Devuan logs - #778, boring messages

Message sent to [email protected], [email protected]:

Subject: bug#778: cron-apt does not report repositories with GPG problems
Reply-To: Koos van den Hout <[email protected]>, [email protected]
Resent-From: Koos van den Hout <[email protected]>
Resent-To: [email protected]
Resent-CC: [email protected]
Resent-Date: Wed, 30 Aug 2023 08:20:02 +0000
Resent-Message-ID: <[email protected]>
Resent-Sender: [email protected]
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2a10:3781:1669:1::23; helo=gosper.idefix.net; [email protected]; receiver=<UNKNOWN> 
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Koos van den Hout <[email protected]>
To: Devuan Bug Tracking System <[email protected]>
Message-ID: <169338346613.25642.11656744352431709814.reportbug@gosper.idefix.net>
Date: Wed, 30 Aug 2023 10:17:46 +0200

Package: cron-apt
Version: 0.13.0
Severity: normal

(this time with the correct e-mail address)

Dear Maintainer,

I noticed the following using cron-apt: when a repository rotates its
GPG keys, cron-apt does not act on the error message about the unavailable
GPG key. This makes cron-apt not report about updates until a manual run
of apt update shows there is a problem with this repository and this is
fixed.

I expected cron-apt to report this error because this holds back updates
when the GPG key for a repository is updated.

I ran into this with the Grafana repository. There were no messages from
cron-apt, but by hand I saw the key had changed:

root@gosper:~# apt update
Get:1 https://packages.grafana.com/oss/deb stable InRelease [5,984 B]
Err:1 https://packages.grafana.com/oss/deb stable InRelease
  The following signatures couldn't be verified because the public key is not av
ailable: NO_PUBKEY 963FA27710458545
Hit:2 http://deb.devuan.org/merged beowulf InRelease
Hit:3 http://deb.devuan.org/merged beowulf-security InRelease
Hit:4 http://deb.devuan.org/merged beowulf-updates InRelease
Reading package lists... Done
Building dependency tree
Reading state information... Done
All packages are up to date.
W: An error occurred during the signature verification. The repository is not up
dated and the previous index files will be used. GPG error: https://packages.gra
fana.com/oss/deb stable InRelease: The following signatures couldn't be verified
 because the public key is not available: NO_PUBKEY 963FA27710458545
W: Failed to fetch https://packages.grafana.com/oss/deb/dists/stable/InRelease
The following signatures couldn't be verified because the public key is not avai
lable: NO_PUBKEY 963FA27710458545
W: Some index files failed to download. They have been ignored, or old ones used
 instead.

-- System Information:
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 3 (beowulf)
Release:	3
Codename:	beowulf
Architecture: x86_64

Kernel: Linux 4.19.0-24-amd64 (SMP w/6 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages cron-apt depends on:
ii  apt  1.8.2.3

Versions of packages cron-apt recommends:
ii  cron [cron-daemon]                   3.0pl1-134+deb10u1
ii  liblockfile1                         1.14-1.1
ii  sendmail-bin [mail-transport-agent]  8.15.2-14~deb10u1

cron-apt suggests no packages.

-- Configuration Files:
/etc/cron-apt/config changed:
MAILON="upgrade"


-- no debconf information

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.509 (Entity 5.509)
Content-Type: text/plain; charset=utf-8
X-Loop: [email protected]
From: "Devuan bug Tracking System" <[email protected]>
To: Koos van den Hout <[email protected]>
Subject: bug#778: Acknowledgement (cron-apt does not report repositories
 with GPG problems)
Message-ID: <[email protected]>
References: <169338346613.25642.11656744352431709814.reportbug@gosper.idefix.net>
X-Devuan-PR-Message: ack 778
X-Devuan-PR-Package: cron-apt
Reply-To: [email protected]
Date: Wed, 30 Aug 2023 08:20:13 +0000

Thank you for filing a new bug report with Devuan.

