loud-apt doesn't import CSEE repo key

Bug #376141 reported by Adam Dorsey
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
LOUD Platform Project
Fix Released
Medium
Unassigned

Bug Description

Whenever apt-get update is run apt gets angry because the stuff from CSEE ljaunty-lmaniac-test is signed and it can't check the signature because it doesn't have the right key.

I'd give you the error output but friggin Virtualbox won't let me copy-paste out of a VM.

Revision history for this message
Adam Dorsey (adorsey) wrote :

What needs to happen here is the public key from CSEE needs to be put in the package and imported using 'apt-key add blah.key' as part of the postinst script. Andrew or bdoss can take care of that.

Revision history for this message
Bryant Doss (bryantdoss) wrote :

Truth, right now the loud-apt package in the lhardy repository hosted by LCSEE does this (I believe), so our package in bzr may just be out of sync with the package on the LCSEE mirror.

Revision history for this message
Tim 'Shaggy' Bielawa (tbielawa) wrote :

I'm apt (no pun intended) to believe what bdoss says there.

Also, dorsey, if you're preseeding I'd suggest you upgrade your gpg key method and stream that into the preseed also. I'll report back with the correct stanza as soon as I find it!

Revision history for this message
Tim 'Shaggy' Bielawa (tbielawa) wrote :

http://www.debian.org/releases/etch/example-preseed.txt

### Apt setup
# You can choose to install non-free and contrib software.
#d-i apt-setup/non-free boolean true
#d-i apt-setup/contrib boolean true
# Uncomment this if you don't want to use a network mirror.
#d-i apt-setup/use_mirror boolean false
# Uncomment this to avoid adding security sources, or
# add a hostname to use a different server than security.debian.org.
#d-i apt-setup/security_host string

# Additional repositories, local[0-9] available
#d-i apt-setup/local0/repository string \
# deb http://local.server/debian stable main
#d-i apt-setup/local0/comment string local server
# Enable deb-src lines
#d-i apt-setup/local0/source boolean true
# URL to the public key of the local repository; you must provide a key or
# apt will complain about the unauthenticated repository and so the
# sources.list line will be left commented out
#d-i apt-setup/local0/key string http://local.server/key

Can you guys work with that and get a fix we can back port this way from you?

Key URL = http://mirror.lcsee.wvu.edu/loud/lcsee_repo.gpg

Revision history for this message
Bryant Doss (bryantdoss) wrote :

I added the LCSEE repository key to loud-apt as a temporary fix, going to take a look at the preseed now, but I just thought about something

Wouldn't the keys for lmaniac and loud be different? If I remember correctly, they sort of act as totally different repositories, and therefore we would need another key for lmaniac.

I added the LCSEE key on my machine and tried to apt-get update with ljaunty repositories, fail.

W: GPG error: http://mirror.lcsee.wvu.edu ljaunty-lmaniac-test/ Release: The following signatures were invalid: NODATA 2
W: You may want to run apt-get update to correct these problems
root@rebirth:/etc/apt# apt-key list | grep LCSEE
uid LCSEE Repository Bot (2006) <email address hidden>
root@rebirth:/etc/apt#

Adam Dorsey (adorsey)
Changed in loud-platform:
importance: Undecided → Medium
status: New → Fix Committed
Revision history for this message
Andrew Butcher (abutcher) wrote :

Committed fix in my branch was to replace loud-apt with lmaniac apt. Keys are now happy.

See bug https://bugs.launchpad.net/loud-platform/+bug/378766

Changed in loud-platform:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.