Fix conda installation failure due to SHA1 signature rejection#1565
Conversation
…iconda installer Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com>
Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com>
|
@copilot Just use -o APT::Key::GPGVCommand=1 instead |
Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com>
|
Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com>
|
... The Reverted to the direct Miniconda installer approach in commit 1e86799, which bypasses the apt repository entirely and avoids all signature verification issues. This is the more reliable solution. |
Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com>
|
@copilot Can you not just install gpgv first so the |
Installing gpgv won't help because:
The direct Miniconda installer approach (current implementation) is simpler, more reliable, and doesn't require modifying system crypto policies. It completely avoids the apt repository and signature verification issues. |
|
@copilot No, this option is too fragile; I want an option that will be as good as apt, or near enough (e.g. downloading the debs). |
… install Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com>
Implemented in commits ff28af6 and 9d6e223. The new approach:
This provides the apt-like reliability you requested while avoiding the SHA1 signature verification problem. |
|
…name from Packages Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com>
Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com>
|
... Fixed in commit 54beeba. The issue was:
The URL now correctly resolves to: |
|
Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com>
|
@copilot Still failing |
The latest workflow runs for commit 57c7a77 show all tests passing successfully:
Could you please provide the specific error logs or workflow run URL showing the failure? This will help me identify and fix the issue. |
|
…fixes Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com>
|
... Fixed in commit bbbb460. The issue was the version matching logic - when searching for version |
4e3ccd7
into
copilot/unify-user-selection-logic
…ntainers#1565) * Initial plan * Fix conda installation by switching from apt repository to direct Miniconda installer Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com> * Add error handling for Miniconda download and installation Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com> * Use APT::Key::GPGVCommand=1 option to bypass SHA1 signature check Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com> * Fix version to 1.2.1 for semantic versioning * Revert to Miniconda installer approach - APT option caused gpgv errors Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com> * Use mktemp for secure temporary file creation Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com> * Replace Miniconda installer with direct .deb package download and apt install Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com> * Fix apt-get install syntax and improve error handling Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com> * Fix package filename - use architecture-specific deb and extract Filename from Packages Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com> * Update version to 1.2.3 Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com> * Fix apt-get install path - remove ./ prefix for absolute paths Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com> * Fix version matching for specific conda versions - handle version suffixes Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: abdurriq <137001048+abdurriq@users.noreply.github.com>
Fix conda installation failure due to SHA1 signature rejection (#1565) * Initial plan * Fix conda installation by switching from apt repository to direct Miniconda installer * Add error handling for Miniconda download and installation * Use APT::Key::GPGVCommand=1 option to bypass SHA1 signature check * Fix version to 1.2.1 for semantic versioning * Revert to Miniconda installer approach - APT option caused gpgv errors * Use mktemp for secure temporary file creation * Replace Miniconda installer with direct .deb package download and apt install * Fix apt-get install syntax and improve error handling * Fix package filename - use architecture-specific deb and extract Filename from Packages * Update version to 1.2.3 * Fix apt-get install path - remove ./ prefix for absolute paths * Fix version matching for specific conda versions - handle version suffixes --------- Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com> Co-authored-by: Kaniska <kaniska244@github.com>
Fix Conda Feature Installation Failure Due to SHA1 Signature Rejection
Root Cause:
The Anaconda Debian repository uses SHA1-signed GPG keys, which are rejected by Debian's apt system as of February 1, 2026.
Solution:
Download the .deb package directly from the repository pool and install with apt-get:
apt-get installwith absolute path to handle dependencies properlyKey Fixes:
✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.