You can follow progress on this bug here: 778: https://bugs.devuan.org/cgi/=
bugreport.cgi?bug=3D778.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 [email protected]

If you wish to submit further information on this problem, please
send it to [email protected].

Please do not send mail to [email protected] unless you wish
to report a problem with the Bug-tracking system.

--=20
778: https://bugs.devuan.org/cgi/bugreport.cgi?bug=3D778
Devuan Bug Tracking System
Contact [email protected] with problems

Message sent:

MIME-Version: 1.0
X-Mailer: MIME-tools 5.509 (Entity 5.509)
X-Loop: [email protected]
From: "Devuan bug Tracking System" <[email protected]>
To: Mark Hindley <[email protected]>
Subject: bug#778: marked as done (cron-apt does not report repositories
 with GPG problems)
Message-ID: <[email protected]>
References: <[email protected]>
 <169338346613.25642.11656744352431709814.reportbug@gosper.idefix.net>
X-Devuan-PR-Message: closed 778
X-Devuan-PR-Package: cron-apt
Reply-To: [email protected]
Date: Wed, 30 Aug 2023 09:24:01 +0000
Content-Type: multipart/mixed; boundary="----------=_1693387441-2667-0"

This is a multi-part message in MIME format...

------------=_1693387441-2667-0
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"

Your message dated Wed, 30 Aug 2023 10:21:54 +0100
with message-id <[email protected]>
and subject line Re: bug#778: cron-apt does not report repositories with GP=
G problems
has caused the Devuan bug report #778,
regarding cron-apt does not report repositories with GPG problems
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


--=20
778: https://bugs.devuan.org/cgi/bugreport.cgi?bug=3D778
Devuan Bug Tracking System
Contact [email protected] with problems

------------=_1693387441-2667-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at submit) by bugs.devuan.org; 30 Aug 2023 08:19:32 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from email.devuan.org [2a01:4f8:140:32a1::58c6:6473]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Wed, 30 Aug 2023 08:19:32 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id 627CFD/77mTQNwAAmSBk0A
	(envelope-from <[email protected]>)
	for <[email protected]>; Wed, 30 Aug 2023 08:18:07 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 8FF3F8CF; Wed, 30 Aug 2023 08:17:58 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	DKIM_VALID_AU,SPF_PASS autolearn=ham autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2a10:3781:1669:1::23; helo=gosper.idefix.net; [email protected]; receiver=<UNKNOWN> 
Received: from gosper.idefix.net (gosper.idefix.net [IPv6:2a10:3781:1669:1::23])
	by email.devuan.org (Postfix) with ESMTPS id CAD871D
	for <[email protected]>; Wed, 30 Aug 2023 08:17:48 +0000 (UTC)
Received: from gosper.idefix.net (localhost [IPv6:0:0:0:0:0:0:0:1])
	by gosper.idefix.net (8.15.2/8.15.2/Debian-14~deb10u1) with ESMTPS id 37U8HkvF025805
	(version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT);
	Wed, 30 Aug 2023 10:17:47 +0200
DKIM-Signature: v=1; a=rsa-sha256; c=simple/relaxed; d=idefix.net; s=gosper;
	t=1693383467; bh=pLgBpnwlojJ7ThfjKJVL2X45jQSclhA5L01/Bf2sWbQ=;
	h=From:To:Subject:Date:From;
	b=LYMru/J71ia1+o8ClRnaF/SRaO2R6wT/UlNyrn3besKGA6AvKoSlp3MlfyjoZYZLf
	 dPyOntr8gpx/aZX8s2KNyWFAP2r+sJfSF5hSyNPuo3I+m38/V3GYdqlzpsYhA4D61e
	 BOOOts+RjzfJXycn39UTv960clEqEj2oI82SjMGvX/RYZRfPnjSKQ09+wE+zHySBkC
	 5qA+bNTIMK2d5RFP+xkszdxpOefBi8NEcchFyA01GZoj3JvcEMIP6TJRBwF7+dua3V
	 HRz7mrc5x/eAL3gOiF1GogKMa3DODGnnKPa0AW6Caz2wFGZqjlI9T8nH6JluZ5pkWK
	 msKp0BuREb24A==
Received: (from koos@localhost)
	by gosper.idefix.net (8.15.2/8.15.2/Submit) id 37U8Hknq025804;
	Wed, 30 Aug 2023 10:17:46 +0200
X-Authentication-Warning: gosper.idefix.net: koos set sender to [email protected] using -f
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Koos van den Hout <[email protected]>
To: Devuan Bug Tracking System <[email protected]>
Subject: cron-apt does not report repositories with GPG problems
Message-ID: <169338346613.25642.11656744352431709814.reportbug@gosper.idefix.net>
X-Mailer: reportbug 7.5.3+devuan3
Date: Wed, 30 Aug 2023 10:17:46 +0200
X-Virus-Scanned: clamav-milter 0.103.9 at gosper
X-Virus-Status: Clean

