X-Loop: [email protected] Subject: bug#777: cron-apt does not report repositories with GPG problems Reply-To: Koos van den Hout <[email protected]>, [email protected] Resent-From: Koos van den Hout <[email protected]> Resent-To: [email protected] Resent-CC: [email protected] X-Loop: [email protected] Resent-Date: Wed, 30 Aug 2023 08:12:01 +0000 Resent-Message-ID: <[email protected]> Resent-Sender: [email protected] X-Devuan-PR-Message: report 777 X-Devuan-PR-Package: cron-apt X-Devuan-PR-Keywords: Received: via spool by [email protected] id=B.169338303121764 (code B); Wed, 30 Aug 2023 08:12:01 +0000 Received: (at submit) by bugs.devuan.org; 30 Aug 2023 08:10:31 +0000 Delivered-To: [email protected] Received: from email.devuan.org [2a01:4f8:140:32a1::58c6:6473] by doc.devuan.org with IMAP (fetchmail-6.4.16) for <debbugs@localhost> (single-drop); Wed, 30 Aug 2023 08:10:31 +0000 (UTC) Received: from email.devuan.org by email.devuan.org with LMTP id CDtgAiL57mSMNwAAmSBk0A (envelope-from <[email protected]>) for <[email protected]>; Wed, 30 Aug 2023 08:09:06 +0000 Received: by email.devuan.org (Postfix, from userid 109) id F3C4F8CF; Wed, 30 Aug 2023 08:09:05 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org X-Spam-Level: X-Spam-Status: No, score=-0.0 required=5.0 tests=SPF_HELO_PASS autolearn=ham autolearn_force=no version=3.4.6 Received-SPF: Pass (sender SPF authorized) identity=helo; client-ip=2a10:3781:1669:1::23; helo=gosper.idefix.net; [email protected]; receiver=<UNKNOWN> Received: from gosper.idefix.net (gosper.idefix.net [IPv6:2a10:3781:1669:1::23]) by email.devuan.org (Postfix) with ESMTPS id D0D241D for <[email protected]>; Wed, 30 Aug 2023 08:09:03 +0000 (UTC) Received: from gosper.idefix.net (localhost [IPv6:0:0:0:0:0:0:0:1]) by gosper.idefix.net (8.15.2/8.15.2/Debian-14~deb10u1) with ESMTPS id 37U88xFG024804 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT); Wed, 30 Aug 2023 10:09:00 +0200 Received: (from koos@localhost) by gosper.idefix.net (8.15.2/8.15.2/Submit) id 37U88xWv024803; Wed, 30 Aug 2023 10:08:59 +0200 X-Authentication-Warning: gosper.idefix.net: koos set sender to [email protected] using -f Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Koos van den Hout <[email protected]> To: Devuan Bug Tracking System <[email protected]> Message-ID: <169338293943.22928.1126947161839227298.reportbug@gosper.idefix.net> X-Mailer: reportbug 7.5.3+devuan3 Date: Wed, 30 Aug 2023 10:08:59 +0200 X-Virus-Scanned: clamav-milter 0.103.9 at gosper X-Virus-Status: Clean Package: cron-apt Version: 0.13.0 Severity: normal Dear Maintainer, I noticed the following using cron-apt: when a repository rotates its GPG keys, cron-apt does not act on the error message about the unavailable GPG key. This makes cron-apt not report about updates until a manual run of apt update shows there is a problem with this repository and this is fixed. I expected cron-apt to report this error because this holds back updates when the GPG key for a repository is updated. I ran into this with the Grafana repository. There were no messages from cron-apt, but by hand I saw the key had changed: root@gosper:~# apt update Get:1 https://packages.grafana.com/oss/deb stable InRelease [5,984 B] Err:1 https://packages.grafana.com/oss/deb stable InRelease The following signatures couldn't be verified because the public key is not av ailable: NO_PUBKEY 963FA27710458545 Hit:2 http://deb.devuan.org/merged beowulf InRelease Hit:3 http://deb.devuan.org/merged beowulf-security InRelease Hit:4 http://deb.devuan.org/merged beowulf-updates InRelease Reading package lists... Done Building dependency tree Reading state information... Done All packages are up to date. W: An error occurred during the signature verification. The repository is not up dated and the previous index files will be used. GPG error: https://packages.gra fana.com/oss/deb stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 963FA27710458545 W: Failed to fetch https://packages.grafana.com/oss/deb/dists/stable/InRelease The following signatures couldn't be verified because the public key is not avai lable: NO_PUBKEY 