GPG error: https://packages.icinga.com/ubuntu icinga-focal InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY CC116F55AA7F2382

Icinga 2
1

getting GPG error when I tried to run sudo apt update, it looks like icinga repo is broken, i dont understand why this happens so often and it’s impossible to get hold of icnga support team

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://packages.icinga.com/ubuntu icinga-focal InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY CC116F55AA7F2382
W: Failed to fetch http://packages.icinga.com/ubuntu/dists/icinga-focal/InRelease  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY CC116F55AA7F2382
W: Some index files failed to download. They have been ignored, or old ones used instead.
2

Please check this blog entry.

3 Likes
3

Thanks. Good to know that it’s intentional. However, I still get GPG error even if the new key has been imported.

4

Thanks - what is icinga-bullseye ?

5

bullseye would be debian:

wget -O icinga-archive-keyring.deb "https://packages.icinga.com/icinga-archive-keyring_latest+ubuntu$(
 . /etc/os-release; echo "$VERSION_ID"
).deb"

apt install ./icinga-archive-keyring.deb

update your icinga-focal.list file with this:

deb [signed-by=/usr/share/keyrings/icinga-archive-keyring.gpg] https://packages.icinga.com/ubuntu icinga-focal main
deb-src [signed-by=/usr/share/keyrings/icinga-archive-keyring.gpg] https://packages.icinga.com/ubuntu icinga-focal main

see here Index of /ubuntu
and here Icinga Package Repository Key Rotation, 2024 - #5 by Al2Klimov

3 Likes
6

@daniel_hamberg: Could you please post what you did and what kind of error you receive?

7

Thanks - any reason why they would change that? that is just awful. why am i forced to install some random package that I have no idea what else it changes on my system

8

You can also just overwrite /usr/share/keyrings/icinga-archive-keyring.gpg with the new file if you fear the package.

1 Like
9

where would i get a new file without installing the binary?

10

Absolutely! On my Rocky 8.8:

Importing GPG key 0xAA7F2382:
 Userid     : "Icinga GmbH (Build server) <info@icinga.com>"
 Fingerprint: DD3A F619 8ED0 00B4 C0B7 3956 CC11 6F55 AA7F 2382
 From       : https://packages.icinga.com/icinga.key
  • But got:
Is this ok [y/N]: y
Key imported successfully
Import of key(s) didn't help, wrong key(s)?
Public key for icinga2-doc-2.13.2-1.el8.icinga.x86_64.rpm is not installed. Failing package is: icinga2-doc-2.13.2-1.el8.icinga.x86_64
 GPG Keys are configured as: https://packages.icinga.com/icinga.key
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED
11

Could you please turn it down a bit. You can always download and extract the package first, taking a close look what it contains and does.

https://packages.icinga.com/icinga.key

It contains the fingerprint announced in the blog post.

$ gpg <(curl https://packages.icinga.com/icinga.key)                                                                                                                          130 ↵
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  1660  100  1660    0     0  30167      0 --:--:-- --:--:-- --:--:-- 30740
pub   rsa4096 2024-05-21 [SC]
      DD3AF6198ED000B4C0B73956CC116F55AA7F2382
uid           Icinga GmbH (Build server) <info@icinga.com>
1 Like
12

@daniel_hamberg: I am sorry to inform you, but the Rocky 8 repository is end of life. Please head over to https://github.com/Icinga/icinga2/issues/10182#issuecomment-2385544581 for more information.

13

Thanks! Luckily this was a lab installation and it worked yesterday. :slight_smile: But then I know the reason at least!

14

@daniel_hamberg: Please excuse the inconvenience. Please note that Rocky Linux 8.8 is also already end of life[1] and your Icinga 2 version is a bit behind. Thus, also for a lab install, you may want to consider upgrading to a supported operating system.

  1. Rocky Linux | endoflife.date ↩︎

1 Like