gpg error on apt-get update, packages from jessie main missing

Aug 6, 2014
136
3
18
after installing proxmox4 to vm for testing, removed the enterprise repo, and added the no subscription one. first apt-get update gets a gpg error. and, i cant install unzip, which is in the main debian repository, https://packages.debian.org/jessie/unzip. also tried parted.

is there something missing from the bare metal installer?

Code:
root@proxmoxjessie:/etc/apt/sources.list.d# echo "deb http://download.proxmox.com/debian jessie pve-no-subscription" > /etc/apt/sources.list.d/pve-install-repo.list
root@proxmoxjessie:/etc/apt/sources.list.d# apt-get update
Ign http://ftp.us.debian.org jessie InRelease                                                                   
Hit http://security.debian.org jessie/updates InRelease                                                         
Get:1 http://ftp.us.debian.org jessie Release.gpg [2,373 B]                     
Hit http://security.debian.org jessie/updates/main amd64 Packages                    
Hit http://ftp.us.debian.org jessie Release                                          
Ign http://ftp.us.debian.org jessie Release                                              
Ign http://download.proxmox.com jessie InRelease                                         
Ign http://ftp.us.debian.org jessie/main amd64 Packages/DiffIndex     
Hit http://security.debian.org jessie/updates/contrib amd64 Packages
Ign http://ftp.us.debian.org jessie/contrib amd64 Packages/DiffIndex                 
Hit http://security.debian.org jessie/updates/contrib Translation-en  
Get:2 http://download.proxmox.com jessie Release.gpg [198 B]                               
Hit http://security.debian.org jessie/updates/main Translation-en     
Hit http://ftp.us.debian.org jessie/contrib Translation-en           
Get:3 http://download.proxmox.com jessie Release [4,127 B]           
Hit http://ftp.us.debian.org jessie/main Translation-en    
Get:4 http://download.proxmox.com jessie/pve-no-subscription amd64 Packages [35.5 kB]                           
Hit http://ftp.us.debian.org jessie/main amd64 Packages                                                         
Hit http://ftp.us.debian.org jessie/contrib amd64 Packages                                                      
Ign http://ftp.us.debian.org jessie/contrib Translation-en_US                                                   
Ign http://ftp.us.debian.org jessie/main Translation-en_US                                                      
Ign http://download.proxmox.com jessie/pve-no-subscription Translation-en_US                                    
Ign http://download.proxmox.com jessie/pve-no-subscription Translation-en                                       
Fetched 42.2 kB in 8s (4,888 B/s)                                                                               
Reading package lists... Done
W: GPG error: http://ftp.us.debian.org jessie Release: The following signatures were invalid: BADSIG 8B48AD6246925553 Debian Archive Automatic Signing Key (7.0/wheezy) <ftpmaster@debian.org>
root@proxmoxjessie:/etc/apt/sources.list.d# apt-get install unzip
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Package unzip is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source

E: Package 'unzip' has no installation candidate
 
Code:
[...]
W: GPG error: http://ftp.us.debian.org jessie Release: The following signatures were invalid: BADSIG 8B48AD6246925553 Debian Archive Automatic Signing Key (7.0/wheezy) <ftpmaster@debian.org>
[...]

You have an old Wheezy key which gets checked with the new repo and then naturally fails.
Try:
Code:
apt-get clean
apt-get update

If that also fails try:
Code:
apt-get clean
cd /var/lib/apt
mv lists lists.old
mkdir -p lists/partial
apt-get clean
apt-get update
 
I assume the problem is not the ISO, maybe it is the Debian mirror used, automatically based your IP location.?
 
I am getting the same error. This is an installation of Proxmox VE 4.0 from the ISO, with a community subscription. apt-get clean;apt-get update results in a bunch of stuff that I can't keep the forum software from trying to combine into a single paragraph. But the end is:Reading package lists... DoneW: GPG error: http://ftp.us.debian.org jessie Release: The following signatures were invalid: BADSIG 8B48AD6246925553 Debian Archive Automatic Signing Key (7.0/wheezy) If regional mirrors are relevant, it looks like I'm hitting http://ftp.us.debian.org.
 
Last edited:
from t.lamprechts earlier answer, i just made this one of my post install scripts (first two lines commented out for production). works fine after running it. will try again without after the next iso release. the mirror or whatever it is should work itself out by then.

Code:
#!/usr/bin/env bash
rm /etc/apt/sources.list.d/pve-enterprise.list
echo "deb [URL]http://download.proxmox.com/debian[/URL] jessie pve-no-subscription" > /etc/apt/sources.list.d/pve-no-subscription.list
apt-get clean
cd /var/lib/apt
mv lists lists.old
mkdir -p lists/partial
apt-get clean
apt-get update
 
I only see this issue when the PVE Enterprise sources is NOT commented out.
When it is not commented, but you are using community Proxmox, then the error is present. Preventing any installs or CEPH installations.
When you comment out, mv the old lists, and clean; all installations from apt work
 
If it helps anyone here - when I got this issue I did:
nano /etc/apt/sources.list
Then I changed the jessie from ftp.us.debian.org to ftp.uk.debian.org

And it worked. Certainly not the fanciest fix, but it can get you moving in a pinch.
 
You have an old Wheezy key which gets checked with the new repo and then naturally fails.


If that also fails try:
Code:
apt-get clean
cd /var/lib/apt
mv lists lists.old
mkdir -p lists/partial
apt-get clean
apt-get update

Just confirming the above has worked on two installs now.
 
Hi, we hadn't any other reports yet and your problem is not related to this ones, that's a half year old thread, as also said by tom this issue is not in the ISO but rather the Debian mirror.. :)
 
FYI -- I just ran into this on a fresh 4.4 install.

GPG key failing from 7.0/Wheezy

Manually downloaded and installed debian-release-keyring to no effect.

Changing the source from ftp.us.debian.org to ftp.debian.org fixed it, so there is clearly something messed up with one of the US mirrors.
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!