963FA27710458545 W: Some index files failed to download. They have been ignored, or old ones used instead. -- System Information: Distributor ID: Devuan Description: Devuan GNU/Linux 3 (beowulf) Release: 3 Codename: beowulf Architecture: x86_64 Kernel: Linux 4.19.0-24-amd64 (SMP w/6 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init) LSM: AppArmor: enabled Versions of packages cron-apt depends on: ii apt 1.8.2.3 Versions of packages cron-apt recommends: ii cron [cron-daemon] 3.0pl1-134+deb10u1 ii liblockfile1 1.14-1.1 ii sendmail-bin [mail-transport-agent] 8.15.2-14~deb10u1 cron-apt suggests no packages. -- Configuration Files: /etc/cron-apt/config changed: MAILON="upgrade" -- no debconf information
Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 X-Loop: [email protected] From: "Devuan bug Tracking System" <[email protected]> To: Koos van den Hout <[email protected]> Subject: bug#777: Acknowledgement (cron-apt does not report repositories with GPG problems) Message-ID: <[email protected]> References: <169338293943.22928.1126947161839227298.reportbug@gosper.idefix.net> X-Devuan-PR-Message: ack 777 X-Devuan-PR-Package: cron-apt Reply-To: [email protected] Date: Wed, 30 Aug 2023 08:12:02 +0000 Thank you for filing a new bug report with Devuan. You can follow progress on this bug here: 777: https://bugs.devuan.org/cgi/= bugreport.cgi?bug=3D777. This is an automatically generated reply to let you know your message has been received. Your message is being forwarded to the package maintainers and other interested parties for their attention; they will reply in due course. Your message has been sent to the package maintainer(s): [email protected] If you wish to submit further information on this problem, please send it to [email protected]. Please do not send mail to [email protected] unless you wish to report a problem with the Bug-tracking system. --=20 777: https://bugs.devuan.org/cgi/bugreport.cgi?bug=3D777 Devuan Bug Tracking System Contact [email protected] with problems
Received: (at control) by bugs.devuan.org; 6 Sep 2023 09:37:33 +0000 Return-Path: <[email protected]> Delivered-To: [email protected] Received: from email.devuan.org [2a01:4f8:140:32a1::58c6:6473] by doc.devuan.org with IMAP (fetchmail-6.4.16) for <debbugs@localhost> (single-drop); Wed, 06 Sep 2023 09:37:33 +0000 (UTC) Received: from email.devuan.org by email.devuan.org with LMTP id lno3H0VI+GQCUgAAmSBk0A (envelope-from <[email protected]>) for <[email protected]>; Wed, 06 Sep 2023 09:37:09 +0000 Received: by email.devuan.org (Postfix, from userid 109) id 6618590F; Wed, 6 Sep 2023 09:37:09 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org X-Spam-Level: X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS autolearn=no autolearn_force=no version=3.4.6 Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; [email protected]; receiver=<UNKNOWN> Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86]) by email.devuan.org (Postfix) with ESMTPS id 6107C1CB for <[email protected]>; Wed, 6 Sep 2023 09:37:04 +0000 (UTC) Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3]) by mx.hindley.org.uk (Postfix) with SMTP id 074328E6 for <[email protected]>; Wed, 6 Sep 2023 10:37:03 +0100 (BST) Received: (nullmailer pid 29178 invoked by uid 1000); Wed, 06 Sep 2023 09:37:02 -0000 From: Mark Hindley <[email protected]> To: [email protected] Subject: forcibly merging 778 777 Date: Wed, 06 Sep 2023 10:37:02 +0100 User-Agent: devscripts bts/2.23.4 Message-ID: <[email protected]> forcemerge 778 777 thanks
MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) X-Loop: [email protected] From: [email protected] (Devuan Bug Tracking System) Subject: Bug#777 closed by Mark Hindley <[email protected]> (forcibly merging 778 777) Message-ID: <[email protected]> References: <[email protected]> X-Devuan-PR-Message: they-closed 777 X-Devuan-PR-Package: cron-apt X-Devuan-PR-Source: cron-apt Date: Wed, 06 Sep 2023 09:38:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1693993082-1162-0" This is a multi-part message in MIME format... ------------=_1693993082-1162-0 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 This is an automatic notification regarding your bug report which was filed against the cron-apt package: #777: cron-apt does not report repositories with GPG problems It has been closed by Mark Hindley <[email protected]>. Their explanation is attached below along with your original report. If this explanation is unsatisfactory and you have not received a better one in a separate message then please contact Mark Hindley <mark@hin= dley.org.uk> by replying to this email. --=20 Devuan Bug Tracking System Contact [email protected] with problems ------------=_1693993082-1162-0 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at control) by bugs.devuan.org; 6 Sep 2023 09:37:33 +0000 Return-Path: <[email protected]> Delivered-To: [email protected] Received: from email.devuan.org [2a01:4f8:140:32a1::58c6:6473] by doc.devuan.org with IMAP (fetchmail-6.4.16) for <debbugs@localhost> (single-drop); Wed, 06 Sep 2023 09:37:33 +0000 (UTC) Received: from email.devuan.org by email.devuan.org with LMTP id lno3H0VI+GQCUgAAmSBk0A (envelope-from <[email protected]>) for <[email protected]>; Wed, 06 Sep 2023 09:37:09 +0000 Received: by email.devuan.org (Postfix, from userid 109) id 6618590F; Wed, 6 Sep 2023 09:37:09 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org X-Spam-Level: X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS autolearn=no autolearn_force=no version=3.4.6 Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; [email protected]; receiver=<UNKNOWN> Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86]) by email.devuan.org (Postfix) with ESMTPS id 6107C1CB for <[email protected]>; Wed, 6 Sep 2023 09:37:04 +0000 (UTC) Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3]) by mx.hindley.org.uk (Postfix) with SMTP id 074328E6 for <[email protected]>; Wed, 6 Sep 2023 10:37:03 +0100 (BST) Received: (nullmailer pid 29178 invoked by uid 1000); Wed, 06 Sep 2023 09:37:02 -0000 From: Mark Hindley <[email protected]> To: [email protected] Subject: forcibly merging 778 777 Date: Wed, 06 Sep 2023 10:37:02 +0100 User-Agent: devscripts bts/2.23.4 Message-ID: <[email protected]> forcemerge 778 777 thanks ------------=_1693993082-1162-0 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by bugs.devuan.org; 30 Aug 2023 08:10:31 +0000 Return-Path: <[email protected]> Delivered-To: [email protected] Received: from email.devuan.org [2a01:4f8:140:32a1::58c6:6473] by doc.devuan.org with IMAP (fetchmail-6.4.16) for <debbugs@localhost> (single-drop); Wed, 30 Aug 2023 08:10:31 +0000 (UTC) Received: from email.devuan.org by email.devuan.org with LMTP id CDtgAiL57mSMNwAAmSBk0A (envelope-from <[email protected]>) for <[email protected]>; Wed, 30 Aug 2023 08:09:06 +0000 Received: by email.devuan.org (Postfix, from userid 109) id F3C4F8CF; Wed, 30 Aug 2023 08:09:05 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org X-Spam-Level: X-Spam-Status: No, score=-0.0 required=5.0 tests=SPF_HELO_PASS autolearn=ham autolearn_force=no version=3.4.6 Received-SPF: Pass (sender SPF authorized) identity=helo; client-ip=2a10:3781:1669:1::23; helo=gosper.idefix.net; [email protected]; receiver=<UNKNOWN> Received: from gosper.idefix.net (gosper.idefix.net [IPv6:2a10:3781:1669:1::23]) by email.devuan.org (Postfix) with ESMTPS id D0D241D for <[email protected]>; Wed, 30 Aug 2023 08:09:03 +0000 (UTC) Received: from gosper.idefix.net (localhost [IPv6:0:0:0:0:0:0:0:1]) by gosper.idefix.net (8.15.2/8.15.2/Debian-14~deb10u1) with ESMTPS id 37U88xFG024804 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT); Wed, 30 Aug 2023 10:09:00 +0200 Received: (from koos@localhost) by gosper.idefix.net (8.15.2/8.15.2/Submit) id 37U88xWv024803; Wed, 30 Aug 2023 10:08:59 +0200 X-Authentication-Warning: gosper.idefix.net: koos set sender to [email protected] using -f Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Koos van den Hout <[email protected]> To: Devuan Bug Tracking System <[email protected]> Subject: cron-apt does not report repositories with GPG problems Message-ID: <169338293943.22928.1126947161839227298.reportbug@gosper.idefix.net> X-Mailer: reportbug 7.5.3+devuan3 Date: Wed, 