Devuan logs - #777, boring messages

Message sent to devuan-bugs@lists.dyne.org, devuan-dev@lists.dyne.org:

Subject: bug#777: cron-apt does not report repositories with GPG problems
Reply-To: Koos van den Hout <koos@kzdoos.xs4all.nl>, 777@bugs.devuan.org
Resent-From: Koos van den Hout <koos@kzdoos.xs4all.nl>
Resent-To: devuan-bugs@lists.dyne.org
Resent-CC: devuan-dev@lists.dyne.org
Resent-Date: Wed, 30 Aug 2023 08:12:01 +0000
Resent-Message-ID: <handler.777.B.169338303121764@bugs.devuan.org>
Resent-Sender: owner@bugs.devuan.org
Received-SPF: Pass (sender SPF authorized) identity=helo; client-ip=2a10:3781:1669:1::23; helo=gosper.idefix.net; envelope-from=koos@kzdoos.xs4all.nl; receiver=<UNKNOWN> 
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Koos van den Hout <koos@kzdoos.xs4all.nl>
To: Devuan Bug Tracking System <submit@bugs.devuan.org>
Message-ID: <169338293943.22928.1126947161839227298.reportbug@gosper.idefix.net>
Date: Wed, 30 Aug 2023 10:08:59 +0200

Package: cron-apt
Version: 0.13.0
Severity: normal

Dear Maintainer,

I noticed the following using cron-apt: when a repository rotates its
GPG keys, cron-apt does not act on the error message about the unavailable
GPG key. This makes cron-apt not report about updates until a manual run
of apt update shows there is a problem with this repository and this is
fixed.

I expected cron-apt to report this error because this holds back updates
when the GPG key for a repository is updated.

I ran into this with the Grafana repository. There were no messages from
cron-apt, but by hand I saw the key had changed:

root@gosper:~# apt update
Get:1 https://packages.grafana.com/oss/deb stable InRelease [5,984 B]
Err:1 https://packages.grafana.com/oss/deb stable InRelease
  The following signatures couldn't be verified because the public key is not av
ailable: NO_PUBKEY 963FA27710458545
Hit:2 http://deb.devuan.org/merged beowulf InRelease
Hit:3 http://deb.devuan.org/merged beowulf-security InRelease
Hit:4 http://deb.devuan.org/merged beowulf-updates InRelease
Reading package lists... Done
Building dependency tree
Reading state information... Done
All packages are up to date.
W: An error occurred during the signature verification. The repository is not up
dated and the previous index files will be used. GPG error: https://packages.gra
fana.com/oss/deb stable InRelease: The following signatures couldn't be verified
 because the public key is not available: NO_PUBKEY 963FA27710458545
W: Failed to fetch https://packages.grafana.com/oss/deb/dists/stable/InRelease
The following signatures couldn't be verified because the public key is not avai
lable: NO_PUBKEY 963FA27710458545
W: Some index files failed to download. They have been ignored, or old ones used
 instead.


-- System Information:
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 3 (beowulf)
Release:	3
Codename:	beowulf
Architecture: x86_64

Kernel: Linux 4.19.0-24-amd64 (SMP w/6 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages cron-apt depends on:
ii  apt  1.8.2.3

Versions of packages cron-apt recommends:
ii  cron [cron-daemon]                   3.0pl1-134+deb10u1
ii  liblockfile1                         1.14-1.1
ii  sendmail-bin [mail-transport-agent]  8.15.2-14~deb10u1

cron-apt suggests no packages.

-- Configuration Files:
/etc/cron-apt/config changed:
MAILON="upgrade"


-- no debconf information

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.509 (Entity 5.509)
Content-Type: text/plain; charset=utf-8
X-Loop: owner@bugs.devuan.org
From: "Devuan bug Tracking System" <owner@bugs.devuan.org>
To: Koos van den Hout <koos@kzdoos.xs4all.nl>
Subject: bug#777: Acknowledgement (cron-apt does not report repositories
 with GPG problems)
Message-ID: <handler.777.B.169338303121764.ack@bugs.devuan.org>
References: <169338293943.22928.1126947161839227298.reportbug@gosper.idefix.net>
X-Devuan-PR-Message: ack 777
X-Devuan-PR-Package: cron-apt
Reply-To: 777@bugs.devuan.org
Date: Wed, 30 Aug 2023 08:12:02 +0000

Thank you for filing a new bug report with Devuan.

You can follow progress on this bug here: 777: https://bugs.devuan.org/cgi/=
bugreport.cgi?bug=3D777.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 devuan-dev@lists.dyne.org

If you wish to submit further information on this problem, please
send it to 777@bugs.devuan.org.

Please do not send mail to owner@bugs.devuan.org unless you wish
to report a problem with the Bug-tracking system.

