Dev1 Galaxy Forum / [SOLVED] apt-get update: gpg error (expired key)

Re: [SOLVED] apt-get update: gpg error (expired key)

dummy@example.com (fsmithred) — Thu, 08 Sep 2022 21:50:33 +0000

Morgennebel wrote:

Morgennebel wrote:
fsmithred wrote:
To do a new install with the existing live isos, you can just download the package in a terminal with wget, check the sha256sum and install with dpkg or gdebi. Then run the installer.
I tried the server and netinstall ISOs. Both do not have dpkg available (or I did not found them in /usr/sbin, /sbin or /usr/bin).
You need first to chroot to /target first. dpkg is then available.
# chroot /target
# dpkg -i ....
Ciao, -MN

For the installer isos, yeah, you need to chroot. But for the live isos, you don't. The desktop-live has the entire xfce desktop for you to work with plus all the system commands. It is a full system, and the live installer just copies the running system to hard disk. That means any changes you make in configs or packages in the running system will be copied to the installation. The minimal-live doesn't have xorg, but it's still a complete system and will act the same way, just in console only.

Re: [SOLVED] apt-get update: gpg error (expired key)

dummy@example.com (Morgennebel) — Thu, 08 Sep 2022 16:50:42 +0000

Morgennebel wrote:

fsmithred wrote:
To do a new install with the existing live isos, you can just download the package in a terminal with wget, check the sha256sum and install with dpkg or gdebi. Then run the installer.
I tried the server and netinstall ISOs. Both do not have dpkg available (or I did not found them in /usr/sbin, /sbin or /usr/bin).

You need first to chroot to /target first. dpkg is then available.

# chroot /target
# dpkg -i ....

Ciao, -MN

Re: [SOLVED] apt-get update: gpg error (expired key)

dummy@example.com (adant) — Mon, 05 Sep 2022 22:10:17 +0000

Just FYI the expired key is still exists in beowulf (@ Amprolla3 on Nemesis). Scared me for a minute.
Thanks for all you do

Re: [SOLVED] apt-get update: gpg error (expired key)

dummy@example.com (fsmithred) — Mon, 05 Sep 2022 21:10:59 +0000

Morgennebel wrote:

fsmithred wrote:
To do a new install with the existing live isos, you can just download the package in a terminal with wget, check the sha256sum and install with dpkg or gdebi. Then run the installer.
I tried the server and netinstall ISOs. Both do not have dpkg available (or I did not found them in /usr/sbin, /sbin or /usr/bin).

For the installer isos (server, desktop, netinstall) the following might work in a shell:

anna install devuan-keyring_2022.09.04_all.deb

or maybe...

anna install /pool/DEBIAN/main/d/dpkg/dpkg_1.20.9_amd64.deb
dpkg -i  devuan-keyring_2022.09.04_all.deb

For the live isos (minimal-live, desktop-live) dpkg is installed and will work. Only the desktop-live has gdebi.

Re: [SOLVED] apt-get update: gpg error (expired key)

dummy@example.com (Morgennebel) — Mon, 05 Sep 2022 16:09:23 +0000

fsmithred wrote:

To do a new install with the existing live isos, you can just download the package in a terminal with wget, check the sha256sum and install with dpkg or gdebi. Then run the installer.

I tried the server and netinstall ISOs. Both do not have dpkg available (or I did not found them in /usr/sbin, /sbin or /usr/bin).

Re: [SOLVED] apt-get update: gpg error (expired key)

dummy@example.com (fsmithred) — Mon, 05 Sep 2022 12:30:31 +0000

To do a new install with the existing live isos, you can just download the package in a terminal with wget, check the sha256sum and install with dpkg or gdebi. Then run the installer.

Re: [SOLVED] apt-get update: gpg error (expired key)

dummy@example.com (Morgennebel) — Mon, 05 Sep 2022 09:48:18 +0000

Unfortunately this bug also prevents new installations with existing ISO files.

