Bug#838779: Release.gpg not downloaded unless Release is deleted
Package: apt
Version: 1.3
Severity: normal
I tested this in Debian stable (with apt 1.0.9.8.3) and Debian
testing/experimental (with apt 1.3~rc4 and 1.3, respectively). In Debian
stable, this works as expected, but in Debian testing and experimental,
I run into the bug. See the bottom of this report for a full command
log.
When adding the http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial
repository, the Release and main_binary-amd64_Packages.lz4 files are
downloaded and stored in /var/lib/apt/lists. Release.gpg is discarded
because the necessary public key to verify the signature is not yet
installed.
After installing i3-autobuild-keyring, which adds the public key using
apt-key add, the signature can successfully be verified (apt-get update
no longer prints an error).
However, even though Release.gpg is downloaded when running apt-get
update, Release.gpg is not stored in /var/lib/apt/lists!
Only when I delete the Release file, apt-get update will store the
corresponding Release.gpg in /var/lib/apt/lists.
This seems like a regression to me, and requires an extra step in the
instructions for our users on how to enable our repository.
Am I misunderstanding something, or is this actually a bug in apt?
Steps to reproduce:
$ docker run -t -i debian:experimental /bin/bash
root@2b9c08db7f2a:/# apt-get update
Get:1 http://mirrors.kernel.org/debian unstable InRelease [209 kB]
Get:2 http://mirrors.kernel.org/debian experimental InRelease [107 kB]
Get:3 http://mirrors.kernel.org/debian unstable/main amd64 Packages [9673 kB]
Get:4 http://mirrors.kernel.org/debian experimental/main amd64 Packages [356 kB]
Fetched 10.3 MB in 3s (2902 kB/s)
Reading package lists... Done
root@2b9c08db7f2a:/# echo 'deb http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial main' > /etc/apt/sources.list.d/i3-autobuild.list
root@2b9c08db7f2a:/# cd /var/lib/apt/lists
root@2b9c08db7f2a:/var/lib/apt/lists# ls -l
total 16044
-rw-r--r-- 1 root root 107378 Sep 24 15:37 httpredir.debian.org_debian_dists_experimental_InRelease
-rw-r--r-- 1 root root 717770 Sep 24 14:41 httpredir.debian.org_debian_dists_experimental_main_binary-amd64_Packages.lz4
-rw-r--r-- 1 root root 209324 Sep 24 15:40 httpredir.debian.org_debian_dists_unstable_InRelease
-rw-r--r-- 1 root root 15379248 Sep 24 14:40 httpredir.debian.org_debian_dists_unstable_main_binary-amd64_Packages.lz4
-rw-r----- 1 root root 0 Sep 24 18:49 lock
drwx------ 2 _apt root 4096 Sep 24 18:49 partial
root@2b9c08db7f2a:/var/lib/apt/lists# apt-get update
Ign:1 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial InRelease
Get:3 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial Release [2664 B]
Hit:2 http://mirrors.accretive-networks.net/debian unstable InRelease
Get:5 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial Release.gpg [821 B]
Hit:4 http://mirrors.accretive-networks.net/debian experimental InRelease
Ign:5 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial Release.gpg
Get:6 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial/main amd64 Packages [1044 B]
Fetched 4529 B in 0s (6117 B/s)
Reading package lists... Done
W: GPG error: http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 070D94CCBE1DB1F1
W: The repository 'http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial Release' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
root@2b9c08db7f2a:/var/lib/apt/lists# ls -l
total 16052
