This bug was fixed in the package apt - 1.2.20
---
apt (1.2.20) xenial; urgency=medium
* Microrelease covering fixes of 1.4~rc2 (LP: #1668285)
[ David Kalnischkies ]
* don't install new deps of candidates for kept back pkgs
* keep Release.gpg on untrusted to trusted IMS-Hit
This bug was fixed in the package apt - 1.3.5
---
apt (1.3.5) yakkety; urgency=medium
* Microrelease covering important fixes of 1.4~rc2 (LP: #1668280)
[ David Kalnischkies ]
* don't install new deps of candidates for kept back pkgs
* keep Release.gpg on untrusted to trusted
Verified in yakkety, running the script once with 1.3.4 where it fails,
and once with 1.3.5 where it succeeds.
** Tags removed: verification-needed-yakkety
** Tags added: verification-done-yakkety
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages,
** Tags removed: verification-needed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1657440
Title:
apt won't redownload Release.gpg after inconsistent cache updates made
Hello Andreas, or anyone else affected,
Accepted apt into yakkety-proposed. The package will build now and be
available at https://launchpad.net/ubuntu/+source/apt/1.3.5 in a few
hours, and then in the -proposed repository.
Please help us by testing this new package. See
> So my verdict is that this fix should go through as it allows automated
> tooling to simply do apt-get update retries and self-resolve the missing gpg
> issue.
I agree and will update the tags accordingly.
** Tags removed: verification-needed
** Tags added: verification-done-xenial
I setup a test environment to re-run the recreation script I attached
above while using the fix from xenial-proposed.
What I found was that the fix helps but is not perfect.
While the UCA repo is in the hourly update time window, the apt-get
update can still leave the user in the error case
Hello Andreas, or anyone else affected,
Accepted apt into xenial-proposed. The package will build now and be
available at https://launchpad.net/ubuntu/+source/apt/1.2.20 in a few
hours, and then in the -proposed repository.
Please help us by testing this new package. See
@Lukasz This one has a SRU template in comment #8.
I copied it into the main description, *without* checking if this works
to reproduce the bug.
** Description changed:
# apt --version
apt 1.2.18 (amd64)
xenial
-
- I got myself into a situation where a repository has a Release and
Since this (and a few other) bug is mentioned in the SRU changelog,
please update the description to include the SRU template. There seems
to be a master bug for the SRU, but each bug should *at least* have a
clearly written test-case. Thanks!
--
You received this bug notification because you
** Changed in: apt (Ubuntu Xenial)
Status: Triaged => In Progress
** Changed in: apt (Ubuntu Yakkety)
Status: Triaged => In Progress
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apt in Ubuntu.
Queued for 1.2.20:
https://github.com/Debian/apt/compare/1.2.19...julian-
klode:1.2.y?expand=1
Queued for 1.3.5:
https://github.com/Debian/apt/compare/1.3.4...julian-
klode:1.3.y?expand=1
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which
[Impact]
An apt update of an apt repository that does not use InRelease during the time
it is being updated can cause the gpg file to not be downloaded and updated.
This makes the packages from the repository be unable to be authenticated.
The Ubuntu Cloud Archive is one of the archives that
** Tags added: xenial yakkety
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1657440
Title:
apt won't redownload Release.gpg after inconsistent cache updates made
while UCA
** Changed in: apt (Ubuntu)
Importance: Undecided => Medium
** Changed in: apt (Ubuntu Xenial)
Importance: Undecided => Medium
** Changed in: apt (Ubuntu Yakkety)
Importance: Undecided => Medium
--
You received this bug notification because you are a member of Ubuntu
Touch seeded
** Changed in: apt
Status: Unknown => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1657440
Title:
apt won't redownload Release.gpg after inconsistent
@Samuel Matzek (smatzek) Your comment is far too long, I did not read
that. I only read the first sentence, and thus conclude that you believe
the patch fixes this issue.
If you want to help, provide a *concise* instructions to test this by
editing the bug report using the guidelines specified in
Fixed in 1.4~beta1. This will be cherry picked into the 1.3 and 1.2
(yakkety and xenial) branches in the next weeks.
** Changed in: apt (Ubuntu)
Status: Confirmed => Fix Released
** Also affects: apt (Ubuntu Yakkety)
Importance: Undecided
Status: New
** Also affects: apt
** Bug watch added: Debian Bug tracker #838779
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=838779
** Also affects: apt via
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=838779
Importance: Unknown
Status: Unknown
--
You received this bug notification because you are a
** Summary changed:
- apt won't redownload Release.gpg
+ apt won't redownload Release.gpg after inconsistent cache updates made while
UCA is being updated
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apt in Ubuntu.
This upstream patch needs to be backported to the 1.2 series for Xenial.
If left unfixed in Xenial it opens a timing window every hour with
Ubuntu Cloud Archive where users can fall into the "Some packages could
not be authenticated" state without Release.gpg that is described in the
description.
** Attachment added: "Recreation script"
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1657440/+attachment/4814822/+files/recreate.py
** Changed in: apt (Ubuntu)
Status: Fix Committed => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Touch
That sounds like what this commit describes:
https://anonscm.debian.org/cgit/apt/apt.git/commit/?id=84eec207be35b8c117c430296d4c212b079c00c1
Hence tagged as such as its available in the 1.4 series. Not sure if this
should be backported to 1.2 or not.
** Changed in: apt (Ubuntu)
Status:
The proxy shows no attempts to download Release.gpg, just InRelease:
18/Jan/2017:12:29:02 + 69 y.y.y.y TCP_MISS/404 631 GET
http://ubuntu-cloud.archive.canonical.com/ubuntu/dists/xenial-updates/newton/InRelease
- FIRSTUP_PARENT/x.x.x.x text/html
18/Jan/2017:12:29:02 + 67 y.y.y.y
This was reproduced by paelzer in #ubuntu-devel earlier:
http://paste.ubuntu.com/23821784/
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1657440
Title:
apt won't redownload
25 matches
Mail list logo