[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1099438: marked as done (apt: Apt fails to verify certain repos after switch to sqv in debian testing)



Your message dated Mon, 3 Mar 2025 18:01:13 +0100
with message-id <20250303180017.GA767693@debian.org>
and subject line Re: Bug#1099438: apt: Apt fails to verify certain repos after switch to sqv in debian testing
has caused the Debian Bug report #1099438,
regarding apt: Apt fails to verify certain repos after switch to sqv in debian testing
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1099438: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1099438
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: apt
Version: 2.9.30
Severity: normal
X-Debbugs-Cc: durdin@gmail.com

Dear Maintainer,

After apt switched to sqv in debian testing some time ago, the intel repository
fails to update, failing with:

Err:4 https://apt.repos.intel.com/oneapi all InRelease
  Sub-process /usr/bin/sqv returned an error code (1), error message is: Error:
Malformed Message: Malformed OpenPGP message
...
Warning: An error occurred during the signature verification. The repository is
not updated and the previous index files will be used. GPG error:
https://apt.repos.intel.com/oneapi all InRelease: Sub-process /usr/bin/sqv
returned an error code (1), error message is: Error: Malformed Message:
Malformed OpenPGP message
Warning: Failed to fetch https://apt.repos.intel.com/oneapi/dists/all/InRelease
Sub-process /usr/bin/sqv returned an error code (1), error message is: Error:
Malformed Message: Malformed OpenPGP message

Unfortunatelly I have no idea how to track what exactly is wrong, if the sqv is
the problem, or the apt is passing the wrong key, or the repo itself is
actually ill-configured, or it's my missconfiguration, but I found someone else
already tried to report it to Intel over discussion forums, but I haven't
experienced the same behaviour with any other repositories.

Worth to note, that with previous GnuPG before Sequoia the repository updated
just fine.

BR//durdin



-- Package-specific info:

-- (/etc/apt/preferences present, but not submitted) --


-- (/etc/apt/preferences.d/firefox present, but not submitted) --


-- /etc/apt/preferences.d/intel-repos --


#Package: *
#Pin: release o=Debian,a=experimental
#Pin-Priority: -22 

#Package: *
#Pin: release n=bionic
#Pin-Priority: 102

#Package: *
#Pin: release n=bionic-security
#Pin-Priority: 103

Package: intel-opencl-icd
Pin: origin "repositories.intel.com"
Pin-Priority: 999


-- (/etc/apt/preferences.d/kernel-experimental.disabled present, but not submitted) --


-- (/etc/apt/preferences.d/kernel-unstable.disabled present, but not submitted) --


-- (/etc/apt/preferences.d/prboom-plus present, but not submitted) --


-- (/etc/apt/preferences.d/rocm present, but not submitted) --


-- (/etc/apt/sources.list present, but not submitted) --


-- (/etc/apt/sources.list.d/amdgpu.list present, but not submitted) --


-- (/etc/apt/sources.list.d/conda.list present, but not submitted) --


-- (/etc/apt/sources.list.d/docker.list present, but not submitted) --


-- /etc/apt/sources.list.d/intel.list --

# add signed entry to apt sources and configure the APT client to use Intel repositor

deb [signed-by=/usr/share/keyrings/oneapi-archive-keyring.gpg] https://apt.repos.intel.com/oneapi all main

#deb [arch=amd64 signed-by=/usr/share/keyrings/intel-graphics.gpg] https://repositories.intel.com/graphics/ubuntu focal main

deb [arch=amd64 signed-by=/usr/share/keyrings/intel-graphics.gpg] https://repositories.intel.com/gpu/ubuntu jammy/lts/2350 unified


-- (/etc/apt/sources.list.d/kopia.list present, but not submitted) --


-- (/etc/apt/sources.list.d/microsoft-prod.list present, but not submitted) --


-- (/etc/apt/sources.list.d/rocm.list present, but not submitted) --


-- (/etc/apt/sources.list.d/syncthing.list present, but not submitted) --


-- (/etc/apt/sources.list.d/vscodium.list present, but not submitted) --


-- System Information:
Debian Release: trixie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'stable-security')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.12-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_USER
Locale: LANG=cs_CZ.UTF-8, LC_CTYPE=cs_CZ.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages apt depends on:
ii  adduser                 3.137
ii  base-passwd             3.6.6
ii  debian-archive-keyring  2023.4
ii  libapt-pkg7.0           2.9.30
ii  libc6                   2.40-7
ii  libgcc-s1               14.2.0-16
ii  libseccomp2             2.5.5-2+b1
ii  libssl3t64              3.4.1-1
ii  libstdc++6              14.2.0-16
ii  libsystemd0             257.3-1
ii  sqv                     1.2.1-6+b1

Versions of packages apt recommends:
ii  ca-certificates  20241223

Versions of packages apt suggests:
pn  apt-doc         <none>
ii  dpkg-dev        1.22.15
ii  gnupg           2.2.46-1
ii  powermgmt-base  1.38
ii  synaptic        0.91.5+nmu2

-- no debconf information

--- End Message ---
--- Begin Message ---
On Mon, Mar 03, 2025 at 05:52:40PM +0100, Lukas Durdak wrote:
> Package: apt
> Version: 2.9.30
> Severity: normal
> X-Debbugs-Cc: durdin@gmail.com
> 
> Dear Maintainer,
> 
> After apt switched to sqv in debian testing some time ago, the intel repository
> fails to update, failing with:
> 
> Err:4 https://apt.repos.intel.com/oneapi all InRelease
>   Sub-process /usr/bin/sqv returned an error code (1), error message is: Error:
> Malformed Message: Malformed OpenPGP message
> ...
> Warning: An error occurred during the signature verification. The repository is
> not updated and the previous index files will be used. GPG error:
> https://apt.repos.intel.com/oneapi all InRelease: Sub-process /usr/bin/sqv
> returned an error code (1), error message is: Error: Malformed Message:
> Malformed OpenPGP message
> Warning: Failed to fetch https://apt.repos.intel.com/oneapi/dists/all/InRelease
> Sub-process /usr/bin/sqv returned an error code (1), error message is: Error:
> Malformed Message: Malformed OpenPGP message
> 
> Unfortunatelly I have no idea how to track what exactly is wrong, if the sqv is
> the problem, or the apt is passing the wrong key, or the repo itself is
> actually ill-configured, or it's my missconfiguration, but I found someone else
> already tried to report it to Intel over discussion forums, but I haven't
> experienced the same behaviour with any other repositories.
> 
> Worth to note, that with previous GnuPG before Sequoia the repository updated
> just fine.

Please talk to intel, the repository's InRelease file is not
clearsigned, but simply has appended a detached signature.

-- 
debian developer - deb.li/jak | jak-linux.org - free software dev
ubuntu core developer                              i speak de, en

--- End Message ---

Reply to: