Home | Devuan | Git | Forum | Packages | Popcon
Donate now!
Download

Devuan bug report logs - #778
cron-apt does not report repositories with GPG problems

Package: cron-apt; Reported by: Koos van den Hout <[email protected]>; merged with #777; Done: Mark Hindley <[email protected]>; Maintainer for cron-apt is (unknown).
Merged 777 778 Request was from Mark Hindley <[email protected]> to [email protected]. Full text available.

Message received at [email protected]:


Received: (at 778-done) by bugs.devuan.org; 30 Aug 2023 09:22:33 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from email.devuan.org [2a01:4f8:140:32a1::58c6:6473]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Wed, 30 Aug 2023 09:22:33 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id 7Ex8KjgK72R2OQAAmSBk0A
	(envelope-from <[email protected]>)
	for <[email protected]>; Wed, 30 Aug 2023 09:22:00 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id A18BC8CF; Wed, 30 Aug 2023 09:22:00 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS
	autolearn=no autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; [email protected]; receiver=<UNKNOWN> 
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	by email.devuan.org (Postfix) with ESMTPS id 87C281D
	for <[email protected]>; Wed, 30 Aug 2023 09:21:56 +0000 (UTC)
Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3])
	by mx.hindley.org.uk (Postfix) with SMTP id 2E9E4378;
	Wed, 30 Aug 2023 10:21:55 +0100 (BST)
Received: (nullmailer pid 10418 invoked by uid 1000);
	Wed, 30 Aug 2023 09:21:55 -0000
Date: Wed, 30 Aug 2023 10:21:54 +0100
From: Mark Hindley <[email protected]>
To: Koos van den Hout <[email protected]>, [email protected]
Subject: Re: bug#778: cron-apt does not report repositories with GPG problems
Message-ID: <[email protected]>
References: <169338346613.25642.11656744352431709814.reportbug@gosper.idefix.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <169338346613.25642.11656744352431709814.reportbug@gosper.idefix.net>
X-Debbugs-No-Ack: No Thanks

Koos,

On Wed, Aug 30, 2023 at 10:17:46AM +0200, Koos van den Hout wrote:
> root@gosper:~# apt update
> Get:1 https://packages.grafana.com/oss/deb stable InRelease [5,984 B]
> Err:1 https://packages.grafana.com/oss/deb stable InRelease
>   The following signatures couldn't be verified because the public key is not av
> ailable: NO_PUBKEY 963FA27710458545

There is no bug here. You just need to import the new key for this third-party
repository. Indeed https://packages.grafana.com/ has the instructions for doing
so.

HTH

Mark
Notification sent to Koos van den Hout <[email protected]>:
bug acknowledged by developer. Full text available.
Reply sent to Mark Hindley <[email protected]>:
You have taken responsibility. Full text available.

Message received at [email protected]:


