Kernel installation fails when system clock is set in the past

[Carl Karsten]

Trying to install to a box with an nvidia card (first time I have tried on this box)
Setup errors: http://dev.personnelware.com/carl/temp/Mar31/1112314349/p1010004.jpg

VC3 shows
WARNING: The following packages cannot be authenticated!
  linux-image-2.6.10-5-386 linux-image-386 nvidia-kernel-common
  linux-restricted-modules-2.6.10-5-386 linux-restricted-modules-386 linux-386
E: There are problems and -y was used without --force-yes

Log files and stuff: http://dev.personnelware.com/carl/temp/Mar31/1112314349

[Matt Zimmerman (mdz)]

I believe "-o Acquire::gpg::options=--ignore-time-conflict" is what is needed here

[Colin Watson (cjwatson)]

apt-install already uses that option, and has done so since 9 February.

Is it possible that that option might need to be passed to 'apt-get update'?

[Matt Zimmerman (mdz)]

Yes, it needs to be passed to apt-get update (that is the only apt-get command
which executes gpg)

[Colin Watson (cjwatson)]

I've fixed this as far as I can, and it should work for the netboot case now:

base-installer (1.15ubuntu16) hoary; urgency=low

  * Make apt-get use gpgv --ignore-time-conflict to avoid validation errors
    due to clock problems (Ubuntu #8496).

 -- Colin Watson <email address hidden> Tue, 5 Apr 2005 18:49:42 +0100

base-config (2.62ubuntu23) hoary; urgency=low

  * --ignore-time-conflict for lib/menu/pkgsel as well.

 -- Colin Watson <email address hidden> Tue, 5 Apr 2005 19:33:00 +0100

base-config (2.62ubuntu22) hoary; urgency=low

  * Make apt-get and apt-cdrom use gpgv --ignore-time-conflict to avoid
    validation errors due to clock problems (Ubuntu #8496).

 -- Colin Watson <email address hidden> Tue, 5 Apr 2005 19:26:34 +0100

However, I'm now blocked because apt-cdrom doesn't honour Acquire::gpgv::Options
(see SigVerify::CopyAndVerify). Michael?

[Matt Zimmerman (mdz)]

Ick, why is this code duplicated between here and the gpgv method?

[Michael Vogt (mvo)]

Created an attachment (id=2014)
patch to solve the problem

This patch honors the the gpgv options in apt-cdrom too.

The code was duplicated because apt-cdrom does not use any pkgAcquire code. I
will have a look how this can be improved in the future.

[Michael Vogt (mvo)]

Created an attachment (id=2015)
corrected version of the patch (thanks to mdz)

[Michael Vogt (mvo)]

Created an attachment (id=2016)
Alternative fix by hard-coding "--ignore-time-conflict"

[Michael Vogt (mvo)]

Fixed with the upload of apt-0.6.35ubuntu1 (with the hardcoded patch).