-rw-r--r-- 1 root root 2664 Sep 24 18:06 dl.bintray.com_i3_i3-autobuild-ubuntu_dists_xenial_Release
-rw-r--r-- 1 root root 1483 Sep 24 18:06 dl.bintray.com_i3_i3-autobuild-ubuntu_dists_xenial_main_binary-amd64_Packages.lz4
-rw-r--r-- 1 root root 107378 Sep 24 15:37 httpredir.debian.org_debian_dists_experimental_InRelease
-rw-r--r-- 1 root root 717770 Sep 24 14:41 httpredir.debian.org_debian_dists_experimental_main_binary-amd64_Packages.lz4
-rw-r--r-- 1 root root 209324 Sep 24 15:40 httpredir.debian.org_debian_dists_unstable_InRelease
-rw-r--r-- 1 root root 15379248 Sep 24 14:40 httpredir.debian.org_debian_dists_unstable_main_binary-amd64_Packages.lz4
-rw-r----- 1 root root 0 Sep 24 18:49 lock
drwx------ 2 _apt root 4096 Sep 24 18:49 partial
root@2b9c08db7f2a:/var/lib/apt/lists# apt-get install --allow-unauthenticated i3-autobuild-keyring
Reading package lists... Done
Building dependency tree... Done
The following additional packages will be installed:
dirmngr gnupg gnupg-agent gnupg-l10n libassuan0 libffi6 libgmp10 libgnutls30 libhogweed4 libidn11
libksba8 libldap-2.4-2 libnettle6 libnpth0 libp11-kit0 libreadline6 libsasl2-2 libsasl2-modules
libsasl2-modules-db libsqlite3-0 libssl1.0.2 libtasn1-6 pinentry-curses readline-common
Suggested packages:
tor parcimonie xloadimage gnutls-bin libsasl2-modules-otp libsasl2-modules-ldap libsasl2-modules-sql
libsasl2-modules-gssapi-mit | libsasl2-modules-gssapi-heimdal pinentry-doc readline-doc
The following NEW packages will be installed:
dirmngr gnupg gnupg-agent gnupg-l10n i3-autobuild-keyring libassuan0 libffi6 libgmp10 libgnutls30
libhogweed4 libidn11 libksba8 libldap-2.4-2 libnettle6 libnpth0 libp11-kit0 libreadline6 libsasl2-2
libsasl2-modules libsasl2-modules-db libsqlite3-0 libssl1.0.2 libtasn1-6 pinentry-curses
readline-common
0 upgraded, 25 newly installed, 0 to remove and 0 not upgraded.
Need to get 6953 kB of archives.
After this operation, 19.4 MB of additional disk space will be used.
Do you want to continue? [Y/n]
WARNING: The following packages cannot be authenticated!
i3-autobuild-keyring
Authentication warning overridden.
Get:1 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial/main amd64 i3-autobuild-keyring all 2016.03.28 [6320 B]
Get:2 http://mirrors.accretive-networks.net/debian unstable/main amd64 libassuan0 amd64 2.4.3-1 [42.7 kB]
Get:3 http://mirrors.accretive-networks.net/debian unstable/main amd64 pinentry-curses amd64 0.9.7-5 [45.5 kB]
Get:4 http://mirrors.accretive-networks.net/debian unstable/main amd64 libnpth0 amd64 1.2-3 [13.7 kB]
Get:5 http://mirrors.accretive-networks.net/debian unstable/main amd64 readline-common all 6.3-8 [57.7 kB]
Get:6 http://mirrors.accretive-networks.net/debian unstable/main amd64 libreadline6 amd64 6.3-8+b4 [142 kB]
Get:7 http://mirrors.accretive-networks.net/debian unstable/main amd64 gnupg-agent amd64 2.1.15-3 [411 kB]
Get:8 http://mirrors.accretive-networks.net/debian unstable/main amd64 libksba8 amd64 1.3.5-2 [99.7 kB]
Get:9 http://mirrors.accretive-networks.net/debian unstable/main amd64 libsqlite3-0 amd64 3.14.2-1 [559 kB]
Get:10 http://mirrors.accretive-networks.net/debian unstable/main amd64 gnupg amd64 2.1.15-3 [962 kB]
Get:11 http://mirrors.accretive-networks.net/debian unstable/main amd64 libssl1.0.2 amd64 1.0.2i-1 [1291 kB]
Get:12 http://mirrors.accretive-networks.net/debian unstable/main amd64 libgmp10 amd64 2:6.1.1+dfsg-1 [254 kB]
Get:13 http://mirrors.accretive-networks.net/debian unstable/main amd64 libnettle6 amd64 3.2-1 [191 kB]
