Update from dietpi 7.5.2 fails due to signature verification issue

Details:

  • Date | Thu Jan 12 20:43:37 GMT 2023
  • DietPi version | v7.5.2 (MichaIng / master)
  • Image creator | DietPi Core Team
  • Pre-image | from scratch
  • Hardware | RPi 4 Model B (armv7l) (ID=4)
  • Kernel version | Linux DietPi 5.10.60-v7l+ #1449 SMP Wed Aug 25 15:00:44 BST 2021 armv7l GNU / Linux
  • Distro | bullseye (ID=6,RASPBIAN=1)
  • Command | apt-get --allow-releaseinfo-change-suite -q update
  • Exit code | 255
  • Software title | DietPi-Update

Steps to reproduce:

  • owncloud updated using owncloud admin web interface # successful
  • dietpi-update # failed due to invalid signature
  • apt-key del ‘FD41A71A’ # deleted key according to what I found in a forum, retry
  • apt update # successful
  • apt upgrade # successful
  • dietpi-update # failed. see actual behaviour below

Expected behaviour:

dietpi upgrade works and shows an 8.x version

Actual behaviour:

Hit:1 raspbian.raspberrypi.   org / raspbian bullseye InRelease
Hit:2 download.mono-project.   com / repo / debian raspbianbuster InRelease
Hit:3 apt.sonarr.   tv / debian buster InRelease
Get:4 download.owncloud.   com / desktop / ownCloud / stable / latest / linux / Debian_10  InRelease [1430 B]
Hit:5 archive.raspberrypi.   org / debian bullseye InRelease
Err:4 download.owncloud.   com / desktop / ownCloud / stable / latest / linux / Debian_10  InRelease
  The following signatures were invalid: EXPKEYSIG 0700205DFD41A71A devel OBS Project <devel@s2.owncloud   .com>
Fetched 1430 B in 2s (734 B / s)
Reading package lists...
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: download.owncloud.   com / desktop / ownCloud / stable / latest / linux / Debian_10  InRelease: The following signatures were invalid: EXPKEYSIG 0700205DFD41A71A devel OBS Project <devel@s2.owncloud.   com>
W: Failed to fetch download.owncloud.   com / desktop / ownCloud / stable / latest / linux / Debian_10 / InRelease  The following signatures were invalid: EXPKEYSIG 0700205DFD41A71A devel OBS Project <devel@s2.owncloud.   com>
W: Some index files failed to download. They have been ignored, or old ones used instead.


[FAILED] DietPi-Update | Unable to continue, DietPi-Update will now terminate.

root@DietPi:~# apt-key del 'FD41A71A'
Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)).
OK
root@DietPi:~# apt update
Hit:1 raspbian.raspberrypi. org / raspbian bullseye InRelease
Hit:2 download.mono-project. com / repo / debian raspbianbuster InRelease   
Hit:3 apt.sonarr. tv / debian buster InRelease                            
Hit:4 archive.raspberrypi. org / debian bullseye InRelease     
Get:5 download.owncloud. com / desktop / ownCloud / stable / latest / linux / Debian_10  InRelease [1430 B]
Err:5 download.owncloud. com / desktop / ownCloud / stable / latest / linux / Debian_10  InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 0700205DFD41A71A
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: download.owncloud. com / desktop / ownCloud / stable / latest / linux / Debian_10  InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 0700205DFD41A71A
W: Failed to fetch download.owncloud. com / desktop / ownCloud / stable / latest / linux / Debian_10 / InRelease  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 0700205DFD41A71A
W: Some index files failed to download. They have been ignored, or old ones used instead.

What do I need to do to to fix this problem and update normally using dietpi-update?

(only 2 links allowed, that’s why they look like this)

Did you remember to have the ownlcoud repository added manually? Because we don’t use this for our install. Could you remove it from source file configuration??

We could check where it is located.

for i in /etc/apt/sources.list{,.d/*.list}; do echo "$i:"; cat "$i"; done

If you like to keep it, your need to update the key according owncloud desktop install doc. https://download.owncloud.com/desktop/ownCloud/stable/latest/linux/Debian_11/INSTALL.sh

wget -nv https://download.owncloud.com/desktop/ownCloud/stable/latest/linux/Debian_11/Release.key -O - | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/owncloud.gpg > /dev/null
echo 'deb https://download.owncloud.com/desktop/ownCloud/stable/latest/linux/Debian_11/ /' > /etc/apt/sources.list.d/owncloud.list

Thanks for the quick reply. It worked.

I did not add any repositories manually (I am sure, since I would not know how to)

for i in /etc/apt/sources.list{,.d/*.list}; do echo "$i"; cat "$i"; done
/etc/apt/sources.list
deb http://raspbian.raspberrypi.org/raspbian/ bullseye main contrib non-free
/etc/apt/sources.list.d/mono-xamarin.list
deb https://download.mono-project.com/repo/debian/ raspbianbuster main
/etc/apt/sources.list.d/owncloud.list
deb https://download.owncloud.com/desktop/ownCloud/stable/latest/linux/Debian_10/ /
/etc/apt/sources.list.d/raspi.list
deb htps://archive.raspberrypi.org/debian/ bullseye main
/etc/apt/sources.list.d/sonarr.list
deb https://apt.sonarr.tv/debian/ buster main

After updating the key as you described, I run dietpi-update, worked.

Minor follow up issue: vnc connection does not work any more (realvnc), client times out waiting for a response (even though server should be started automatically, config is updated).
Putty works.
All other software seems to work too.

I will have a look at the new problem later, the rest works, remote desktop is optional.

Thank you for your help!

Did you use ownCloud desktop via VNC session? At least you have this repository added to your configuration.

Sorry for the late reply.

  • Did you use ownCloud desktop via VNC session?

Not that I am aware of. Everything regarding owncloud I do either via browser or command line. I use the vnc session almost exclusively for files copying and deleting.

if not needed, you might remove that source file.