Comment 5 for bug 1694474

Revision history for this message
Corey Bryant (corey.bryant) wrote :

Hello Rafael,

Thank you for reporting this bug.

Following is a short summary of what bug #1657440 describes.

There's an hourly window when the UCA is being updated. An apt update call during this window causes the Release file to be downloaded and Release.gpg file to not be downloaded. The missing Release.gpg file causes the "unauthenticated" packages.

According to bug #1657440 this issue has been partially fixed back to xenial. The missing Release.gpg file issue still exists, however, prior to the fix to apt in bug #1657440, the missing Release.gpg issue would not correct until an hour had passed and another apt update was run. At this point, an ensuing apt update call apparently resolves the issue.

So bottom line, there is still an issue but it is at least resolvable with an ensuing apt update.

There are scripts to recreate in bug #1657440.

And here is the patch to apt for reference: https://github.com/Debian/apt/commit/2a6d2e9c0781a0a7bb5d2aad7b8bdbee315d4461