Signing outage | Flathub Status
status.flathub.org
An issue with hardware security key is currently preventing builds from being signed with our GPG key. This affects both direct uploads and builds performed on Flathub infra. Since no builds can be signed thus published, the build service including test builds are also disrupted. (13:56 UTC — Feb 17) We are in contact with the data center staff to investigate the issue physically. (17:49 UTC — Feb 19) Data centre staff attempted reseating the signing key across available USB ports without success. We are now arranging delivery and installation of a replacement key. (16:46 UTC — Feb 20)

kinda bonkers that global software availability hangs on such a thing

  • Pommes_für_dein_Balg@feddit.org
    21·
    1 month ago

    If I read this right, it’s literally just a USB stick that’s broken, with no replacement in storage.

    Data centre staff attempted reseating the signing key across available USB ports without success.

    Lmao they literally just tried plugging it into different USB ports.

  • slackj_87@lemmy.world
    5·
    1 month ago

    Little surprised they’re not using an HSM to store the key. Suppose that could still suffer a hardware failure but probably a lot less likely.