Get:14 http://mirrors.accretive-networks.net/debian unstable/main amd64 libhogweed4 amd64 3.2-1 [136 kB]
Get:15 http://mirrors.accretive-networks.net/debian unstable/main amd64 libidn11 amd64 1.33-1 [115 kB]
Get:16 http://mirrors.accretive-networks.net/debian unstable/main amd64 libffi6 amd64 3.2.1-6 [20.4 kB]
Get:17 http://mirrors.accretive-networks.net/debian unstable/main amd64 libp11-kit0 amd64 0.23.2-5 [111 kB]
Get:18 http://mirrors.accretive-networks.net/debian unstable/main amd64 libtasn1-6 amd64 4.9-4 [50.0 kB]
Get:19 http://mirrors.accretive-networks.net/debian unstable/main amd64 libgnutls30 amd64 3.5.4-2 [810 kB]
Get:20 http://mirrors.accretive-networks.net/debian unstable/main amd64 libsasl2-modules-db amd64 2.1.26.dfsg1-15 [66.9 kB]
Get:21 http://mirrors.accretive-networks.net/debian unstable/main amd64 libsasl2-2 amd64 2.1.26.dfsg1-15 [103 kB]
Get:22 http://mirrors.accretive-networks.net/debian unstable/main amd64 libldap-2.4-2 amd64 2.4.42+dfsg-2+b2 [222 kB]
Get:23 http://mirrors.accretive-networks.net/debian unstable/main amd64 dirmngr amd64 2.1.15-3 [401 kB]
Get:24 http://mirrors.accretive-networks.net/debian unstable/main amd64 libsasl2-modules amd64 2.1.26.dfsg1-15 [101 kB]
Get:25 http://mirrors.accretive-networks.net/debian unstable/main amd64 gnupg-l10n all 2.1.15-3 [741 kB]
Fetched 6953 kB in 4s (1698 kB/s)
debconf: delaying package configuration, since apt-utils is not installed
Selecting previously unselected package libassuan0:amd64.
(Reading database ... 6471 files and directories currently installed.)
Preparing to unpack .../00-libassuan0_2.4.3-1_amd64.deb ...
Unpacking libassuan0:amd64 (2.4.3-1) ...
Selecting previously unselected package pinentry-curses.
Preparing to unpack .../01-pinentry-curses_0.9.7-5_amd64.deb ...
Unpacking pinentry-curses (0.9.7-5) ...
Selecting previously unselected package libnpth0:amd64.
Preparing to unpack .../02-libnpth0_1.2-3_amd64.deb ...
Unpacking libnpth0:amd64 (1.2-3) ...
Selecting previously unselected package readline-common.
Preparing to unpack .../03-readline-common_6.3-8_all.deb ...
Unpacking readline-common (6.3-8) ...
Selecting previously unselected package libreadline6:amd64.
Preparing to unpack .../04-libreadline6_6.3-8+b4_amd64.deb ...
Unpacking libreadline6:amd64 (6.3-8+b4) ...
Selecting previously unselected package gnupg-agent.
Preparing to unpack .../05-gnupg-agent_2.1.15-3_amd64.deb ...
Unpacking gnupg-agent (2.1.15-3) ...
Selecting previously unselected package libksba8:amd64.
Preparing to unpack .../06-libksba8_1.3.5-2_amd64.deb ...
Unpacking libksba8:amd64 (1.3.5-2) ...
Selecting previously unselected package libsqlite3-0:amd64.
Preparing to unpack .../07-libsqlite3-0_3.14.2-1_amd64.deb ...
Unpacking libsqlite3-0:amd64 (3.14.2-1) ...
Selecting previously unselected package gnupg.
Preparing to unpack .../08-gnupg_2.1.15-3_amd64.deb ...
Unpacking gnupg (2.1.15-3) ...
Selecting previously unselected package i3-autobuild-keyring.
Preparing to unpack .../09-i3-autobuild-keyring_2016.03.28_all.deb ...
Unpacking i3-autobuild-keyring (2016.03.28) ...
Selecting previously unselected package libssl1.0.2:amd64.
Preparing to unpack .../10-libssl1.0.2_1.0.2i-1_amd64.deb ...
Unpacking libssl1.0.2:amd64 (1.0.2i-1) ...
Selecting previously unselected package libgmp10:amd64.
Preparing to unpack .../11-libgmp10_2%3a6.1.1+dfsg-1_amd64.deb ...
Unpacking libgmp10:amd64 (2:6.1.1+dfsg-1) ...
Selecting previously unselected package libnettle6:amd64.