Received: (at submit) by bugs.devuan.org; 30 Aug 2023 08:19:32 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from email.devuan.org [2a01:4f8:140:32a1::58c6:6473]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Wed, 30 Aug 2023 08:19:32 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id 627CFD/77mTQNwAAmSBk0A
	(envelope-from <[email protected]>)
	for <[email protected]>; Wed, 30 Aug 2023 08:18:07 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 8FF3F8CF; Wed, 30 Aug 2023 08:17:58 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	DKIM_VALID_AU,SPF_PASS autolearn=ham autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2a10:3781:1669:1::23; helo=gosper.idefix.net; [email protected]; receiver=<UNKNOWN> 
Received: from gosper.idefix.net (gosper.idefix.net [IPv6:2a10:3781:1669:1::23])
	by email.devuan.org (Postfix) with ESMTPS id CAD871D
	for <[email protected]>; Wed, 30 Aug 2023 08:17:48 +0000 (UTC)
Received: from gosper.idefix.net (localhost [IPv6:0:0:0:0:0:0:0:1])
	by gosper.idefix.net (8.15.2/8.15.2/Debian-14~deb10u1) with ESMTPS id 37U8HkvF025805
	(version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT);
	Wed, 30 Aug 2023 10:17:47 +0200
DKIM-Signature: v=1; a=rsa-sha256; c=simple/relaxed; d=idefix.net; s=gosper;
	t=1693383467; bh=pLgBpnwlojJ7ThfjKJVL2X45jQSclhA5L01/Bf2sWbQ=;
	h=From:To:Subject:Date:From;
	b=LYMru/J71ia1+o8ClRnaF/SRaO2R6wT/UlNyrn3besKGA6AvKoSlp3MlfyjoZYZLf
	 dPyOntr8gpx/aZX8s2KNyWFAP2r+sJfSF5hSyNPuo3I+m38/V3GYdqlzpsYhA4D61e
	 BOOOts+RjzfJXycn39UTv960clEqEj2oI82SjMGvX/RYZRfPnjSKQ09+wE+zHySBkC
	 5qA+bNTIMK2d5RFP+xkszdxpOefBi8NEcchFyA01GZoj3JvcEMIP6TJRBwF7+dua3V
	 HRz7mrc5x/eAL3gOiF1GogKMa3DODGnnKPa0AW6Caz2wFGZqjlI9T8nH6JluZ5pkWK
	 msKp0BuREb24A==
Received: (from koos@localhost)
	by gosper.idefix.net (8.15.2/8.15.2/Submit) id 37U8Hknq025804;
	Wed, 30 Aug 2023 10:17:46 +0200
X-Authentication-Warning: gosper.idefix.net: koos set sender to [email protected] using -f
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Koos van den Hout <[email protected]>
To: Devuan Bug Tracking System <[email protected]>
Subject: cron-apt does not report repositories with GPG problems
Message-ID: <169338346613.25642.11656744352431709814.reportbug@gosper.idefix.net>
X-Mailer: reportbug 7.5.3+devuan3
Date: Wed, 30 Aug 2023 10:17:46 +0200
X-Virus-Scanned: clamav-milter 0.103.9 at gosper
X-Virus-Status: Clean

Package: cron-apt
Version: 0.13.0
Severity: normal

(this time with the correct e-mail address)

Dear Maintainer,

I noticed the following using cron-apt: when a repository rotates its
GPG keys, cron-apt does not act on the error message about the unavailable
GPG key. This makes cron-apt not report about updates until a manual run
of apt update shows there is a problem with this repository and this is
fixed.

I expected cron-apt to report this error because this holds back updates
when the GPG key for a repository is updated.

I ran into this with the Grafana repository. There were no messages from
cron-apt, but by hand I saw the key had changed:

root@gosper:~# apt update
Get:1 https://packages.grafana.com/oss/deb stable InRelease [5,984 B]
Err:1 https://packages.grafana.com/oss/deb stable InRelease
  The following signatures couldn't be verified because the public key is not av
ailable: NO_PUBKEY 963FA27710458545
Hit:2 http://deb.devuan.org/merged beowulf InRelease
Hit:3 http://deb.devuan.org/merged beowulf-security InRelease
Hit:4 http://deb.devuan.org/merged beowulf-updates InRelease
Reading package lists... Done
Building dependency tree
Reading state information... Done
All packages are up to date.
W: An error occurred during the signature verification. The repository is not up
dated and the previous index files will be used. GPG error: https://packages.gra
fana.com/oss/deb stable InRelease: The following signatures couldn't be verified
 because the public key is not available: NO_PUBKEY 963FA27710458545
W: Failed to fetch https://packages.grafana.com/oss/deb/dists/stable/InRelease
The following signatures couldn't be verified because the public key is not avai
lable: NO_PUBKEY 963FA27710458545
W: Some index files failed to download. They have been ignored, or old ones used
 instead.

-- System Information:
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 3 (beowulf)
Release:	3
Codename:	beowulf
Architecture: x86_64

Kernel: Linux 4.19.0-24-amd64 (SMP w/6 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages cron-apt depends on:
ii  apt  1.8.2.3

Versions of packages cron-apt recommends:
ii  cron [cron-daemon]                   3.0pl1-134+deb10u1
ii  liblockfile1                         1.14-1.1
ii  sendmail-bin [mail-transport-agent]  8.15.2-14~deb10u1

cron-apt suggests no packages.

-- Configuration Files:
/etc/cron-apt/config changed:
MAILON="upgrade"


-- no debconf information
Acknowledgement sent to Koos van den Hout <[email protected]>:
New bug report received and forwarded. Copy sent to [email protected]. Full text available.
Report forwarded to [email protected], [email protected]:
bug#778; Package cron-apt. Full text available.

Devuan BTS -- Powered by Debian bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.

Devuan Bugs Owner <[email protected]>.
Last modified: Sat, 18 Jan 2025 04:39:02 UTC