[Bug 1642386] Re: At least one invalid signature was encountered.
Julian Andres Klode
julian.klode at gmail.com
Fri Nov 18 13:03:52 UTC 2016
Yeah, valgrind is a bit noisy always because we are building the cache
in memory before (1) writing it to the disk and the write includes
unused regions and (2) we are hashing the entire thing before writing
it, including the uninitialised bytes. So that means while we do have a
few uninitialized bytes, it's actually safe.
This bug is fairly strange. Especially git vs packages. The only thing
different when building via git is that hardening flags are not used.
You could export those:
DEB_BUILD_MAINT_OPTIONS=hardening=+all dpkg-buildflags
export CXXFLAGS LDFLAGS CPPFLAGS
but I seriously doubt that's the problem (if git always worked instead of always failed, this might have made sense).
If I had a user account on an affected machine, where
If I had a user account on an affected machine (it needs to be
reproducible by creating a fake root directory, and copying etc/apt and
var/lib/apt to it, then I can use -o Dir=$PATH_TO_FAKE_ROOT instead of
needing root), where I can build apt and have tools like valgrind, gdb;
I could (try to) debug that myself.
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1642386
Title:
At least one invalid signature was encountered.
Status in apt package in Ubuntu:
New
Bug description:
Hello, a recent apt update appears to have broken apt entirely.
A coworker reported seeing troubles: http://paste.ubuntu.com/23487135/
To test, I upgraded my laptop then immediately re-ran apt-get update
&& apt-get -u dist-upgrade:
sarnold at hunt:~/Downloads$ sudo apt-get update && sudo apt-get -u dist-upgrade
Hit:1 http://mirrors.kernel.org/ubuntu xenial InRelease
Hit:2 http://mirrors.kernel.org/ubuntu xenial-updates InRelease
Hit:3 http://mirrors.kernel.org/ubuntu xenial-security InRelease
Ign:4 http://mirrors.kernel.org/ubuntu precise InRelease
Get:5 http://mirrors.kernel.org/ubuntu precise-updates InRelease [55.7 kB]
Get:6 http://mirrors.kernel.org/ubuntu precise-security InRelease [55.7 kB]
Get:7 http://mirrors.kernel.org/ubuntu precise-proposed InRelease [55.7 kB]
Ign:8 http://mirrors.kernel.org/ubuntu trusty InRelease
Get:9 http://mirrors.kernel.org/ubuntu trusty-updates InRelease [65.9 kB]
Hit:10 http://mirrors.kernel.org/ubuntu trusty-security InRelease
Get:11 http://mirrors.kernel.org/ubuntu trusty-proposed InRelease [65.9 kB]
Get:12 http://mirrors.kernel.org/ubuntu xenial-proposed InRelease [247 kB]
Err:1 http://mirrors.kernel.org/ubuntu xenial InRelease
At least one invalid signature was encountered.
Hit:13 http://security.debian.org jessie/updates InRelease
Err:2 http://mirrors.kernel.org/ubuntu xenial-updates InRelease
At least one invalid signature was encountered.
Get:14 http://mirrors.kernel.org/ubuntu yakkety InRelease [247 kB]
Err:3 http://mirrors.kernel.org/ubuntu xenial-security InRelease
At least one invalid signature was encountered.
Hit:15 http://mirrors.kernel.org/ubuntu yakkety-updates InRelease
Get:16 http://mirrors.kernel.org/ubuntu yakkety-security InRelease [93.3 kB]
Hit:17 http://security.debian.org wheezy/updates InRelease
Get:18 http://mirrors.kernel.org/ubuntu yakkety-proposed InRelease [95.7 kB]
Hit:19 http://mirrors.kernel.org/ubuntu zesty InRelease
Hit:20 http://mirrors.kernel.org/ubuntu zesty-updates InRelease
Hit:21 http://mirrors.kernel.org/ubuntu zesty-security InRelease
Err:5 http://mirrors.kernel.org/ubuntu precise-updates InRelease
At least one invalid signature was encountered.
Hit:22 http://mirrors.kernel.org/ubuntu zesty-proposed InRelease
Hit:23 http://mirrors.kernel.org/ubuntu precise Release
Hit:24 http://mirrors.kernel.org/ubuntu trusty Release
Ign:25 http://archive.canonical.com/ubuntu precise InRelease
Hit:26 http://security.ubuntu.com/ubuntu xenial-security InRelease
Hit:27 http://ppa.launchpad.net/ci-train-ppa-service/stable-phone-overlay/ubuntu vivid InRelease
Hit:28 http://ftp.debian.org/debian unstable InRelease
Err:6 http://mirrors.kernel.org/ubuntu precise-security InRelease
At least one invalid signature was encountered.
Err:7 http://mirrors.kernel.org/ubuntu precise-proposed InRelease
At least one invalid signature was encountered.
Err:9 http://mirrors.kernel.org/ubuntu trusty-updates InRelease
At least one invalid signature was encountered.