Package: cron-apt
Version: 0.13.0
Severity: normal

(this time with the correct e-mail address)

Dear Maintainer,

I noticed the following using cron-apt: when a repository rotates its
GPG keys, cron-apt does not act on the error message about the unavailable
GPG key. This makes cron-apt not report about updates until a manual run
of apt update shows there is a problem with this repository and this is
fixed.

I expected cron-apt to report this error because this holds back updates
when the GPG key for a repository is updated.

I ran into this with the Grafana repository. There were no messages from
cron-apt, but by hand I saw the key had changed:

root@gosper:~# apt update
Get:1 https://packages.grafana.com/oss/deb stable InRelease [5,984 B]
Err:1 https://packages.grafana.com/oss/deb stable InRelease
  The following signatures couldn't be verified because the public key is not av
ailable: NO_PUBKEY 963FA27710458545
Hit:2 http://deb.devuan.org/merged beowulf InRelease
Hit:3 http://deb.devuan.org/merged beowulf-security InRelease
Hit:4 http://deb.devuan.org/merged beowulf-updates InRelease
Reading package lists... Done
Building dependency tree
Reading state information... Done
All packages are up to date.
W: An error occurred during the signature verification. The repository is not up
dated and the previous index files will be used. GPG error: https://packages.gra
fana.com/oss/deb stable InRelease: The following signatures couldn't be verified
 because the public key is not available: NO_PUBKEY 963FA27710458545
W: Failed to fetch https://packages.grafana.com/oss/deb/dists/stable/InRelease
The following signatures couldn't be verified because the public key is not avai
lable: NO_PUBKEY 963FA27710458545
W: Some index files failed to download. They have been ignored, or old ones used
 instead.

-- System Information:
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 3 (beowulf)
Release:	3
Codename:	beowulf
Architecture: x86_64

Kernel: Linux 4.19.0-24-amd64 (SMP w/6 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages cron-apt depends on:
ii  apt  1.8.2.3

Versions of packages cron-apt recommends:
ii  cron [cron-daemon]                   3.0pl1-134+deb10u1
ii  liblockfile1                         1.14-1.1
ii  sendmail-bin [mail-transport-agent]  8.15.2-14~deb10u1

cron-apt suggests no packages.

-- Configuration Files:
/etc/cron-apt/config changed:
MAILON="upgrade"


