Package: apt Version: 1.3 Severity: normal I tested this in Debian stable (with apt 1.0.9.8.3) and Debian testing/experimental (with apt 1.3~rc4 and 1.3, respectively). In Debian stable, this works as expected, but in Debian testing and experimental, I run into the bug. See the bottom of this report for a full command log.
When adding the http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial repository, the Release and main_binary-amd64_Packages.lz4 files are downloaded and stored in /var/lib/apt/lists. Release.gpg is discarded because the necessary public key to verify the signature is not yet installed. After installing i3-autobuild-keyring, which adds the public key using apt-key add, the signature can successfully be verified (apt-get update no longer prints an error). However, even though Release.gpg is downloaded when running apt-get update, Release.gpg is not stored in /var/lib/apt/lists! Only when I delete the Release file, apt-get update will store the corresponding Release.gpg in /var/lib/apt/lists. This seems like a regression to me, and requires an extra step in the instructions for our users on how to enable our repository. Am I misunderstanding something, or is this actually a bug in apt? Steps to reproduce: $ docker run -t -i debian:experimental /bin/bash root@2b9c08db7f2a:/# apt-get update Get:1 http://mirrors.kernel.org/debian unstable InRelease [209 kB] Get:2 http://mirrors.kernel.org/debian experimental InRelease [107 kB] Get:3 http://mirrors.kernel.org/debian unstable/main amd64 Packages [9673 kB] Get:4 http://mirrors.kernel.org/debian experimental/main amd64 Packages [356 kB] Fetched 10.3 MB in 3s (2902 kB/s) Reading package lists... Done root@2b9c08db7f2a:/# echo 'deb http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial main' > /etc/apt/sources.list.d/i3-autobuild.list root@2b9c08db7f2a:/# cd /var/lib/apt/lists root@2b9c08db7f2a:/var/lib/apt/lists# ls -l total 16044 -rw-r--r-- 1 root root 107378 Sep 24 15:37 httpredir.debian.org_debian_dists_experimental_InRelease -rw-r--r-- 1 root root 717770 Sep 24 14:41 httpredir.debian.org_debian_dists_experimental_main_binary-amd64_Packages.lz4 -rw-r--r-- 1 root root 209324 Sep 24 15:40 httpredir.debian.org_debian_dists_unstable_InRelease -rw-r--r-- 1 root root 15379248 Sep 24 14:40 httpredir.debian.org_debian_dists_unstable_main_binary-amd64_Packages.lz4 -rw-r----- 1 root root 0 Sep 24 18:49 lock drwx------ 2 _apt root 4096 Sep 24 18:49 partial root@2b9c08db7f2a:/var/lib/apt/lists# apt-get update Ign:1 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial InRelease Get:3 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial Release [2664 B] Hit:2 http://mirrors.accretive-networks.net/debian unstable InRelease Get:5 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial Release.gpg [821 B] Hit:4 http://mirrors.accretive-networks.net/debian experimental InRelease Ign:5 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial Release.gpg Get:6 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial/main amd64 Packages [1044 B] Fetched 4529 B in 0s (6117 B/s) Reading package lists... Done W: GPG error: http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 070D94CCBE1DB1F1 W: The repository 'http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial Release' is not signed. N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use. N: See apt-secure(8) manpage for repository creation and user configuration details. root@2b9c08db7f2a:/var/lib/apt/lists# ls -l total 16052 -rw-r--r-- 1 root root 2664 Sep 24 18:06 dl.bintray.com_i3_i3-autobuild-ubuntu_dists_xenial_Release -rw-r--r-- 1 root root 1483 Sep 24 18:06 dl.bintray.com_i3_i3-autobuild-ubuntu_dists_xenial_main_binary-amd64_Packages.lz4 -rw-r--r-- 1 root root 107378 Sep 24 15:37 httpredir.debian.org_debian_dists_experimental_InRelease -rw-r--r-- 1 root root 717770 Sep 24 14:41 httpredir.debian.org_debian_dists_experimental_main_binary-amd64_Packages.lz4 -rw-r--r-- 1 root root 209324 Sep 24 15:40 httpredir.debian.org_debian_dists_unstable_InRelease -rw-r--r-- 1 root root 15379248 Sep 24 14:40 httpredir.debian.org_debian_dists_unstable_main_binary-amd64_Packages.lz4 -rw-r----- 1 root root 0 Sep 24 18:49 lock drwx------ 2 _apt root 4096 Sep 24 18:49 partial root@2b9c08db7f2a:/var/lib/apt/lists# apt-get install --allow-unauthenticated i3-autobuild-keyring Reading package lists... Done Building dependency tree... Done The following additional packages will be installed: dirmngr gnupg gnupg-agent gnupg-l10n libassuan0 libffi6 libgmp10 libgnutls30 libhogweed4 libidn11 libksba8 libldap-2.4-2 libnettle6 libnpth0 libp11-kit0 libreadline6 libsasl2-2 libsasl2-modules libsasl2-modules-db libsqlite3-0 libssl1.0.2 libtasn1-6 pinentry-curses readline-common Suggested packages: tor parcimonie xloadimage gnutls-bin libsasl2-modules-otp libsasl2-modules-ldap libsasl2-modules-sql libsasl2-modules-gssapi-mit | libsasl2-modules-gssapi-heimdal pinentry-doc readline-doc The following NEW packages will be installed: dirmngr gnupg gnupg-agent gnupg-l10n i3-autobuild-keyring libassuan0 libffi6 libgmp10 libgnutls30 libhogweed4 libidn11 libksba8 libldap-2.4-2 libnettle6 libnpth0 libp11-kit0 libreadline6 libsasl2-2 libsasl2-modules libsasl2-modules-db libsqlite3-0 libssl1.0.2 libtasn1-6 pinentry-curses readline-common 0 upgraded, 25 newly installed, 0 to remove and 0 not upgraded. Need to get 6953 kB of archives. After this operation, 19.4 MB of additional disk space will be used. Do you want to continue? [Y/n] WARNING: The following packages cannot be authenticated! i3-autobuild-keyring Authentication warning overridden. Get:1 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial/main amd64 i3-autobuild-keyring all 2016.03.28 [6320 B] Get:2 http://mirrors.accretive-networks.net/debian unstable/main amd64 libassuan0 amd64 2.4.3-1 [42.7 kB] Get:3 http://mirrors.accretive-networks.net/debian unstable/main amd64 pinentry-curses amd64 0.9.7-5 [45.5 kB] Get:4 http://mirrors.accretive-networks.net/debian unstable/main amd64 libnpth0 amd64 1.2-3 [13.7 kB] Get:5 http://mirrors.accretive-networks.net/debian unstable/main amd64 readline-common all 6.3-8 [57.7 kB] Get:6 http://mirrors.accretive-networks.net/debian unstable/main amd64 libreadline6 amd64 6.3-8+b4 [142 kB] Get:7 http://mirrors.accretive-networks.net/debian unstable/main amd64 gnupg-agent amd64 2.1.15-3 [411 kB] Get:8 http://mirrors.accretive-networks.net/debian unstable/main amd64 libksba8 amd64 1.3.5-2 [99.7 kB] Get:9 http://mirrors.accretive-networks.net/debian unstable/main amd64 libsqlite3-0 amd64 3.14.2-1 [559 kB] Get:10 http://mirrors.accretive-networks.net/debian unstable/main amd64 gnupg amd64 2.1.15-3 [962 