Ign:29 http://archive.canonical.com/ubuntu trusty InRelease
Hit:30 http://ppa.launchpad.net/snappy-dev/image/ubuntu vivid InRelease
Hit:31 http://ftp.debian.org/debian testing InRelease
Err:10 http://mirrors.kernel.org/ubuntu trusty-security InRelease
At least one invalid signature was encountered.
Err:11 http://mirrors.kernel.org/ubuntu trusty-proposed InRelease
At least one invalid signature was encountered.
Err:13 http://security.debian.org jessie/updates InRelease
At least one invalid signature was encountered.
Hit:32 http://archive.canonical.com/ubuntu xenial InRelease
Hit:33 http://ppa.launchpad.net/ci-train-ppa-service/stable-phone-overlay/ubuntu xenial InRelease
Ign:34 http://ftp.debian.org/debian jessie InRelease
Err:12 http://mirrors.kernel.org/ubuntu xenial-proposed InRelease
At least one invalid signature was encountered.
Err:14 http://mirrors.kernel.org/ubuntu yakkety InRelease
At least one invalid signature was encountered.
Hit:35 http://archive.canonical.com/ubuntu yakkety InRelease
Err:15 http://mirrors.kernel.org/ubuntu yakkety-updates InRelease
At least one invalid signature was encountered.
Hit:36 http://ftp.debian.org/debian jessie-updates InRelease
Err:16 http://mirrors.kernel.org/ubuntu yakkety-security InRelease
At least one invalid signature was encountered.
Err:17 http://security.debian.org wheezy/updates InRelease
At least one invalid signature was encountered.
Hit:37 http://archive.canonical.com/ubuntu zesty InRelease
Err:18 http://mirrors.kernel.org/ubuntu yakkety-proposed InRelease
At least one invalid signature was encountered.
Ign:38 http://ftp.debian.org/debian wheezy InRelease
Err:19 http://mirrors.kernel.org/ubuntu zesty InRelease
At least one invalid signature was encountered.
Err:20 http://mirrors.kernel.org/ubuntu zesty-updates InRelease
At least one invalid signature was encountered.
Hit:39 http://archive.canonical.com/ubuntu precise Release
Err:21 http://mirrors.kernel.org/ubuntu zesty-security InRelease
At least one invalid signature was encountered.
Hit:40 http://ftp.debian.org/debian wheezy-updates InRelease
Err:22 http://mirrors.kernel.org/ubuntu zesty-proposed InRelease
At least one invalid signature was encountered.
Err:41 http://mirrors.kernel.org/ubuntu precise Release.gpg
At least one invalid signature was encountered.
Hit:42 http://archive.canonical.com/ubuntu trusty Release
Err:43 http://mirrors.kernel.org/ubuntu trusty Release.gpg
At least one invalid signature was encountered.
Hit:44 http://ftp.debian.org/debian jessie Release
Err:26 http://security.ubuntu.com/ubuntu xenial-security InRelease
At least one invalid signature was encountered.
Err:27 http://ppa.launchpad.net/ci-train-ppa-service/stable-phone-overlay/ubuntu vivid InRelease
At least one invalid signature was encountered.
Err:28 http://ftp.debian.org/debian unstable InRelease
At least one invalid signature was encountered.
Hit:45 http://ftp.debian.org/debian wheezy Release
Err:30 http://ppa.launchpad.net/snappy-dev/image/ubuntu vivid InRelease
At least one invalid signature was encountered.
Err:31 http://ftp.debian.org/debian testing InRelease
At least one invalid signature was encountered.
Err:32 http://archive.canonical.com/ubuntu xenial InRelease
At least one invalid signature was encountered.
Err:33 http://ppa.launchpad.net/ci-train-ppa-service/stable-phone-overlay/ubuntu xenial InRelease
At least one invalid signature was encountered.
Err:35 http://archive.canonical.com/ubuntu yakkety InRelease
At least one invalid signature was encountered.
Err:36 http://ftp.debian.org/debian jessie-updates InRelease
At least one invalid signature was encountered.
Err:37 http://archive.canonical.com/ubuntu zesty InRelease
At least one invalid signature was encountered.
Err:46 http://archive.canonical.com/ubuntu precise Release.gpg
At least one invalid signature was encountered.
Err:40 http://ftp.debian.org/debian wheezy-updates InRelease
At least one invalid signature was encountered.
Err:47 http://archive.canonical.com/ubuntu trusty Release.gpg
At least one invalid signature was encountered.
Err:48 http://ftp.debian.org/debian jessie Release.gpg
At least one invalid signature was encountered.
Err:49 http://ftp.debian.org/debian wheezy Release.gpg
At least one invalid signature was encountered.
