In /etc/apt/sources.list.d/raspi.list there is one entry: deb [signed-by=/usr/share/keyrings/raspberrypi-archive-keyring.gpg] http://archive.raspberrypi.org/debian/ trixie main
I deleted the entire entry, and after updating got a huge number of errors. I replaced the original entry and rebooted, but now see this:
sudo apt update
Hit:1 https://deb.debian.org/debian trixie InRelease
Hit:2 https://deb.debian.org/debian trixie-updates InRelease
Hit:3 https://deb.debian.org/debian-security trixie-security InRelease
Hit:4 https://download.webmin.com/download/newkey/repository stable InRelease
Hit:5 https://deb.debian.org/debian trixie-backports InRelease
Hit:6 http://archive.raspberrypi.org/debian trixie InRelease
Hit:7 https://repo.jellyfin.org/debian trixie InRelease
Get:8 https://pkgs.tailscale.com/stable/debian trixie InRelease
Err:6 http://archive.raspberrypi.org/debian trixie InRelease
Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on CF8A1AF502A2AA2D763BAE7E82B129927FA3303E is not bound: No binding signature at time 2026-01-29T17:03:28Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
Hit:9 https://dietpi.com/apt trixie InRelease
Hit:10 https://dietpi.com/apt all InRelease
Fetched 6582 B in 1s (5554 B/s)
All packages are up to date.
Warning: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. OpenPGP signature verification failed: http://archive.raspberrypi.org/debian trixie InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on CF8A1AF502A2AA2D763BAE7E82B129927FA3303E is not bound: No binding signature at time 2026-01-29T17:03:28Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
Warning: Failed to fetch http://archive.raspberrypi.org/debian/dists/trixie/InRelease Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on CF8A1AF502A2AA2D763BAE7E82B129927FA3303E is not bound: No binding signature at time 2026-01-29T17:03:28Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
Warning: Some index files failed to download. They have been ignored, or old ones used instead.
I don’t know what has happened, but this isn’t going well…