kB] Get:11 http://mirrors.accretive-networks.net/debian unstable/main amd64 libssl1.0.2 amd64 1.0.2i-1 [1291 kB] Get:12 http://mirrors.accretive-networks.net/debian unstable/main amd64 libgmp10 amd64 2:6.1.1+dfsg-1 [254 kB] Get:13 http://mirrors.accretive-networks.net/debian unstable/main amd64 libnettle6 amd64 3.2-1 [191 kB] Get:14 http://mirrors.accretive-networks.net/debian unstable/main amd64 libhogweed4 amd64 3.2-1 [136 kB] Get:15 http://mirrors.accretive-networks.net/debian unstable/main amd64 libidn11 amd64 1.33-1 [115 kB] Get:16 http://mirrors.accretive-networks.net/debian unstable/main amd64 libffi6 amd64 3.2.1-6 [20.4 kB] Get:17 http://mirrors.accretive-networks.net/debian unstable/main amd64 libp11-kit0 amd64 0.23.2-5 [111 kB] Get:18 http://mirrors.accretive-networks.net/debian unstable/main amd64 libtasn1-6 amd64 4.9-4 [50.0 kB] Get:19 http://mirrors.accretive-networks.net/debian unstable/main amd64 libgnutls30 amd64 3.5.4-2 [810 kB] Get:20 http://mirrors.accretive-networks.net/debian unstable/main amd64 libsasl2-modules-db amd64 2.1.26.dfsg1-15 [66.9 kB] Get:21 http://mirrors.accretive-networks.net/debian unstable/main amd64 libsasl2-2 amd64 2.1.26.dfsg1-15 [103 kB] Get:22 http://mirrors.accretive-networks.net/debian unstable/main amd64 libldap-2.4-2 amd64 2.4.42+dfsg-2+b2 [222 kB] Get:23 http://mirrors.accretive-networks.net/debian unstable/main amd64 dirmngr amd64 2.1.15-3 [401 kB] Get:24 http://mirrors.accretive-networks.net/debian unstable/main amd64 libsasl2-modules amd64 2.1.26.dfsg1-15 [101 kB] Get:25 http://mirrors.accretive-networks.net/debian unstable/main amd64 gnupg-l10n all 2.1.15-3 [741 kB] Fetched 6953 kB in 4s (1698 kB/s) debconf: delaying package configuration, since apt-utils is not installed Selecting previously unselected package libassuan0:amd64. (Reading database ... 6471 files and directories currently installed.) Preparing to unpack .../00-libassuan0_2.4.3-1_amd64.deb ... Unpacking libassuan0:amd64 (2.4.3-1) ... Selecting previously unselected package pinentry-curses. Preparing to unpack .../01-pinentry-curses_0.9.7-5_amd64.deb ... Unpacking pinentry-curses (0.9.7-5) ... Selecting previously unselected package libnpth0:amd64. Preparing to unpack .../02-libnpth0_1.2-3_amd64.deb ... Unpacking libnpth0:amd64 (1.2-3) ... Selecting previously unselected package readline-common. Preparing to unpack .../03-readline-common_6.3-8_all.deb ... Unpacking readline-common (6.3-8) ... Selecting previously unselected package libreadline6:amd64. Preparing to unpack .../04-libreadline6_6.3-8+b4_amd64.deb ... Unpacking libreadline6:amd64 (6.3-8+b4) ... Selecting previously unselected package gnupg-agent. Preparing to unpack .../05-gnupg-agent_2.1.15-3_amd64.deb ... Unpacking gnupg-agent (2.1.15-3) ... Selecting previously unselected package libksba8:amd64. Preparing to unpack .../06-libksba8_1.3.5-2_amd64.deb ... Unpacking libksba8:amd64 (1.3.5-2) ... Selecting previously unselected package libsqlite3-0:amd64. Preparing to unpack .../07-libsqlite3-0_3.14.2-1_amd64.deb ... Unpacking libsqlite3-0:amd64 (3.14.2-1) ... Selecting previously unselected package gnupg. Preparing to unpack .../08-gnupg_2.1.15-3_amd64.deb ... Unpacking gnupg (2.1.15-3) ... Selecting previously unselected package i3-autobuild-keyring. Preparing to unpack .../09-i3-autobuild-keyring_2016.03.28_all.deb ... Unpacking i3-autobuild-keyring (2016.03.28) ... Selecting previously unselected package libssl1.0.2:amd64. Preparing to unpack .../10-libssl1.0.2_1.0.2i-1_amd64.deb ... Unpacking libssl1.0.2:amd64 (1.0.2i-1) ... Selecting previously unselected package libgmp10:amd64. Preparing to unpack .../11-libgmp10_2%3a6.1.1+dfsg-1_amd64.deb ... Unpacking libgmp10:amd64 (2:6.1.1+dfsg-1) ... Selecting previously unselected package libnettle6:amd64. Preparing to unpack .../12-libnettle6_3.2-1_amd64.deb ... Unpacking libnettle6:amd64 (3.2-1) ... Selecting previously unselected package libhogweed4:amd64. Preparing to unpack .../13-libhogweed4_3.2-1_amd64.deb ... Unpacking libhogweed4:amd64 (3.2-1) ... Selecting previously unselected package libidn11:amd64. Preparing to unpack .../14-libidn11_1.33-1_amd64.deb ... Unpacking libidn11:amd64 (1.33-1) ... Selecting previously unselected package libffi6:amd64. Preparing to unpack .../15-libffi6_3.2.1-6_amd64.deb ... Unpacking libffi6:amd64 (3.2.1-6) ... Selecting previously unselected package libp11-kit0:amd64. Preparing to unpack .../16-libp11-kit0_0.23.2-5_amd64.deb ... Unpacking libp11-kit0:amd64 (0.23.2-5) ... Selecting previously unselected package libtasn1-6:amd64. Preparing to unpack .../17-libtasn1-6_4.9-4_amd64.deb ... Unpacking libtasn1-6:amd64 (4.9-4) ... Selecting previously unselected package libgnutls30:amd64. Preparing to unpack .../18-libgnutls30_3.5.4-2_amd64.deb ... Unpacking libgnutls30:amd64 (3.5.4-2) ... Selecting previously unselected package libsasl2-modules-db:amd64. Preparing to unpack .../19-libsasl2-modules-db_2.1.26.dfsg1-15_amd64.deb ... Unpacking libsasl2-modules-db:amd64 (2.1.26.dfsg1-15) ... Selecting previously unselected package libsasl2-2:amd64. Preparing to unpack .../20-libsasl2-2_2.1.26.dfsg1-15_amd64.deb ... Unpacking libsasl2-2:amd64 (2.1.26.dfsg1-15) ... Selecting previously unselected package libldap-2.4-2:amd64. Preparing to unpack .../21-libldap-2.4-2_2.4.42+dfsg-2+b2_amd64.deb ... Unpacking libldap-2.4-2:amd64 (2.4.42+dfsg-2+b2) ... Selecting previously unselected package dirmngr. Preparing to unpack .../22-dirmngr_2.1.15-3_amd64.deb ... Unpacking dirmngr (2.1.15-3) ... Selecting previously unselected package libsasl2-modules:amd64. Preparing to unpack .../23-libsasl2-modules_2.1.26.dfsg1-15_amd64.deb ... Unpacking libsasl2-modules:amd64 (2.1.26.dfsg1-15) ... Selecting previously unselected package gnupg-l10n. Preparing to unpack .../24-gnupg-l10n_2.1.15-3_all.deb ... Unpacking gnupg-l10n (2.1.15-3) ... Setting up libnpth0:amd64 (1.2-3) ... Setting up readline-common (6.3-8) ... Setting up libnettle6:amd64 (3.2-1) ... Setting up libsasl2-modules-db:amd64 (2.1.26.dfsg1-15) ... Setting up libsasl2-2:amd64 (2.1.26.dfsg1-15) ... Setting up libksba8:amd64 (1.3.5-2) ... Setting up libtasn1-6:amd64 (4.9-4) ... Setting up gnupg-l10n (2.1.15-3) ... Setting up libssl1.0.2:amd64 (1.0.2i-1) ... debconf: unable to initialize frontend: Dialog debconf: (No usable dialog-like program is installed, so the dialog based frontend cannot be used. at /usr/share/perl5/Debconf/FrontEnd/Dialog.pm line 76.) debconf: falling back to frontend: Readline debconf: unable to initialize frontend: Readline debconf: (Can't locate Term/ReadLine.pm in @INC (you may need to install the Term::ReadLine module) (@INC contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.24.1 /usr/local/share/perl/5.24.1 /usr/lib/x86_64-linux-gnu/perl5/5.24 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.24 /usr/share/perl/5.24 /usr/local/lib/site_perl /usr/lib/x86_64-linux-gnu/perl-base .) at /usr/share/perl5/Debconf/FrontEnd/Readline.pm line 7.) debconf: falling back to frontend: Teletype Setting up libgmp10:amd64 (2:6.1.1+dfsg-1) ... Processing triggers for libc-bin (2.24-3) ... Setting up libsqlite3-0:amd64 (3.14.2-1) ... Setting up libffi6:amd64 (3.2.1-6) ... Setting up libsasl2-modules:amd64 (2.1.26.dfsg1-15) ... Setting up libassuan0:amd64 (2.4.3-1) ... Setting up libidn11:amd64 (1.33-1) ... Setting up libreadline6:amd64 (6.3-8+b4) ... Setting up libhogweed4:amd64 (3.2-1) ... Setting up libp11-kit0:amd64 (0.23.2-5) ... Setting up pinentry-curses (0.9.7-5) ... Setting up gnupg-agent (2.1.15-3) ... Setting up gnupg (2.1.15-3) ... Setting up i3-autobuild-keyring (2016.03.28) ... Warning: apt-key should not be used in scripts (called from postinst maintainerscript of the package i3-autobuild-keyring) OK Setting up libgnutls30:amd64 (3.5.4-2) ... Setting up libldap-2.4-2:amd64 (2.4.42+dfsg-2+b2) ... Setting up dirmngr (2.1.15-3) ... Processing triggers for libc-bin (2.24-3) ... root@2b9c08db7f2a:/var/lib/apt/lists# ls -l total 16052 -rw-r--r-- 1 root root 2664 Sep 24 18:06 dl.bintray.com_i3_i3-autobuild-ubuntu_dists_xenial_Release -rw-r--r-- 1 root root 1483 Sep 24 18:06 dl.bintray.com_i3_i3-autobuild-ubuntu_dists_xenial_main_binary-amd64_Packages.lz4 -rw-r--r-- 1 root root 107378 Sep 24 15:37 httpredir.debian.org_debian_dists_experimental_InRelease -rw-r--r-- 1 root root 717770 Sep 24 14:41 httpredir.debian.org_debian_dists_experimental_main_binary-amd64_Packages.lz4 -rw-r--r-- 1 root root 209324 Sep 24 15:40 httpredir.debian.org_debian_dists_unstable_InRelease -rw-r--r-- 1 root root 15379248 Sep 24 14:40 httpredir.debian.org_debian_dists_unstable_main_binary-amd64_Packages.lz4 -rw-r----- 1 root root 0 Sep 24 18:49 lock drwx------ 2 _apt root 4096 Sep 24 18:49 partial root@2b9c08db7f2a:/var/lib/apt/lists# apt-get update Ign:1 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial InRelease Get:2 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial Release [2664 B] Get:4 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial Release.gpg [821 B] Hit:3 http://mirrors.accretive-networks.net/debian unstable InRelease Hit:5 http://mirrors.accretive-networks.net/debian experimental InRelease Fetched 3485 B in 8s (397 B/s) Reading package lists... Done root@2b9c08db7f2a:/var/lib/apt/lists# ls -l total 16052 -rw-r--r-- 1 root root 2664 Sep 24 18:06 dl.bintray.com_i3_i3-autobuild-ubuntu_dists_xenial_Release -rw-r--r-- 1 root root 1483 Sep 24 18:06 dl.bintray.com_i3_i3-autobuild-ubuntu_dists_xenial_main_binary-amd64_Packages.lz4 -rw-r--r-- 1 root root 107378 Sep 24 15:37 httpredir.debian.org_debian_dists_experimental_InRelease -rw-r--r-- 1 root root 717770 Sep 24 14:41 httpredir.debian.org_debian_dists_experimental_main_binary-amd64_Packages.lz4 -rw-r--r-- 1 root root 209324 Sep 24 15:40 httpredir.debian.org_debian_dists_unstable_InRelease -rw-r--r-- 1 root root 15379248 Sep 24 14:40 httpredir.debian.org_debian_dists_unstable_main_binary-amd64_Packages.lz4 -rw-r----- 1 root root 0 Sep 24 18:49 lock drwx------ 2 _apt root 4096 Sep 24 18:50 partial
