28 AM, Jeremy Mauro j.mauro@criteo.com wrote:

Hey guys,

The new url (https://downloads.getchef.com/chef.gpg.key) is not available anymore, is there a new URL?

-----Original Message-----
From: Maxime Brugidou [mailto:maxime.brugidou@gmail.com]
Sent: jeudi 6 novembre 2014 19:00
To: chef@lists.opscode.com
Subject: [chef] Re: Re: Re: Re: Decommissioning apt.opscode.com

Thanks!

On Thu, Nov 6, 2014 at 12:40 PM, Julian C. Dunn jdunn@aquezada.com wrote:

On Nov 6, 2014, at 4:29 AM, Maxime Brugidou maxime.brugidou@gmail.com wrote:

Hi,

We are hosting chef-client and chef-server RPMs internally in our
repositories and we would like to download the RPM GPG key used to
sign the packages. It used to be available at
http://apt.opscode.com/packages@opscode.com.gpg.key

Could we get it somewhere official? Could you host it at
https://opscode-omnibus-packages.s3.amazonaws.com/ with every other
package/download so that we can download it easily?

Yes. I failed to mention this in my earlier email. The official location for the package signing key is now (& hopefully will forever be):

https://downloads.getchef.com/chef.gpg.key

  • Julian

Hi,

A redirect is now in place for the old url. Thanks for bringing this
to our attention!

Cheers,

Steven

On Wed, Dec 10, 2014 at 10:22 AM, Steven Danna steve@chef.io wrote:

Hi,

A quick follow up. It looks like
https://downloads.chef.io/packages-chef-io-public.key is the same as
the old key (same gpg fingerprint) but the file is just in a slightly
different format and has a different uid. I also confirmed that this
key can be used to validate the most recent chef packages as well as
older chef packages. I'll still follow up with the Release Eng. team
to see if we can restore the old URL for those of you who might be
depending on it.

Cheers,

Steven

On Wed, Dec 10, 2014 at 9:55 AM, Steven Danna steve@chef.io wrote:

Hi Jeremy,

Just wanted to drop a note mentioning that I'm looking into this.
There is a key available here:
https://downloads.chef.io/packages-chef-io-public.key but it is
different from the previous chef.gpg.key. I will follow up with our
release engineering team once they get online and get some
clarification on the situation.

Cheers,

Steven

On Wed, Dec 10, 2014 at 8:28 AM, Jeremy Mauro j.mauro@criteo.com wrote:

Hey guys,

The new url (https://downloads.getchef.com/chef.gpg.key) is not available anymore, is there a new URL?

-----Original Message-----
From: Maxime Brugidou [mailto:maxime.brugidou@gmail.com]
Sent: jeudi 6 novembre 2014 19:00
To: chef@lists.opscode.com
Subject: [chef] Re: Re: Re: Re: Decommissioning apt.opscode.com

Thanks!

On Thu, Nov 6, 2014 at 12:40 PM, Julian C. Dunn jdunn@aquezada.com wrote:

On Nov 6, 2014, at 4:29 AM, Maxime Brugidou maxime.brugidou@gmail.com wrote:

Hi,

We are hosting chef-client and chef-server RPMs internally in our
repositories and we would like to download the RPM GPG key used to
sign the packages. It used to be available at
http://apt.opscode.com/packages@opscode.com.gpg.key

Could we get it somewhere official? Could you host it at
https://opscode-omnibus-packages.s3.amazonaws.com/ with every other
package/download so that we can download it easily?

Yes. I failed to mention this in my earlier email. The official location for the package signing key is now (& hopefully will forever be):

https://downloads.getchef.com/chef.gpg.key

  • Julian