-- no debconf information

------------=_1693387441-2667-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at 778-done) by bugs.devuan.org; 30 Aug 2023 09:22:33 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from email.devuan.org [2a01:4f8:140:32a1::58c6:6473]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Wed, 30 Aug 2023 09:22:33 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id 7Ex8KjgK72R2OQAAmSBk0A
	(envelope-from <[email protected]>)
	for <[email protected]>; Wed, 30 Aug 2023 09:22:00 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id A18BC8CF; Wed, 30 Aug 2023 09:22:00 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS
	autolearn=no autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; [email protected]; receiver=<UNKNOWN> 
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	by email.devuan.org (Postfix) with ESMTPS id 87C281D
	for <[email protected]>; Wed, 30 Aug 2023 09:21:56 +0000 (UTC)
Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3])
	by mx.hindley.org.uk (Postfix) with SMTP id 2E9E4378;
	Wed, 30 Aug 2023 10:21:55 +0100 (BST)
Received: (nullmailer pid 10418 invoked by uid 1000);
	Wed, 30 Aug 2023 09:21:55 -0000
Date: Wed, 30 Aug 2023 10:21:54 +0100
From: Mark Hindley <[email protected]>
To: Koos van den Hout <[email protected]>, [email protected]
Subject: Re: bug#778: cron-apt does not report repositories with GPG problems
Message-ID: <[email protected]>
References: <169338346613.25642.11656744352431709814.reportbug@gosper.idefix.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <169338346613.25642.11656744352431709814.reportbug@gosper.idefix.net>
X-Debbugs-No-Ack: No Thanks

Koos,

On Wed, Aug 30, 2023 at 10:17:46AM +0200, Koos van den Hout wrote:
> root@gosper:~# apt update
> Get:1 https://packages.grafana.com/oss/deb stable InRelease [5,984 B]
> Err:1 https://packages.grafana.com/oss/deb stable InRelease
>   The following signatures couldn't be verified because the public key is not av
> ailable: NO_PUBKEY 963FA27710458545

There is no bug here. You just need to import the new key for this third-party
repository. Indeed https://packages.grafana.com/ has the instructions for doing
so.

HTH

Mark
------------=_1693387441-2667-0--

Message sent:

MIME-Version: 1.0
X-Mailer: MIME-tools 5.509 (Entity 5.509)
X-Loop: [email protected]
From: "Devuan bug Tracking System" <[email protected]>
To: Koos van den Hout <[email protected]>
Subject: bug#778 closed by Mark Hindley <[email protected]> (Re:
 bug#778: cron-apt does not report repositories with GPG problems)
Message-ID: <[email protected]>
References: <[email protected]>
 <169338346613.25642.11656744352431709814.reportbug@gosper.idefix.net>
X-Devuan-PR-Message: they-closed 778
X-Devuan-PR-Package: cron-apt
Reply-To: [email protected]
Date: Wed, 30 Aug 2023 09:24:03 +0000
Content-Type: multipart/mixed; boundary="----------=_1693387443-2667-1"

This is a multi-part message in MIME format...

------------=_1693387443-2667-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"

This is an automatic notification regarding your bug report
which was filed against the cron-apt package:

#778: cron-apt does not report repositories with GPG problems

It has been closed by Mark Hindley <[email protected]>.

Their explanation is attached below along with your original report.
If this explanation is unsatisfactory and you have not received a
better one in a separate message then please contact Mark Hindley <mark@hin=
dley.org.uk> by
replying to this email.


--=20
778: https://bugs.devuan.org/cgi/bugreport.cgi?bug=3D778
Devuan Bug Tracking System
Contact [email protected] with problems

------------=_1693387443-2667-1
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at 778-done) by bugs.devuan.org; 30 Aug 2023 09:22:33 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from email.devuan.org [2a01:4f8:140:32a1::58c6:6473]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Wed, 30 Aug 2023 09:22:33 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id 7Ex8KjgK72R2OQAAmSBk0A
	(envelope-from <[email protected]>)
	for <[email protected]>; Wed, 30 Aug 2023 09:22:00 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id A18BC8CF; Wed, 30 Aug 2023 09:22:00 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS
	autolearn=no autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; [email protected]; receiver=<UNKNOWN> 
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	by email.devuan.org (Postfix) with ESMTPS id 87C281D
	for <[email protected]>; Wed, 30 Aug 2023 09:21:56 +0000 (UTC)
Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3])
	by mx.hindley.org.uk (Postfix) with SMTP id 2E9E4378;
	Wed, 30 Aug 2023 10:21:55 +0100 (BST)
Received: (nullmailer pid 10418 invoked by uid 1000);
	Wed, 30 Aug 2023 09:21:55 -0000
Date: Wed, 30 Aug 2023 10:21:54 +0100
From: Mark Hindley <[email protected]>
To: Koos van den Hout <[email protected]>, [email protected]
Subject: Re: bug#778: cron-apt does not report repositories with GPG problems
Message-ID: <[email protected]>
References: <169338346613.25642.11656744352431709814.reportbug@gosper.idefix.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <169338346613.25642.11656744352431709814.reportbug@gosper.idefix.net>
X-Debbugs-No-Ack: No Thanks

