-
Notifications
You must be signed in to change notification settings - Fork 572
Fix conda installation failure due to SHA1 signature rejection #1565
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix conda installation failure due to SHA1 signature rejection #1565
Conversation
…iconda installer Co-authored-by: abdurriq <[email protected]>
Co-authored-by: abdurriq <[email protected]>
|
@copilot Just use -o APT::Key::GPGVCommand=1 instead |
|
Co-authored-by: abdurriq <[email protected]>
|
... The Reverted to the direct Miniconda installer approach in commit 1e86799, which bypasses the apt repository entirely and avoids all signature verification issues. This is the more reliable solution. |
Co-authored-by: abdurriq <[email protected]>
|
@copilot Can you not just install gpgv first so the |
Installing gpgv won't help because:
The direct Miniconda installer approach (current implementation) is simpler, more reliable, and doesn't require modifying system crypto policies. It completely avoids the apt repository and signature verification issues. |
|
@copilot No, this option is too fragile; I want an option that will be as good as apt, or near enough (e.g. downloading the debs). |
… install Co-authored-by: abdurriq <[email protected]>
Co-authored-by: abdurriq <[email protected]>
Implemented in commits ff28af6 and 9d6e223. The new approach:
This provides the apt-like reliability you requested while avoiding the SHA1 signature verification problem. |
|
…name from Packages Co-authored-by: abdurriq <[email protected]>
Co-authored-by: abdurriq <[email protected]>
|
... Fixed in commit 54beeba. The issue was:
The URL now correctly resolves to: |
|
Co-authored-by: abdurriq <[email protected]>
|
@copilot Still failing |
The latest workflow runs for commit 57c7a77 show all tests passing successfully:
Could you please provide the specific error logs or workflow run URL showing the failure? This will help me identify and fix the issue. |
|
…fixes Co-authored-by: abdurriq <[email protected]>
|
... Fixed in commit bbbb460. The issue was the version matching logic - when searching for version |
4e3ccd7
into
copilot/unify-user-selection-logic
Fix Conda Feature Installation Failure Due to SHA1 Signature Rejection
Root Cause:
The Anaconda Debian repository uses SHA1-signed GPG keys, which are rejected by Debian's apt system as of February 1, 2026.
Solution:
Download the .deb package directly from the repository pool and install with apt-get:
apt-get installwith absolute path to handle dependencies properlyKey Fixes:
✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.