Dockerのイメージ作成時にGPGエラーになる about kaldi

[ryun0suke22]

GPG key for MKL is now updated. I think install_mkl.sh works fine now.

community.intel.com/t5/oneAPI-Registration-Download/The-GPG-PUB-KEY-INTEL-SW-PRODUCTS-PUB-expired/m-p/1530383#M6132

[ryun0suke22]

You need to add these before install_mkl.sh

RUN apt-get install -y gpg
RUN curl -sSL https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB | gpg --dearmor -o /usr/share/keyrings/intel-sw-products.gpg

[kkm000]

The relevant key https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB has promptly expired on 2021-01-01T00:00:00Z, and a new key was added to this keyring about 36 hours later.

@ryun0suke22

You need to add these before install_mkl.sh

Not quite, the key should no longer mucked with gpg. Starting with Debian 11, maybe even 10, simply drop the “armored” gpg keychain ASCII file as downloaded from http://.../GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB with the .asc extension to /etc/apt/trusted.d/. apt(8) has long supported both binary .gpg files, and their "armored" format, pure ASCII .asc files, which were invented to transmit key material through terminal-like connections that may not be binary-transparent.

And yeah, the install_mkl.sh script should work now, since the key has now been updated. Ping me if you find otherwise.