30 Aug 2023 10:08:59 +0200 X-Virus-Scanned: clamav-milter 0.103.9 at gosper X-Virus-Status: Clean Package: cron-apt Version: 0.13.0 Severity: normal Dear Maintainer, I noticed the following using cron-apt: when a repository rotates its GPG keys, cron-apt does not act on the error message about the unavailable GPG key. This makes cron-apt not report about updates until a manual run of apt update shows there is a problem with this repository and this is fixed. I expected cron-apt to report this error because this holds back updates when the GPG key for a repository is updated. I ran into this with the Grafana repository. There were no messages from cron-apt, but by hand I saw the key had changed: root@gosper:~# apt update Get:1 https://packages.grafana.com/oss/deb stable InRelease [5,984 B] Err:1 https://packages.grafana.com/oss/deb stable InRelease The following signatures couldn't be verified because the public key is not av ailable: NO_PUBKEY 963FA27710458545 Hit:2 http://deb.devuan.org/merged beowulf InRelease Hit:3 http://deb.devuan.org/merged beowulf-security InRelease Hit:4 http://deb.devuan.org/merged beowulf-updates InRelease Reading package lists... Done Building dependency tree Reading state information... Done All packages are up to date. W: An error occurred during the signature verification. The repository is not up dated and the previous index files will be used. GPG error: https://packages.gra fana.com/oss/deb stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 963FA27710458545 W: Failed to fetch https://packages.grafana.com/oss/deb/dists/stable/InRelease The following signatures couldn't be verified because the public key is not avai lable: NO_PUBKEY 963FA27710458545 W: Some index files failed to download. They have been ignored, or old ones used instead. -- System Information: Distributor ID: Devuan Description: Devuan GNU/Linux 3 (beowulf) Release: 3 Codename: beowulf Architecture: x86_64 Kernel: Linux 4.19.0-24-amd64 (SMP w/6 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init) LSM: AppArmor: enabled Versions of packages cron-apt depends on: ii apt 1.8.2.3 Versions of packages cron-apt recommends: ii cron [cron-daemon] 3.0pl1-134+deb10u1 ii liblockfile1 1.14-1.1 ii sendmail-bin [mail-transport-agent] 8.15.2-14~deb10u1 cron-apt suggests no packages. -- Configuration Files: /etc/cron-apt/config changed: MAILON="upgrade" -- no debconf information ------------=_1693993082-1162-0--
Received: (at control) by bugs.devuan.org; 6 Sep 2023 09:37:33 +0000 Return-Path: <[email protected]> Delivered-To: [email protected] Received: from email.devuan.org [2a01:4f8:140:32a1::58c6:6473] by doc.devuan.org with IMAP (fetchmail-6.4.16) for <debbugs@localhost> (single-drop); Wed, 06 Sep 2023 09:37:33 +0000 (UTC) Received: from email.devuan.org by email.devuan.org with LMTP id lno3H0VI+GQCUgAAmSBk0A (envelope-from <[email protected]>) for <[email protected]>; Wed, 06 Sep 2023 09:37:09 +0000 Received: by email.devuan.org (Postfix, from userid 109) id 6618590F; Wed, 6 Sep 2023 09:37:09 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org X-Spam-Level: X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS autolearn=no autolearn_force=no version=3.4.6 Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; [email protected]; receiver=<UNKNOWN> Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86]) by email.devuan.org (Postfix) with ESMTPS id 6107C1CB for <[email protected]>; Wed, 6 Sep 2023 09:37:04 +0000 (UTC) Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3]) by mx.hindley.org.uk (Postfix) with SMTP id 074328E6 for <[email protected]>; Wed, 6 Sep 2023 10:37:03 +0100 (BST) Received: (nullmailer pid 29178 invoked by uid 1000); Wed, 06 Sep 2023 09:37:02 -0000 From: Mark Hindley <[email protected]> To: [email protected] Subject: forcibly merging 778 777 Date: Wed, 06 Sep 2023 10:37:02 +0100 User-Agent: devscripts bts/2.23.4 Message-ID: <[email protected]> forcemerge 778 777 thanks
Devuan BTS -- Powered by Debian bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.
Devuan Bugs Owner <[email protected]>.
Last modified:
Sun, 1 Dec 2024 02:39:01 UTC