Workaround:

* Once installer fails to read a network mirror
* Start a shell from the installer (somewhere at the bottom of the menu)
* Execute wget as described above
* mv *.deb /target/root
* chroot /target
* dpkg -i /root/*.deb
* exit shell
* Continue installation

-MN

Re: [SOLVED] apt-get update: gpg error (expired key)

dummy@example.com (Joerg_rw) — Sun, 04 Sep 2022 00:54:22 +0000

https://dev1galaxy.org/viewtopic.php?pid=37322#p37322 is about same issue, https://dev1galaxy.org/viewtopic.php?id=5212 "[SOLVED] Invalid Signatures" should get merged in here, replacing my message

ralph.ronnquist wrote:

Note that the full hands-on may also require that the old local InRelease file for the distribution is removed manually, so the sequence of command would thus be (eg for chimaera):
# rm /var/lib/apt/lists/deb.devuan.org_merged_dists_chimaera_InRelease
# apt-get update --allow-unauthenticated --allow-insecure-repositories
# apt-get install devuan-keyring --allow-unauthenticated
Alternatively: Anyone uncomfortable with those command line options should rather download the new keyring directly, eg
# wget http://deb.devuan.org/devuan/pool/main/ … 04_all.deb
# sha256sum devuan-keyring_2022.09.04_all.deb 96c4a206e8dfdc21138ec619687ef9acf36e1524dd39190c040164f37cc3468d
# dpkg -i devuan-keyring_2022.09.04_all.deb
Alternatively: if you have your own method that works, then that is fine too.

Re: [SOLVED] apt-get update: gpg error (expired key)

dummy@example.com (Bakaras) — Sat, 03 Sep 2022 22:33:30 +0000

I use:
rm -rf /var/lib/apt/lists/*
apt update --allow-insecure-repositories
apt upgrade

Currently works only with pkgmaster.devuan.org

Re: [SOLVED] apt-get update: gpg error (expired key)

dummy@example.com (fsmithred) — Sat, 03 Sep 2022 21:13:06 +0000

If you download the file and want a checksum, here they are:

$ md5sum devuan-keyring_2022.09.04_all.deb 
6209781a66b39c95c012765bc7ca2297  devuan-keyring_2022.09.04_all.deb

$ sha256sum devuan-keyring_2022.09.04_all.deb 
96c4a206e8dfdc21138ec619687ef9acf36e1524dd39190c040164f37cc3468d  devuan-keyring_2022.09.04_all.deb

Re: [SOLVED] apt-get update: gpg error (expired key)

dummy@example.com (Head_on_a_Stick) — Sat, 03 Sep 2022 20:32:16 +0000

I think the --allow-insecure-repositories & --allow-unauthenticated options are a bit easier. I forgot about them :-)

Re: [SOLVED] apt-get update: gpg error (expired key)

dummy@example.com (fhblf) — Sat, 03 Sep 2022 20:22:20 +0000

Head_on_a_Stick wrote:

@nenesse: I think you'll have to use

wget http://deb.devuan.org/devuan/pool/main/d/devuan-keyring/devuan-keyring_2022.09.04_all.deb
dpkg -i devuan-keyring_2022.09.04_all.deb

Works great, thanks!

wget http://deb.devuan.org/devuan/pool/main/d/devuan-keyring/devuan-keyring_2022.09.04_all.deb && sudo dpkg -i devuan-keyring_2022.09.04_all.deb

Re: [SOLVED] apt-get update: gpg error (expired key)

dummy@example.com (brocashelm) — Sat, 03 Sep 2022 18:35:12 +0000

devuan-keyring has already been updated in the repository. This command was provided by Bb|hcb in the IRC channel:
apt update --allow-insecure-repositories && apt install devuan-keyring --allow-unauthenticated

Re: [SOLVED] apt-get update: gpg error (expired key)

dummy@example.com (nenesse) — Sat, 03 Sep 2022 16:21:07 +0000

yes, extra steps for 2022.09.03.deb, not needed with 2022.09.04.deb.
I mark this post solved, thanks to the developers for the speed.

rendez-vous le 3 septembre 2023

Re: [SOLVED] apt-get update: gpg error (expired key)

dummy@example.com (fsmithred) — Sat, 03 Sep 2022 16:09:25 +0000

nenesse wrote:

yes
then copying /usr/share/keyrings/devuan-keyring.gpg => /etc/apt/trusted.gpg.d
and deleting /etc/apt/trusted.gpg.d/devuan-keyring-2017-archive.gpg
apt-get update works.
Temporary solution pending that of the developers.

I believe those extra steps are only needed if you installed the first package made today, dated 2022.09.03, but the second package with date 2022.09.04 copies the new file for you.