def pubkey_install
      $logger.warn "Installing GPG key #{$config['general']['gpg_signing_key']}..."

      s3 = Pupistry::StorageAWS.new 'agent'

      unless s3.download "#{$config['general']['gpg_signing_key']}.publickey", "#{$config['general']['app_cache']}/artifacts/#{$config['general']['gpg_signing_key']}.publickey"
        $logger.error 'Unable to download GPG key from S3 bucket, this will prevent validation of signature'
        return false
      end

      unless system "gpg --import < #{$config['general']['app_cache']}/artifacts/#{$config['general']['gpg_signing_key']}.publickey > /dev/null 2>&1"
        $logger.error 'A fault occured when trying to import the GPG key'
        return false
      end

    rescue StandardError
      $logger.error 'Something unexpected occured when installing the GPG public key'
      return false
    end
def pubkey_install
      $logger.warn "Installing GPG key #{$config['general']['gpg_signing_key']}..."

      s3 = Pupistry::StorageAWS.new 'agent'

      unless s3.download "#{$config['general']['gpg_signing_key']}.publickey", "#{$config['general']['app_cache']}/artifacts/#{$config['general']['gpg_signing_key']}.publickey"
        $logger.error 'Unable to download GPG key from S3 bucket, this will prevent validation of signature'
        return false
      end

      unless system "gpg --import < #{$config['general']['app_cache']}/artifacts/#{$config['general']['gpg_signing_key']}.publickey > /dev/null 2>&1"
        $logger.error 'A fault occured when trying to import the GPG key'
        return false
      end

    rescue StandardError
      $logger.error 'Something unexpected occured when installing the GPG public key'
      return false
    end
Install the public key. This is a potential avenue for exploit, if a
 machine is being built for the first time, it has no existing trust of
 the GPG key, other than transit encryption to the S3 bucket. To protect
 against attacks at the bootstrap time, you should pre-load your machine
 images with the public GPG key.

 For those users who trade off some security for convienence, we install
 the GPG public key for them direct from the S3 repo.