Intro

Occasionally, the ROS buildfarm’s GPG signing key may change due to security concerns or other reasons. When this occurs, users need to update their systems by removing the old key and adding the new one to maintain the ability to install and update ROS packages.

Update GPG Key

We are again upon the brink of the ROS signing key expiration (June 1st) and from the Infrastructure PMC we are happy to announce a new package for ROS key and repository management.

9/5/25

  • Update to new GPG key
sudo curl -sSL https://raw.githubusercontent.com/ros/rosdistro/master/ros.key -o /usr/share/keyrings/ros-archive-keyring.gpg
  • Test that packages are still discovered and thus installable:
sudo apt update