Preparing to unpack .../12-libnettle6_3.2-1_amd64.deb ...
Unpacking libnettle6:amd64 (3.2-1) ...
Selecting previously unselected package libhogweed4:amd64.
Preparing to unpack .../13-libhogweed4_3.2-1_amd64.deb ...
Unpacking libhogweed4:amd64 (3.2-1) ...
Selecting previously unselected package libidn11:amd64.
Preparing to unpack .../14-libidn11_1.33-1_amd64.deb ...
Unpacking libidn11:amd64 (1.33-1) ...
Selecting previously unselected package libffi6:amd64.
Preparing to unpack .../15-libffi6_3.2.1-6_amd64.deb ...
Unpacking libffi6:amd64 (3.2.1-6) ...
Selecting previously unselected package libp11-kit0:amd64.
Preparing to unpack .../16-libp11-kit0_0.23.2-5_amd64.deb ...
Unpacking libp11-kit0:amd64 (0.23.2-5) ...
Selecting previously unselected package libtasn1-6:amd64.
Preparing to unpack .../17-libtasn1-6_4.9-4_amd64.deb ...
Unpacking libtasn1-6:amd64 (4.9-4) ...
Selecting previously unselected package libgnutls30:amd64.
Preparing to unpack .../18-libgnutls30_3.5.4-2_amd64.deb ...
Unpacking libgnutls30:amd64 (3.5.4-2) ...
Selecting previously unselected package libsasl2-modules-db:amd64.
Preparing to unpack .../19-libsasl2-modules-db_2.1.26.dfsg1-15_amd64.deb ...
Unpacking libsasl2-modules-db:amd64 (2.1.26.dfsg1-15) ...
Selecting previously unselected package libsasl2-2:amd64.
Preparing to unpack .../20-libsasl2-2_2.1.26.dfsg1-15_amd64.deb ...
Unpacking libsasl2-2:amd64 (2.1.26.dfsg1-15) ...
Selecting previously unselected package libldap-2.4-2:amd64.
Preparing to unpack .../21-libldap-2.4-2_2.4.42+dfsg-2+b2_amd64.deb ...
Unpacking libldap-2.4-2:amd64 (2.4.42+dfsg-2+b2) ...
Selecting previously unselected package dirmngr.
Preparing to unpack .../22-dirmngr_2.1.15-3_amd64.deb ...
Unpacking dirmngr (2.1.15-3) ...
Selecting previously unselected package libsasl2-modules:amd64.
Preparing to unpack .../23-libsasl2-modules_2.1.26.dfsg1-15_amd64.deb ...
Unpacking libsasl2-modules:amd64 (2.1.26.dfsg1-15) ...
Selecting previously unselected package gnupg-l10n.
Preparing to unpack .../24-gnupg-l10n_2.1.15-3_all.deb ...
Unpacking gnupg-l10n (2.1.15-3) ...
Setting up libnpth0:amd64 (1.2-3) ...
Setting up readline-common (6.3-8) ...
Setting up libnettle6:amd64 (3.2-1) ...
Setting up libsasl2-modules-db:amd64 (2.1.26.dfsg1-15) ...
Setting up libsasl2-2:amd64 (2.1.26.dfsg1-15) ...
Setting up libksba8:amd64 (1.3.5-2) ...
Setting up libtasn1-6:amd64 (4.9-4) ...
Setting up gnupg-l10n (2.1.15-3) ...
Setting up libssl1.0.2:amd64 (1.0.2i-1) ...
debconf: unable to initialize frontend: Dialog
debconf: (No usable dialog-like program is installed, so the dialog based frontend cannot be used. at /usr/share/perl5/Debconf/FrontEnd/Dialog.pm line 76.)
debconf: falling back to frontend: Readline
debconf: unable to initialize frontend: Readline
debconf: (Can't locate Term/ReadLine.pm in @INC (you may need to install the Term::ReadLine module) (@INC contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.24.1 /usr/local/share/perl/5.24.1 /usr/lib/x86_64-linux-gnu/perl5/5.24 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.24 /usr/share/perl/5.24 /usr/local/lib/site_perl /usr/lib/x86_64-linux-gnu/perl-base .) at /usr/share/perl5/Debconf/FrontEnd/Readline.pm line 7.)
debconf: falling back to frontend: Teletype
Setting up libgmp10:amd64 (2:6.1.1+dfsg-1) ...