Koos,

On Wed, Aug 30, 2023 at 10:17:46AM +0200, Koos van den Hout wrote:
> root@gosper:~# apt update
> Get:1 https://packages.grafana.com/oss/deb stable InRelease [5,984 B]
> Err:1 https://packages.grafana.com/oss/deb stable InRelease
>   The following signatures couldn't be verified because the public key is not av
> ailable: NO_PUBKEY 963FA27710458545

There is no bug here. You just need to import the new key for this third-party
repository. Indeed https://packages.grafana.com/ has the instructions for doing
so.

HTH

Mark
------------=_1693387443-2667-1
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at submit) by bugs.devuan.org; 30 Aug 2023 08:19:32 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from email.devuan.org [2a01:4f8:140:32a1::58c6:6473]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Wed, 30 Aug 2023 08:19:32 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id 627CFD/77mTQNwAAmSBk0A
	(envelope-from <[email protected]>)
	for <[email protected]>; Wed, 30 Aug 2023 08:18:07 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 8FF3F8CF; Wed, 30 Aug 2023 08:17:58 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	DKIM_VALID_AU,SPF_PASS autolearn=ham autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2a10:3781:1669:1::23; helo=gosper.idefix.net; [email protected]; receiver=<UNKNOWN> 
Received: from gosper.idefix.net (gosper.idefix.net [IPv6:2a10:3781:1669:1::23])
	by email.devuan.org (Postfix) with ESMTPS id CAD871D
	for <[email protected]>; Wed, 30 Aug 2023 08:17:48 +0000 (UTC)
Received: from gosper.idefix.net (localhost [IPv6:0:0:0:0:0:0:0:1])
	by gosper.idefix.net (8.15.2/8.15.2/Debian-14~deb10u1) with ESMTPS id 37U8HkvF025805
	(version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT);
	Wed, 30 Aug 2023 10:17:47 +0200
DKIM-Signature: v=1; a=rsa-sha256; c=simple/relaxed; d=idefix.net; s=gosper;
	t=1693383467; bh=pLgBpnwlojJ7ThfjKJVL2X45jQSclhA5L01/Bf2sWbQ=;
	h=From:To:Subject:Date:From;
	b=LYMru/J71ia1+o8ClRnaF/SRaO2R6wT/UlNyrn3besKGA6AvKoSlp3MlfyjoZYZLf
	 dPyOntr8gpx/aZX8s2KNyWFAP2r+sJfSF5hSyNPuo3I+m38/V3GYdqlzpsYhA4D61e
	 BOOOts+RjzfJXycn39UTv960clEqEj2oI82SjMGvX/RYZRfPnjSKQ09+wE+zHySBkC
	 5qA+bNTIMK2d5RFP+xkszdxpOefBi8NEcchFyA01GZoj3JvcEMIP6TJRBwF7+dua3V
	 HRz7mrc5x/eAL3gOiF1GogKMa3DODGnnKPa0AW6Caz2wFGZqjlI9T8nH6JluZ5pkWK
	 msKp0BuREb24A==
Received: (from koos@localhost)
	by gosper.idefix.net (8.15.2/8.15.2/Submit) id 37U8Hknq025804;
	Wed, 30 Aug 2023 10:17:46 +0200
X-Authentication-Warning: gosper.idefix.net: koos set sender to [email protected] using -f
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Koos van den Hout <[email protected]>
To: Devuan Bug Tracking System <[email protected]>
Subject: cron-apt does not report repositories with GPG problems
Message-ID: <169338346613.25642.11656744352431709814.reportbug@gosper.idefix.net>
X-Mailer: reportbug 7.5.3+devuan3
Date: Wed, 30 Aug 2023 10:17:46 +0200
X-Virus-Scanned: clamav-milter 0.103.9 at gosper
X-Virus-Status: Clean

