gpg error on apt-get update, packages from jessie main missing

pixel · Oct 21, 2015

after installing proxmox4 to vm for testing, removed the enterprise repo, and added the no subscription one. first apt-get update gets a gpg error. and, i cant install unzip, which is in the main debian repository, https://packages.debian.org/jessie/unzip. also tried parted.

is there something missing from the bare metal installer?

Code:

root@proxmoxjessie:/etc/apt/sources.list.d# echo "deb http://download.proxmox.com/debian jessie pve-no-subscription" > /etc/apt/sources.list.d/pve-install-repo.list
root@proxmoxjessie:/etc/apt/sources.list.d# apt-get update
Ign http://ftp.us.debian.org jessie InRelease                                                                   
Hit http://security.debian.org jessie/updates InRelease                                                         
Get:1 http://ftp.us.debian.org jessie Release.gpg [2,373 B]                     
Hit http://security.debian.org jessie/updates/main amd64 Packages                    
Hit http://ftp.us.debian.org jessie Release                                          
Ign http://ftp.us.debian.org jessie Release                                              
Ign http://download.proxmox.com jessie InRelease                                         
Ign http://ftp.us.debian.org jessie/main amd64 Packages/DiffIndex     
Hit http://security.debian.org jessie/updates/contrib amd64 Packages
Ign http://ftp.us.debian.org jessie/contrib amd64 Packages/DiffIndex                 
Hit http://security.debian.org jessie/updates/contrib Translation-en  
Get:2 http://download.proxmox.com jessie Release.gpg [198 B]                               
Hit http://security.debian.org jessie/updates/main Translation-en     
Hit http://ftp.us.debian.org jessie/contrib Translation-en           
Get:3 http://download.proxmox.com jessie Release [4,127 B]           
Hit http://ftp.us.debian.org jessie/main Translation-en    
Get:4 http://download.proxmox.com jessie/pve-no-subscription amd64 Packages [35.5 kB]                           
Hit http://ftp.us.debian.org jessie/main amd64 Packages                                                         
Hit http://ftp.us.debian.org jessie/contrib amd64 Packages                                                      
Ign http://ftp.us.debian.org jessie/contrib Translation-en_US                                                   
Ign http://ftp.us.debian.org jessie/main Translation-en_US                                                      
Ign http://download.proxmox.com jessie/pve-no-subscription Translation-en_US                                    
Ign http://download.proxmox.com jessie/pve-no-subscription Translation-en                                       
Fetched 42.2 kB in 8s (4,888 B/s)                                                                               
Reading package lists... Done
W: GPG error: http://ftp.us.debian.org jessie Release: The following signatures were invalid: BADSIG 8B48AD6246925553 Debian Archive Automatic Signing Key (7.0/wheezy) <ftpmaster@debian.org>
root@proxmoxjessie:/etc/apt/sources.list.d# apt-get install unzip
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Package unzip is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source

E: Package 'unzip' has no installation candidate

t.lamprecht · Oct 21, 2015

pixel said:

Code:

[...]
W: GPG error: http://ftp.us.debian.org jessie Release: The following signatures were invalid: BADSIG 8B48AD6246925553 Debian Archive Automatic Signing Key (7.0/wheezy) <ftpmaster@debian.org>
[...]

You have an old Wheezy key which gets checked with the new repo and then naturally fails.
Try:

Code:

apt-get clean
apt-get update

If that also fails try:

Code:

apt-get clean
cd /var/lib/apt
mv lists lists.old
mkdir -p lists/partial
apt-get clean
apt-get update

pixel · Oct 21, 2015

yes, that works. but, this problem is in the default install with proxmox-ve_4.0-0d8559d0-17.iso.

heres a packer template you can use to reproduce the issue. https://gist.github.com/xahare/116034564973ab7648cb
if you try it, you might want to comment out the provisioners. they are for os x.

tom · Oct 21, 2015

I assume the problem is not the ISO, maybe it is the Debian mirror used, automatically based your IP location.?

pixel · Oct 22, 2015

That would be strange, but possible. did you try "apt-get update" or "apt-get install unzip" from the default install?

danb35 · Nov 12, 2015

I am getting the same error. This is an installation of Proxmox VE 4.0 from the ISO, with a community subscription. apt-get clean;apt-get update results in a bunch of stuff that I can't keep the forum software from trying to combine into a single paragraph. But the end is:Reading package lists... DoneW: GPG error: http://ftp.us.debian.org jessie Release: The following signatures were invalid: BADSIG 8B48AD6246925553 Debian Archive Automatic Signing Key (7.0/wheezy) If regional mirrors are relevant, it looks like I'm hitting http://ftp.us.debian.org.

tom · Nov 12, 2015

please use http://forum.proxmox.com (editor bug with https)

regarding you issue: try another debian mirror, maybe the http://ftp.us.debian.org has an issue.

pixel · Nov 14, 2015

from t.lamprechts earlier answer, i just made this one of my post install scripts (first two lines commented out for production). works fine after running it. will try again without after the next iso release. the mirror or whatever it is should work itself out by then.

Code:

#!/usr/bin/env bash
rm /etc/apt/sources.list.d/pve-enterprise.list
echo "deb [URL]http://download.proxmox.com/debian[/URL] jessie pve-no-subscription" > /etc/apt/sources.list.d/pve-no-subscription.list
apt-get clean
cd /var/lib/apt
mv lists lists.old
mkdir -p lists/partial
apt-get clean
apt-get update

Raymond Burns · Dec 4, 2015

I only see this issue when the PVE Enterprise sources is NOT commented out.
When it is not commented, but you are using community Proxmox, then the error is present. Preventing any installs or CEPH installations.
When you comment out, mv the old lists, and clean; all installations from apt work

pjkenned · Dec 5, 2015

If it helps anyone here - when I got this issue I did:
nano /etc/apt/sources.list
Then I changed the jessie from ftp.us.debian.org to ftp.uk.debian.org

And it worked. Certainly not the fanciest fix, but it can get you moving in a pinch.

dragonslayr · Dec 11, 2015

t.lamprecht said:
You have an old Wheezy key which gets checked with the new repo and then naturally fails.

If that also fails try:

Code:

apt-get clean cd /var/lib/apt mv lists lists.old mkdir -p lists/partial apt-get clean apt-get update

Just confirming the above has worked on two installs now.

t.lamprecht · May 6, 2016

Hi, we hadn't any other reports yet and your problem is not related to this ones, that's a half year old thread, as also said by tom this issue is not in the ISO but rather the Debian mirror..

MimCom · Jan 2, 2017

FYI -- I just ran into this on a fresh 4.4 install.

GPG key failing from 7.0/Wheezy

Manually downloaded and installed debian-release-keyring to no effect.

Changing the source from ftp.us.debian.org to ftp.debian.org fixed it, so there is clearly something messed up with one of the US mirrors.

cronner · Jun 14, 2017

just got the same error with DK mirrors

Search

Search

gpg error on apt-get update, packages from jessie main missing

pixel

Renowned Member

t.lamprecht

Proxmox Staff Member

pixel

Renowned Member

tom

Proxmox Staff Member

pixel

Renowned Member

danb35

Renowned Member

tom

Proxmox Staff Member

pixel

Renowned Member

Raymond Burns

Member

pjkenned

Renowned Member

dragonslayr

Renowned Member

t.lamprecht

Proxmox Staff Member

MimCom

Active Member

cronner

Active Member