Fetched 981 kB in 1s (496 kB/s)
Reading package lists... Done
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu xenial InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu xenial-updates InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu xenial-security InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu precise-updates InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu precise-security InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu precise-proposed InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu trusty-updates InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu trusty-security InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu trusty-proposed InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://security.debian.org jessie/updates InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu xenial-proposed InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu yakkety InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu yakkety-updates InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu yakkety-security InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://security.debian.org wheezy/updates InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu yakkety-proposed InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu zesty InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu zesty-updates InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu zesty-security InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu zesty-proposed InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu precise Release: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.kernel.org/ubuntu trusty Release: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://security.ubuntu.com/ubuntu xenial-security InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ppa.launchpad.net/ci-train-ppa-service/stable-phone-overlay/ubuntu vivid InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ftp.debian.org/debian unstable InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ppa.launchpad.net/snappy-dev/image/ubuntu vivid InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ftp.debian.org/debian testing InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://archive.canonical.com/ubuntu xenial InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ppa.launchpad.net/ci-train-ppa-service/stable-phone-overlay/ubuntu xenial InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://archive.canonical.com/ubuntu yakkety InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ftp.debian.org/debian jessie-updates InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://archive.canonical.com/ubuntu zesty InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://archive.canonical.com/ubuntu precise Release: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ftp.debian.org/debian wheezy-updates InRelease: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://archive.canonical.com/ubuntu trusty Release: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ftp.debian.org/debian jessie Release: At least one invalid signature was encountered.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ftp.debian.org/debian wheezy Release: At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/xenial/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/xenial-updates/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/xenial-security/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/xenial-security/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://ppa.launchpad.net/ci-train-ppa-service/stable-phone-overlay/ubuntu/dists/vivid/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://ppa.launchpad.net/snappy-dev/image/ubuntu/dists/vivid/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://ppa.launchpad.net/ci-train-ppa-service/stable-phone-overlay/ubuntu/dists/xenial/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/precise-updates/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/precise-security/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/precise-proposed/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/trusty-updates/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/trusty-security/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/trusty-proposed/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/xenial-proposed/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://archive.canonical.com/ubuntu/dists/xenial/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/yakkety/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/yakkety-updates/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/yakkety-security/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/yakkety-proposed/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://archive.canonical.com/ubuntu/dists/yakkety/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/zesty/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/zesty-updates/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/zesty-security/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/zesty-proposed/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://archive.canonical.com/ubuntu/dists/zesty/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://ftp.debian.org/debian/dists/unstable/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://ftp.debian.org/debian/dists/testing/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://ftp.debian.org/debian/dists/jessie-updates/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://security.debian.org/dists/jessie/updates/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://ftp.debian.org/debian/dists/wheezy-updates/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://security.debian.org/dists/wheezy/updates/InRelease At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/precise/Release.gpg At least one invalid signature was encountered.
W: Failed to fetch http://mirrors.kernel.org/ubuntu/dists/trusty/Release.gpg At least one invalid signature was encountered.
W: Failed to fetch http://archive.canonical.com/ubuntu/dists/precise/Release.gpg At least one invalid signature was encountered.
W: Failed to fetch http://archive.canonical.com/ubuntu/dists/trusty/Release.gpg At least one invalid signature was encountered.
W: Failed to fetch http://ftp.debian.org/debian/dists/jessie/Release.gpg At least one invalid signature was encountered.
W: Failed to fetch http://ftp.debian.org/debian/dists/wheezy/Release.gpg At least one invalid signature was encountered.
W: Some index files failed to download. They have been ignored, or old ones used instead.
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
The following packages were automatically installed and are no longer required:
linux-headers-4.4.0-21 linux-headers-4.4.0-21-generic linux-headers-4.4.0-22 linux-headers-4.4.0-22-generic
linux-headers-4.4.0-24 linux-headers-4.4.0-24-generic linux-headers-4.4.0-28 linux-headers-4.4.0-28-generic
linux-headers-4.4.0-31 linux-headers-4.4.0-31-generic linux-headers-4.4.0-34 linux-headers-4.4.0-34-generic
linux-headers-4.4.0-36 linux-headers-4.4.0-36-generic linux-headers-4.4.0-38 linux-headers-4.4.0-38-generic
linux-image-4.4.0-21-generic linux-image-4.4.0-22-generic linux-image-4.4.0-24-generic
linux-image-4.4.0-28-generic linux-image-4.4.0-31-generic linux-image-4.4.0-34-generic
linux-image-4.4.0-36-generic linux-image-4.4.0-38-generic
Use 'sudo apt autoremove' to remove them.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
I'll attach the full terminal log soon.
Thanks
ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: apt 1.2.15
ProcVersionSignature: Ubuntu 4.4.0-45.66-generic 4.4.21
Uname: Linux 4.4.0-45-generic x86_64
NonfreeKernelModules: zfs zunicode zcommon znvpair zavl
ApportVersion: 2.20.1-0ubuntu2.1
Architecture: amd64
CurrentDesktop: Unity
Date: Wed Nov 16 12:29:54 2016
InstallationDate: Installed on 2012-10-18 (1490 days ago)
InstallationMedia: Ubuntu 12.04.1 LTS "Precise Pangolin" - Release amd64 (20120823.1)
SourcePackage: apt
UpgradeStatus: Upgraded to xenial on 2016-04-30 (200 days ago)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1642386/+subscriptions
More information about the foundations-bugs
mailing list