Package: cron-apt
Version: 0.13.0
Severity: normal

(this time with the correct e-mail address)

Dear Maintainer,

I noticed the following using cron-apt: when a repository rotates its
GPG keys, cron-apt does not act on the error message about the unavailable
GPG key. This makes cron-apt not report about updates until a manual run
of apt update shows there is a problem with this repository and this is
fixed.

I expected cron-apt to report this error because this holds back updates
when the GPG key for a repository is updated.

I ran into this with the Grafana repository. There were no messages from
cron-apt, but by hand I saw the key had changed:

root@gosper:~# apt update
Get:1 https://packages.grafana.com/oss/deb stable InRelease [5,984 B]
Err:1 https://packages.grafana.com/oss/deb stable InRelease
  The following signatures couldn't be verified because the public key is not av
ailable: NO_PUBKEY 963FA27710458545
Hit:2 http://deb.devuan.org/merged beowulf InRelease
Hit:3 http://deb.devuan.org/merged beowulf-security InRelease
Hit:4 http://deb.devuan.org/merged beowulf-updates InRelease
Reading package lists... Done
Building dependency tree
Reading state information... Done
All packages are up to date.
W: An error occurred during the signature verification. The repository is not up
dated and the previous index files will be used. GPG error: https://packages.gra
fana.com/oss/deb stable InRelease: The following signatures couldn't be verified
 because the public key is not available: NO_PUBKEY 963FA27710458545
W: Failed to fetch https://packages.grafana.com/oss/deb/dists/stable/InRelease
The following signatures couldn't be verified because the public key is not avai
lable: NO_PUBKEY 963FA27710458545
W: Some index files failed to download. They have been ignored, or old ones used
 instead.

-- System Information:
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 3 (beowulf)
Release:	3
Codename:	beowulf
Architecture: x86_64

Kernel: Linux 4.19.0-24-amd64 (SMP w/6 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages cron-apt depends on:
ii  apt  1.8.2.3

Versions of packages cron-apt recommends:
ii  cron [cron-daemon]                   3.0pl1-134+deb10u1
ii  liblockfile1                         1.14-1.1
ii  sendmail-bin [mail-transport-agent]  8.15.2-14~deb10u1

cron-apt suggests no packages.

-- Configuration Files:
/etc/cron-apt/config changed:
MAILON="upgrade"


-- no debconf information

------------=_1693387443-2667-1--

Message received at [email protected]:

Received: (at control) by bugs.devuan.org; 6 Sep 2023 09:37:33 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from email.devuan.org [2a01:4f8:140:32a1::58c6:6473]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Wed, 06 Sep 2023 09:37:33 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id lno3H0VI+GQCUgAAmSBk0A
	(envelope-from <[email protected]>)
	for <[email protected]>; Wed, 06 Sep 2023 09:37:09 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 6618590F; Wed,  6 Sep 2023 09:37:09 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS
	autolearn=no autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; [email protected]; receiver=<UNKNOWN> 
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	by email.devuan.org (Postfix) with ESMTPS id 6107C1CB
	for <[email protected]>; Wed,  6 Sep 2023 09:37:04 +0000 (UTC)
Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3])
	by mx.hindley.org.uk (Postfix) with SMTP id 074328E6
	for <[email protected]>; Wed,  6 Sep 2023 10:37:03 +0100 (BST)
Received: (nullmailer pid 29178 invoked by uid 1000);
	Wed, 06 Sep 2023 09:37:02 -0000
From: Mark Hindley <[email protected]>
To: [email protected]
Subject: forcibly merging 778 777
Date: Wed, 06 Sep 2023 10:37:02 +0100
User-Agent: devscripts bts/2.23.4
Message-ID: <[email protected]>

forcemerge 778 777
thanks