[fuel-infra] signatures couldn't be verified because the public key is not available in "apt-get update"

Bug #1545104 reported by Artem Hrechanychenko
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Invalid
High
Fuel CI
8.0.x
Invalid
Undecided
Dmitry Burmistrov
Mitaka
Invalid
High
Fuel CI

Bug Description

VERSION:
  feature_groups:
    - mirantis
  production: "docker"
  release: "8.0"
  api: "1.0"
  build_number: "529"
  build_id: "529"
  fuel-nailgun_sha: "baec8643ca624e52b37873f2dbd511c135d236d9"
  python-fuelclient_sha: "4f234669cfe88a9406f4e438b1e1f74f1ef484a5"
  fuel-agent_sha: "658be72c4b42d3e1436b86ac4567ab914bfb451b"
  fuel-nailgun-agent_sha: "b2bb466fd5bd92da614cdbd819d6999c510ebfb1"
  astute_sha: "b81577a5b7857c4be8748492bae1dec2fa89b446"
  fuel-library_sha: "e2d79330d5d708796330fac67722c21f85569b87"
  fuel-ostf_sha: "3bc76a63a9e7d195ff34eadc29552f4235fa6c52"
  fuel-mirror_sha: "fb45b80d7bee5899d931f926e5c9512e2b442749"
  fuelmenu_sha: "e071216cb214e34b4d861478033425ee6a54a3be"
  shotgun_sha: "63645dea384a37dde5c01d4f8905566978e5d906"
  network-checker_sha: "a43cf96cd9532f10794dce736350bf5bed350e9d"
  fuel-upgrade_sha: "616a7490ec7199f69759e97e42f9b97dfc87e85b"
  fuelmain_sha: "a365f05b903368225da3fea9aa42afc1d50dc9b4"

after performing "apt-get update" on controller:

............
............
Fetched 1723 kB in 3s (567 kB/s)
Reading package lists... Done
W: GPG error: http://mirror.fuel-infra.org mos8.0-holdback Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BCE5CC461FA22B08
W: GPG error: http://mirror.fuel-infra.org mos8.0-security Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BCE5CC461FA22B08
W: GPG error: http://mirror.fuel-infra.org mos8.0-updates Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BCE5CC461FA22B08

full log - http://paste.openstack.org/show/486869/

Tags: area-ci
Changed in fuel:
importance: High → Undecided
Revision history for this message
Dmitry Burmistrov (dburmistrov) wrote :

All 8.0 and Mitaka repositories are signed
E.g. http://mirror.fuel-infra.org/mos-repos/ubuntu/8.0/dists/mos8.0-holdback/Release.gpg

"the public key is not available" means the public key hadn't been imported to the keyring

Revision history for this message
Sudeep Batra (sudeep.batra) wrote :

I was getting error in the Mirantis 8.0/Fuel 8.0 deployment on the Controller Node.
Checked the Puppet Logs :
ERR Execution of '/usr/bin/apt-get -q -y -o DPkg::Options::=--force-confold install swift' returned 100: Reading package lists...
While running the apt-get update on the node gave the below error :
W: GPG error: http://mirror.fuel-infra.org mos8.0-holdback Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BCE5CC461FA22B08
W: GPG error: http://mirror.fuel-infra.org mos8.0-security Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BCE5CC461FA22B08
W: GPG error: http://mirror.fuel-infra.org mos8.0-updates Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BCE5CC461FA22B08

Resolved by getting a fix from friend Arijit Bose as below :
root@node-4:~# sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys BCE5CC461FA22B08
Executing: gpg --ignore-time-conflict --no-options --no-default-keyring --homedir /tmp/tmp.6AeZac2VD6 --no-auto-check-trustdb --trust-model always --keyring /etc/apt/trusted.gpg --primary-keyring /etc/apt/trusted.gpg --keyring /etc/apt/trusted.gpg.d/webupd8team-y-ppa-manager.gpg --keyserver keyserver.ubuntu.com --recv-keys BCE5CC461FA22B08
gpg: requesting key 1FA22B08 from hkp server keyserver.ubuntu.com
gpg: key 1FA22B08: public key "fuel-infra (Example key) <email address hidden>" imported
gpg: Total number processed: 1
gpg: imported: 1 (RSA: 1)

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.