alpine3.14.1 ppc64le minirootfs bad gpg signature
Hi, this is my very first issue for alpine, correct me if I did anything wrong.
What I did
Donwload minirootfs release tarballs, verify their checksum and signature respectively.
Expected Behavior
All checksum and signature verified successfully.
Actual Behavior
alpine3.14.1/ppc64le
minirootfs failed gpg signature verification.
Log output
+ filename=alpine-minirootfs-3.14.1-ppc64le.tar.gz
+ rootfs_download_url=https://dl-cdn.alpinelinux.org/alpine/v3.14/releases/ppc64le/alpine-minirootfs-3.14.1-ppc64le.tar.gz
+ checksum_download_url=https://dl-cdn.alpinelinux.org/alpine/v3.14/releases/ppc64le/alpine-minirootfs-3.14.1-ppc64le.tar.gz.sha256
+ gpg_sig_download_url=https://dl-cdn.alpinelinux.org/alpine/v3.14/releases/ppc64le/alpine-minirootfs-3.14.1-ppc64le.tar.gz.asc
+ wget https://dl-cdn.alpinelinux.org/alpine/v3.14/releases/ppc64le/alpine-minirootfs-3.14.1-ppc64le.tar.gz
Connecting to dl-cdn.alpinelinux.org (151.101.114.133:443)
saving to 'alpine-minirootfs-3.14.1-ppc64le.tar.gz'
alpine-minirootfs-3. 0% | | 25750 0:01:45 ETA
alpine-minirootfs-3. 100% |********************************| 2665k 0:00:00 ETA
'alpine-minirootfs-3.14.1-ppc64le.tar.gz' saved
+ wget https://dl-cdn.alpinelinux.org/alpine/v3.14/releases/ppc64le/alpine-minirootfs-3.14.1-ppc64le.tar.gz.sha256 -O -
+ sha256sum -c
Connecting to dl-cdn.alpinelinux.org (151.101.114.133:443)
writing to stdout
- 100% |********************************| 106 0:00:00 ETA
written to stdout
alpine-minirootfs-3.14.1-ppc64le.tar.gz: OK
+ wget https://alpinelinux.org/keys/ncopa.asc -O -
+ gpg --import
Connecting to alpinelinux.org (147.75.101.119:443)
gpg: directory '/root/.gnupg' created
gpg: keybox '/root/.gnupg/pubring.kbx' created
writing to stdout
- 100% |********************************| 3092 0:00:00 ETA
written to stdout
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key 293ACD0907D9495A: public key "Natanael Copa <ncopa@alpinelinux.org>" imported
gpg: Total number processed: 1
gpg: imported: 1
+ wget https://dl-cdn.alpinelinux.org/alpine/v3.14/releases/ppc64le/alpine-minirootfs-3.14.1-ppc64le.tar.gz.asc
Connecting to dl-cdn.alpinelinux.org (151.101.114.133:443)
saving to 'alpine-minirootfs-3.14.1-ppc64le.tar.gz.asc'
alpine-minirootfs-3. 100% |********************************| 833 0:00:00 ETA
'alpine-minirootfs-3.14.1-ppc64le.tar.gz.asc' saved
+ gpg --verify alpine-minirootfs-3.14.1-ppc64le.tar.gz.asc alpine-minirootfs-3.14.1-ppc64le.tar.gz
gpg: Signature made Thu Aug 5 14:38:35 2021 UTC
gpg: using RSA key 0482D84022F52DF1C4E7CD43293ACD0907D9495A
gpg: BAD signature from "Natanael Copa <ncopa@alpinelinux.org>" [unknown]
subprocess exited with status 1
subprocess exited with status 1