--=20
777: https://bugs.devuan.org/cgi/bugreport.cgi?bug=3D777
Devuan Bug Tracking System
Contact owner@bugs.devuan.org with problems

Message received at control@bugs.devuan.org:

Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; envelope-from=mark@hindley.org.uk; receiver=<UNKNOWN> 
From: Mark Hindley <mark@hindley.org.uk>
To: control@bugs.devuan.org
Subject: forcibly merging 778 777
Date: Wed, 06 Sep 2023 10:37:02 +0100
User-Agent: devscripts bts/2.23.4
Message-ID: <1693993022-2487-bts-mark@hindley.org.uk>

forcemerge 778 777
thanks

Message sent to Koos van den Hout <koos@kzdoos.xs4all.nl>:

MIME-Version: 1.0
X-Mailer: MIME-tools 5.509 (Entity 5.509)
X-Loop: owner@bugs.devuan.org
From: owner@bugs.devuan.org (Devuan Bug Tracking System)
Subject: Bug#777 closed by Mark Hindley <mark@hindley.org.uk> (forcibly
 merging 778 777)
Message-ID: <handler.777.c.16939930531153.notifdone@bugs.devuan.org>
References: <1693993022-2487-bts-mark@hindley.org.uk>
X-Devuan-PR-Message: they-closed 777
X-Devuan-PR-Package: cron-apt
X-Devuan-PR-Source: cron-apt
Date: Wed, 06 Sep 2023 09:38:02 +0000
Content-Type: multipart/mixed; boundary="----------=_1693993082-1162-0"

This is a multi-part message in MIME format...

------------=_1693993082-1162-0
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=utf-8

This is an automatic notification regarding your bug report
which was filed against the cron-apt package:

#777: cron-apt does not report repositories with GPG problems

It has been closed by Mark Hindley <mark@hindley.org.uk>.

Their explanation is attached below along with your original report.
If this explanation is unsatisfactory and you have not received a
better one in a separate message then please contact Mark Hindley <mark@hin=
dley.org.uk> by
replying to this email.


--=20
Devuan Bug Tracking System
Contact owner@bugs.devuan.org with problems

------------=_1693993082-1162-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at control) by bugs.devuan.org; 6 Sep 2023 09:37:33 +0000
Return-Path: <mark@hindley.org.uk>
Delivered-To: bugs@devuan.org
Received: from email.devuan.org [2a01:4f8:140:32a1::58c6:6473]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Wed, 06 Sep 2023 09:37:33 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id lno3H0VI+GQCUgAAmSBk0A
	(envelope-from <mark@hindley.org.uk>)
	for <bugs@devuan.org>; Wed, 06 Sep 2023 09:37:09 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 6618590F; Wed,  6 Sep 2023 09:37:09 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS
	autolearn=no autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; envelope-from=mark@hindley.org.uk; receiver=<UNKNOWN> 
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	by email.devuan.org (Postfix) with ESMTPS id 6107C1CB
	for <control@bugs.devuan.org>; Wed,  6 Sep 2023 09:37:04 +0000 (UTC)
Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3])
	by mx.hindley.org.uk (Postfix) with SMTP id 074328E6
	for <control@bugs.devuan.org>; Wed,  6 Sep 2023 10:37:03 +0100 (BST)
Received: (nullmailer pid 29178 invoked by uid 1000);
	Wed, 06 Sep 2023 09:37:02 -0000
From: Mark Hindley <mark@hindley.org.uk>
To: control@bugs.devuan.org
Subject: forcibly merging 778 777
Date: Wed, 06 Sep 2023 10:37:02 +0100
User-Agent: devscripts bts/2.23.4
Message-ID: <1693993022-2487-bts-mark@hindley.org.uk>

forcemerge 778 777
thanks


------------=_1693993082-1162-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at submit) by bugs.devuan.org; 30 Aug 2023 08:10:31 +0000
Return-Path: <koos@kzdoos.xs4all.nl>
Delivered-To: bugs@devuan.org
Received: from email.devuan.org [2a01:4f8:140:32a1::58c6:6473]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Wed, 30 Aug 2023 08:10:31 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id CDtgAiL57mSMNwAAmSBk0A
	(envelope-from <koos@kzdoos.xs4all.nl>)
	for <bugs@devuan.org>; Wed, 30 Aug 2023 08:09:06 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id F3C4F8CF; Wed, 30 Aug 2023 08:09:05 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.0 required=5.0 tests=SPF_HELO_PASS autolearn=ham
	autolearn_force=no version=3.4.6
Received-SPF: Pass (sender SPF authorized) identity=helo; client-ip=2a10:3781:1669:1::23; helo=gosper.idefix.net; envelope-from=koos@kzdoos.xs4all.nl; receiver=<UNKNOWN> 
Received: from gosper.idefix.net (gosper.idefix.net [IPv6:2a10:3781:1669:1::23])
	by email.devuan.org (Postfix) with ESMTPS id D0D241D
	for <submit@bugs.devuan.org>; Wed, 30 Aug 2023 08:09:03 +0000 (UTC)
Received: from gosper.idefix.net (localhost [IPv6:0:0:0:0:0:0:0:1])
	by gosper.idefix.net (8.15.2/8.15.2/Debian-14~deb10u1) with ESMTPS id 37U88xFG024804
	(version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT);
	Wed, 30 Aug 2023 10:09:00 +0200
Received: (from koos@localhost)
	by gosper.idefix.net (8.15.2/8.15.2/Submit) id 37U88xWv024803;
	Wed, 30 Aug 2023 10:08:59 +0200
X-Authentication-Warning: gosper.idefix.net: koos set sender to koos@kzdoos.xs4all.nl using -f
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Koos van den Hout <koos@kzdoos.xs4all.nl>
To: Devuan Bug Tracking System <submit@bugs.devuan.org>
Subject: cron-apt does not report repositories with GPG problems
Message-ID: <169338293943.22928.1126947161839227298.reportbug@gosper.idefix.net>
X-Mailer: reportbug 7.5.3+devuan3
Date: Wed, 30 Aug 2023 10:08:59 +0200
X-Virus-Scanned: clamav-milter 0.103.9 at gosper
X-Virus-Status: Clean

