Package: extrepo
Version: 0.14
Severity: normal
X-Debbugs-Cc: [email protected]

Dear Maintainer,

I did `extrepo enable grafana` and `apt update` and got an expiry error on the 
GPG key. Could you plese update the key (https://apt.grafana.com/gpg.key)

This machine I'm on was upgraded to Trixie yesterday. I had extrepo for 
terraform and tofu previously, but today was the first attempt to use it for 
Grafana - should be a 'fresh' setup.



The error from apt update:

```
Err:4 https://apt.grafana.com stable InRelease
  Sub-process /usr/bin/sqv returned an error code (1), error message is: 
Signing key on B53AE77BADB630A683046005963FA27710458545 is bad:            The 
primary key is not live   because: Expired on 2025-08-23T16:33:45Z
```



The key in the extrepo keys/ dir expired Aug 23:

```
$ gpg /var/lib/extrepo/keys/grafana.asc
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa2048 2017-01-24 [SC]
      4E40DDF6D76E284A4A6780E48C8C34C524098CB6
uid           Grafana <[email protected]>
sub   rsa2048 2017-01-24 [E]
pub   rsa3072 2023-01-06 [SC] [expired: 2025-01-05]
      0E22EB88E39E12277A7760AE9E439B102CF3C0C6
uid           Grafana Labs <[email protected]>
sub   rsa3072 2023-01-06 [E] [expired: 2025-01-05]
pub   rsa3072 2023-08-24 [SC] [expired: 2025-08-23]
      B53AE77BADB630A683046005963FA27710458545
uid           Grafana Labs <[email protected]>
sub   rsa3072 2023-08-24 [E] [expired: 2025-08-23]
```



The key pulled from the Grafana apt repo is current, expiring in 2027:

```
$ wget https://apt.grafana.com/gpg.key
--2025-08-26 15:09:53--  https://apt.grafana.com/gpg.key
Resolving apt.grafana.com (apt.grafana.com)... 151.101.194.217, 151.101.66.217, 
151.101.2.217, ...
--- snip long boring lines ---
2025-08-26 15:09:53 (24.5 MB/s) - ‘gpg.key’ saved [2460/2460]

$ gpg gpg.key
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa3072 2023-08-24 [SC] [expires: 2027-08-22]
      B53AE77BADB630A683046005963FA27710458545
uid           Grafana Labs <[email protected]>
sub   rsa3072 2023-08-24 [E] [expires: 2027-08-22]
```

Cheers,

Paul


-- System Information:
Debian Release: 13.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.41+deb13-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages extrepo depends on:
ii  gpgv                       2.4.7-21+b3
ii  libcryptx-perl             0.085-1
ii  libdpkg-perl               1.22.21
ii  libipc-system-simple-perl  1.30-2
ii  libwww-perl                6.78-1
ii  libyaml-libyaml-perl       0.903.0+ds-1
ii  perl                       5.40.1-6

Versions of packages extrepo recommends:
ii  extrepo-offline-data  1.0.4

extrepo suggests no packages.

-- no debconf information

Reply via email to