At least one invalid signature was encountered.
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
apt (Ubuntu) |
Fix Released
|
High
|
Julian Andres Klode | ||
Xenial |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
[Summary]
A regression in apt in Xenial 1.2.15 causes "apt-get update" to fail with "At least one invalid signature was encountered." if there are files in /etc/apt/
This has the consequence of getting apt "stuck"; it will not be able to download its own update that fixes the issue. This means that all affected users must apply the workaround; otherwise they will be stuck forever.
[Workaround]
Make sure all files in /etc/apt/
Alternatively, you can manually install the fixed version of apt using dpkg.
[Impact]
Breaks update on systems with unreadable GPG keys
[Test case]
Run apt update with an unreadable GPG key file in trusted.gpg.d. This should work and (stretch goal) print a warning about the key being unreadable.
[Regression potential]
Low risk. We check that very situation in the automated test suite now like we did a lot of other situations before. The fix has been available in apt since 1.3_rc3 on Aug 30, and there have been no regressions reported since then.
[Original bug report]
Hello, a recent apt update appears to have broken apt entirely.
A coworker reported seeing troubles: http://
To test, I upgraded my laptop then immediately re-ran apt-get update && apt-get -u dist-upgrade:
sarnold@
Hit:1 http://
Hit:2 http://
Hit:3 http://
Ign:4 http://
Get:5 http://
Get:6 http://
Get:7 http://
Ign:8 http://
Get:9 http://
Hit:10 http://
Get:11 http://
Get:12 http://
Err:1 http://
At least one invalid signature was encountered.
Hit:13 http://
Err:2 http://
At least one invalid signature was encountered.
Get:14 http://
Err:3 http://
At least one invalid signature was encountered.
Hit:15 http://
Get:16 http://
Hit:17 http://
Get:18 http://
Hit:19 http://
Hit:20 http://
Hit:21 http://
Err:5 http://
At least one invalid signature was encountered.
Hit:22 http://
Hit:23 http://
Hit:24 http://
Ign:25 http://
Hit:26 http://
Hit:27 http://
Hit:28 http://
Err:6 http://
At least one invalid signature was encountered.
Err:7 http://
At least one invalid signature was encountered.
Err:9 http://
At least one invalid signature was encountered.
Ign:29 http://
Hit:30 http://
Hit:31 http://
Err:10 http://
At least one invalid signature was encountered.
Err:11 http://
At least one invalid signature was encountered.
Err:13 http://
At least one invalid signature was encountered.
Hit:32 http://
Hit:33 http://
Ign:34 http://
Err:12 http://
At least one invalid signature was encountered.
Err:14 http://
At least one invalid signature was encountered.
Hit:35 http://
Err:15 http://
At least one invalid signature was encountered.
Hit:36 http://
Err:16 http://
At least one invalid signature was encountered.
Err:17 http://
At least one invalid signature was encountered.
Hit:37 http://
Err:18 http://
At least one invalid signature was encountered.
Ign:38 http://
Err:19 http://
At least one invalid signature was encountered.
Err:20 http://
At least one invalid signature was encountered.
Hit:39 http://
Err:21 http://
At least one invalid signature was encountered.
Hit:40 http://
Err:22 http://
At least one invalid signature was encountered.
Err:41 http://
At least one invalid signature was encountered.
Hit:42 http://
Err:43 http://
At least one invalid signature was encountered.
Hit:44 http://
Err:26 http://
At least one invalid signature was encountered.
Err:27 http://
At least one invalid signature was encountered.
Err:28 http://
At least one invalid signature was encountered.
Hit:45 http://
Err:30 http://
At least one invalid signature was encountered.
Err:31 http://
At least one invalid signature was encountered.
Err:32 http://
At least one invalid signature was encountered.
Err:33 http://
At least one invalid signature was encountered.
Err:35 http://
At least one invalid signature was encountered.
Err:36 http://
At least one invalid signature was encountered.
Err:37 http://
At least one invalid signature was encountered.
Err:46 http://
At least one invalid signature was encountered.
Err:40 http://
At least one invalid signature was encountered.
Err:47 http://
At least one invalid signature was encountered.
Err:48 http://
At least one invalid signature was encountered.
Err:49 http://
At least one invalid signature was encountered.
Fetched 981 kB in 1s (496 kB/s)
Reading package lists... Done
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Failed to fetch http://
W: Some index files failed to download. They have been ignored, or old ones used instead.
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
The following packages were automatically installed and are no longer required:
linux-
linux-
linux-
linux-
linux-
linux-
linux-
Use 'sudo apt autoremove' to remove them.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
I'll attach the full terminal log soon.
Thanks
ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: apt 1.2.15
ProcVersionSign
Uname: Linux 4.4.0-45-generic x86_64
NonfreeKernelMo
ApportVersion: 2.20.1-0ubuntu2.1
Architecture: amd64
CurrentDesktop: Unity
Date: Wed Nov 16 12:29:54 2016
InstallationDate: Installed on 2012-10-18 (1490 days ago)
InstallationMedia: Ubuntu 12.04.1 LTS "Precise Pangolin" - Release amd64 (20120823.1)
SourcePackage: apt
UpgradeStatus: Upgraded to xenial on 2016-04-30 (200 days ago)
Changed in apt (Ubuntu): | |
importance: | Undecided → High |
Changed in apt (Ubuntu): | |
status: | Incomplete → New |
description: | updated |
tags: | added: regression-update |
The full run, showing apt working a few seconds before it fails, and no errors in dmesg.