debian repo.nagios.com signature issue

[bbahn]

This has been resolved. Thank you for your concern.

[lveitch]

Is this still an issue that hasnt been resolved as of yet? Last I saw was the June post about it but was curious if I needed to do something or if its still going on


upload pic

[tjcolby13]

I have the same problem today

[cbyers]

Hello,

Could I please have you try running these commands to see if that resolves the issue?

Code: Select all

curl -fsSL https://repo.nagios.com/GPG-KEY-NAGIOS-V3 | sudo gpg --dearmor -o /etc/apt/keyrings/GPG-KEY-NAGIOS-V3.gpg
apt-get update

We updated the GPG key and you may just need to update your key

[lveitch]

That surprisingly worked. I had redid the key previously but apparently something didn't take and doing it again it worked. Appreciate it

[jamie.simon]

I'm encountering the same issue on Ubuntu 22.04.3 LTS., The "preferred" method (see https://repo.nagios.com/?repo=deb-ubuntu) of setting up this repo throws an error.

Applied steps:


$ sudo rm /etc/apt/sources.list.d/nagios.sources
$ sudo rm /etc/apt/keyrings/GPG-KEY-NAGIOS-V3.gpg
$ echo "Types: deb
URIs: https://repo.nagios.com/deb/$(lsb_release -cs)
Suites: /
Signed-By: /etc/apt/keyrings/GPG-KEY-NAGIOS-V3.gpg" | sudo tee /etc/apt/sources.list.d/nagios.sources > /dev/null
$ curl -fsSL https://repo.nagios.com/GPG-KEY-NAGIOS-V3 | sudo gpg --dearmor -o /etc/apt/keyrings/GPG-KEY-NAGIOS-V3.gpg
$ sudo apt-get update
[...snip...]
Get:11 https://repo.nagios.com/deb/jammy InRelease [1,457 B]
Err:11 https://repo.nagios.com/deb/jammy InRelease
The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 471D5F4645ECF0AD
Reading package lists... Done
W: GPG error: https://repo.nagios.com/deb/jammy InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 471D5F4645ECF0AD
E: The repository 'https://repo.nagios.com/deb/jammy InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.


HOWEVER the instructions on https://repo.nagios.com/?repo=deb-ubuntu for "older OS/legacy" work:


# rm /etc/apt/keyrings/GPG-KEY-NAGIOS-V3.gpg
# rm /etc/apt/sources.list.d/nagios.sources
# echo "deb https://repo.nagios.com/deb/$(lsb_release -cs) /" > /etc/apt/sources.list.d/nagios.list
# wget -qO - https://repo.nagios.com/GPG-KEY-NAGIOS-V3 | apt-key add -
Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)).
OK
# apt-get update
[...snip...]
Get:11 https://repo.nagios.com/deb/jammy InRelease [1,457 B]
Get:12 https://repo.nagios.com/deb/jammy Packages [2,992 B]
Fetched 4,449 B in 1s (3,884 B/s)
Reading package lists... Done
W: https://repo.nagios.com/deb/jammy/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.


Please advise why the "preferred" method is failing for Ubuntu 22.04.3 LTS?

EDIT: Solution found for "preferred" method: please update instructions on https://repo.nagios.com/?repo=deb-ubuntu to set GPG key file permissions:


$ sudo chmod 644 /etc/apt/keyrings/GPG-KEY-NAGIOS-V3.gpg