[Bug 599394] Re: Release signed by unknown key (key id 40976EAF437D05B5)

[Peter Odding]

For posterity: I believe this to be a bug in debootstrap that was caused
by an update to the ubuntu-keyring package [1] that received no
corresponding update to the debootstrap 'configuration' files [2].

To summarize:

- This affects Ubuntu <= 12.04 chroots on Ubuntu >= 17.04 hosts.
- The best workaround that I know of is the following command:

sudo debootstrap --keyring=/usr/share/keyrings/ubuntu-archive-removed-
keys.gpg precise /tmp/precise http://old-releases.ubuntu.com/ubuntu/

The important bit is the non-default --keyring argument.

[1] https://bugs.launchpad.net/ubuntu/+source/ubuntu-keyring/+bug/1363482
[2] https://bugs.launchpad.net/ubuntu/+source/ubuntu-keyring/+bug/1363482/comments/7

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to pbuilder in Ubuntu.
https://bugs.launchpad.net/bugs/599394

Title:
  Release signed by unknown key (key id 40976EAF437D05B5)

Status in pbuilder package in Ubuntu:
  Fix Released

Bug description:
  Binary package hint: pbuilder

  
  scott at scott-desktop:~$ sudo pbuilder create --debug 
  ++ shift
  ++ '[' -n '' ']'
  ++ BUILDPLACE=/var/cache/pbuilder/build/
  ++ BASEBUILDPLACE=/var/cache/pbuilder/build/
  ++ '[' '' '!=' yes -a no '!=' yes ']'
  ++ BUILDPLACE=/var/cache/pbuilder/build//2087
  ++ '[' -z '' ']'
  ++ CHROOTEXEC='chroot /var/cache/pbuilder/build//2087 '
  ++ '[' maverick = experimental ']'
  ++ EXPERIMENTAL=
  ++ case "$PBCURRENTCOMMANDLINEOPERATION" in
  ++ '[' noninteractive = noninteractive -o noninteractive = Noninteractive ']'
  ++ exec
  ++ FORCE_CONFNEW[0]=-o
  ++ FORCE_CONFNEW[1]=DPkg::Options::=--force-confnew
  ++ '[' -n /var/cache/pbuilder/ccache ']'
  ++ '[' -d /var/cache/pbuilder/ccache ']'
  ++ BINDMOUNTS='/var/cache/pbuilder/ccache /var/cache/pbuilder/ccache'
  ++ export PATH=/usr/lib/ccache:/usr/lib/ccache:/usr/sbin:/usr/bin:/sbin:/bin:/usr/X11R6/bin
  ++ PATH=/usr/lib/ccache:/usr/lib/ccache:/usr/sbin:/usr/bin:/sbin:/bin:/usr/X11R6/bin
  +++ sort -u
  +++ for i in '$BINDMOUNTS'
  +++ echo /var/cache/pbuilder/ccache
  +++ for i in '$BINDMOUNTS'
  +++ echo /var/cache/pbuilder/ccache
  ++ BINDMOUNTS=/var/cache/pbuilder/ccache
  + . /usr/lib/pbuilder/pbuilder-runhooks
  ++ hooks=tmp/hooks
  + '[' -z maverick ']'
  + log 'I: Distribution is maverick.'
  + case "$*" in
  + echo 'I: Distribution is maverick.'
  I: Distribution is maverick.
  + '[' yes = yes ']'
  + TRAP='echo ignoring trap '
  + cleanbuildplace
  + '[' 0 -ne 0 ']'
  + '[' '' '!=' yes ']'
  + '[' -d /var/cache/pbuilder/build//2087 ']'
  + log 'I: Building the build environment'
  + case "$*" in
  + echo 'I: Building the build environment'
  I: Building the build environment
  + mkdir -p /var/cache/pbuilder/build//2087
  + '[' '!' -d /var/cache/pbuilder/build//2087 ']'
  + echo ignoring trap cleanbuildplace exit
  ignoring trap cleanbuildplace exit
  + log 'I: running debootstrap'
  + case "$*" in
  + echo 'I: running debootstrap'
  I: running debootstrap
  + unset DEBOOTSTRAPSCRIPT
  + '[' -n '' ']'
  + which debootstrap
  /usr/sbin/debootstrap
  + :
  + cd /var/cache/pbuilder/build//2087
  + debootstrap --include=apt --arch amd64 --arch amd64 --variant=buildd --keyring /usr/share/keyrings/debian-archive-keyring.gpg maverick . http://mirror.internode.on.net/pub/ubuntu/ubuntu/
  I: Retrieving Release
  I: Retrieving Release.gpg
  I: Checking Release signature
  E: Release signed by unknown key (key id 40976EAF437D05B5)
  + log 'E: debootstrap failed'
  + case "$*" in
  + echo 'E: debootstrap failed'
  E: debootstrap failed
  + exit 1

  
  The md5sum of /usr/share/keyrings/debian-archive-keyring.gpg is ...

  b79bfb9bbbff2a4fbff58bfad3813085  debian-archive-keyring.gpg

  I am using my ISP as the debian/ubuntu mirror and this has never given
  any trouble prior.

  ProblemType: Bug
  DistroRelease: Ubuntu 10.10
  Package: pbuilder 0.198ubuntu1
  ProcVersionSignature: Ubuntu 2.6.35-6.7-generic 2.6.35-rc3
  Uname: Linux 2.6.35-6-generic x86_64
  Architecture: amd64
  Date: Tue Jun 29 00:37:26 2010
  InstallationMedia: Kubuntu 10.04 LTS "Lucid Lynx" - Release amd64 (20100427)
  PackageArchitecture: all
  ProcEnviron:
   LANG=en_AU.utf8
   SHELL=/bin/bash
  SourcePackage: pbuilder

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pbuilder/+bug/599394/+subscriptions