Package: cron-apt
Version: 0.13.0
Severity: normal

Dear Maintainer,

I noticed the following using cron-apt: when a repository rotates its
GPG keys, cron-apt does not act on the error message about the unavailable
GPG key. This makes cron-apt not report about updates until a manual run
of apt update shows there is a problem with this repository and this is
fixed.

I expected cron-apt to report this error because this holds back updates
when the GPG key for a repository is updated.

I ran into this with the Grafana repository. There were no messages from
cron-apt, but by hand I saw the key had changed:

root@gosper:~# apt update
Get:1 https://packages.grafana.com/oss/deb stable InRelease [5,984 B]
Err:1 https://packages.grafana.com/oss/deb stable InRelease
  The following signatures couldn't be verified because the public key is not av
ailable: NO_PUBKEY 963FA27710458545
Hit:2 http://deb.devuan.org/merged beowulf InRelease
Hit:3 http://deb.devuan.org/merged beowulf-security InRelease
Hit:4 http://deb.devuan.org/merged beowulf-updates InRelease
Reading package lists... Done
Building dependency tree
Reading state information... Done
All packages are up to date.
W: An error occurred during the signature verification. The repository is not up
dated and the previous index files will be used. GPG error: https://packages.gra
fana.com/oss/deb stable InRelease: The following signatures couldn't be verified
 because the public key is not available: NO_PUBKEY 963FA27710458545
W: Failed to fetch https://packages.grafana.com/oss/deb/dists/stable/InRelease
The following signatures couldn't be verified because the public key is not avai
lable: NO_PUBKEY 963FA27710458545
W: Some index files failed to download. They have been ignored, or old ones used
 instead.


-- System Information:
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 3 (beowulf)
Release:	3
Codename:	beowulf
Architecture: x86_64

Kernel: Linux 4.19.0-24-amd64 (SMP w/6 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages cron-apt depends on:
ii  apt  1.8.2.3

Versions of packages cron-apt recommends:
ii  cron [cron-daemon]                   3.0pl1-134+deb10u1
ii  liblockfile1                         1.14-1.1
ii  sendmail-bin [mail-transport-agent]  8.15.2-14~deb10u1

cron-apt suggests no packages.

-- Configuration Files:
/etc/cron-apt/config changed:
MAILON="upgrade"


-- no debconf information

------------=_1693993082-1162-0--

Message received at control@bugs.devuan.org:

Received: (at control) by bugs.devuan.org; 6 Sep 2023 09:37:33 +0000
Return-Path: <mark@hindley.org.uk>
Delivered-To: bugs@devuan.org
Received: from email.devuan.org [2a01:4f8:140:32a1::58c6:6473]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Wed, 06 Sep 2023 09:37:33 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id lno3H0VI+GQCUgAAmSBk0A
	(envelope-from <mark@hindley.org.uk>)
	for <bugs@devuan.org>; Wed, 06 Sep 2023 09:37:09 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 6618590F; Wed,  6 Sep 2023 09:37:09 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS
	autolearn=no autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; envelope-from=mark@hindley.org.uk; receiver=<UNKNOWN> 
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	by email.devuan.org (Postfix) with ESMTPS id 6107C1CB
	for <control@bugs.devuan.org>; Wed,  6 Sep 2023 09:37:04 +0000 (UTC)
Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3])
	by mx.hindley.org.uk (Postfix) with SMTP id 074328E6
	for <control@bugs.devuan.org>; Wed,  6 Sep 2023 10:37:03 +0100 (BST)
Received: (nullmailer pid 29178 invoked by uid 1000);
	Wed, 06 Sep 2023 09:37:02 -0000
From: Mark Hindley <mark@hindley.org.uk>
To: control@bugs.devuan.org
Subject: forcibly merging 778 777
Date: Wed, 06 Sep 2023 10:37:02 +0100
User-Agent: devscripts bts/2.23.4
Message-ID: <1693993022-2487-bts-mark@hindley.org.uk>

forcemerge 778 777
thanks