Processing triggers for libc-bin (2.24-3) ...
Setting up libsqlite3-0:amd64 (3.14.2-1) ...
Setting up libffi6:amd64 (3.2.1-6) ...
Setting up libsasl2-modules:amd64 (2.1.26.dfsg1-15) ...
Setting up libassuan0:amd64 (2.4.3-1) ...
Setting up libidn11:amd64 (1.33-1) ...
Setting up libreadline6:amd64 (6.3-8+b4) ...
Setting up libhogweed4:amd64 (3.2-1) ...
Setting up libp11-kit0:amd64 (0.23.2-5) ...
Setting up pinentry-curses (0.9.7-5) ...
Setting up gnupg-agent (2.1.15-3) ...
Setting up gnupg (2.1.15-3) ...
Setting up i3-autobuild-keyring (2016.03.28) ...
Warning: apt-key should not be used in scripts (called from postinst maintainerscript of the package i3-autobuild-keyring)
OK
Setting up libgnutls30:amd64 (3.5.4-2) ...
Setting up libldap-2.4-2:amd64 (2.4.42+dfsg-2+b2) ...
Setting up dirmngr (2.1.15-3) ...
Processing triggers for libc-bin (2.24-3) ...
root@2b9c08db7f2a:/var/lib/apt/lists# ls -l
total 16052
-rw-r--r-- 1 root root 2664 Sep 24 18:06 dl.bintray.com_i3_i3-autobuild-ubuntu_dists_xenial_Release
-rw-r--r-- 1 root root 1483 Sep 24 18:06 dl.bintray.com_i3_i3-autobuild-ubuntu_dists_xenial_main_binary-amd64_Packages.lz4
-rw-r--r-- 1 root root 107378 Sep 24 15:37 httpredir.debian.org_debian_dists_experimental_InRelease
-rw-r--r-- 1 root root 717770 Sep 24 14:41 httpredir.debian.org_debian_dists_experimental_main_binary-amd64_Packages.lz4
-rw-r--r-- 1 root root 209324 Sep 24 15:40 httpredir.debian.org_debian_dists_unstable_InRelease
-rw-r--r-- 1 root root 15379248 Sep 24 14:40 httpredir.debian.org_debian_dists_unstable_main_binary-amd64_Packages.lz4
-rw-r----- 1 root root 0 Sep 24 18:49 lock
drwx------ 2 _apt root 4096 Sep 24 18:49 partial
root@2b9c08db7f2a:/var/lib/apt/lists# apt-get update
Ign:1 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial InRelease
Get:2 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial Release [2664 B]
Get:4 http://dl.bintray.com/i3/i3-autobuild-ubuntu xenial Release.gpg [821 B]
Hit:3 http://mirrors.accretive-networks.net/debian unstable InRelease
Hit:5 http://mirrors.accretive-networks.net/debian experimental InRelease
Fetched 3485 B in 8s (397 B/s)
Reading package lists... Done
root@2b9c08db7f2a:/var/lib/apt/lists# ls -l
total 16052
-rw-r--r-- 1 root root 2664 Sep 24 18:06 dl.bintray.com_i3_i3-autobuild-ubuntu_dists_xenial_Release
-rw-r--r-- 1 root root 1483 Sep 24 18:06 dl.bintray.com_i3_i3-autobuild-ubuntu_dists_xenial_main_binary-amd64_Packages.lz4
-rw-r--r-- 1 root root 107378 Sep 24 15:37 httpredir.debian.org_debian_dists_experimental_InRelease
-rw-r--r-- 1 root root 717770 Sep 24 14:41 httpredir.debian.org_debian_dists_experimental_main_binary-amd64_Packages.lz4
-rw-r--r-- 1 root root 209324 Sep 24 15:40 httpredir.debian.org_debian_dists_unstable_InRelease
-rw-r--r-- 1 root root 15379248 Sep 24 14:40 httpredir.debian.org_debian_dists_unstable_main_binary-amd64_Packages.lz4
-rw-r----- 1 root root 0 Sep 24 18:49 lock
drwx------ 2 _apt root 4096 Sep 24 18:50 partial
Reply to: