http://bugzilla.opensuse.org/show_bug.cgi?id=1194664 Bug ID: 1194664 Summary: ubuntu Release.key install instructions are insufficient Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: BuildService Assignee: screening-team-bugs@suse.de Reporter: jnweiger@gmail.com QA Contact: adrian.schroeter@suse.com Found By: --- Blocker: --- I am following the instructions on https://software.opensuse.org//download.html?project=isv%3AownCloud%3Aserver%3A10.9.0&package=owncloud-complete-files for my Ubuntu 20.04 system: ``` echo 'deb http://download.opensuse.org/repositories/isv:/ownCloud:/server:/10.9.0/Ubun... /' | sudo tee /etc/apt/sources.list.d/isv:ownCloud:server:10.9.0.list curl -fsSL https://download.opensuse.org/repositories/isv:ownCloud:server:10.9.0/Ubuntu... | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/isv_ownCloud_server_10.9.0.gpg > /dev/null sudo apt update sudo apt install owncloud-complete-files ``` This fails to install the package and produces an error message: Err:17 http://download.opensuse.org/repositories/isv:/ownCloud:/server:/10.9.0/Ubun... InRelease The following signatures were invalid: EXPKEYSIG 4ABE1AC7557BEFF9 isv:ownCloud OBS Project isv:ownCloud@build.opensuse.org Get:24 http://archive.ubuntu.com/ubuntu focal-updates/universe amd64 Packages [892 kB] Reading package lists... Done W: GPG error: http://download.opensuse.org/repositories/isv:/ownCloud:/server:/10.9.0/Ubun... InRelease: The following signatures were invalid: EXPKEYSIG 4ABE1AC7557BEFF9 isv:ownCloud OBS Project isv:ownCloud@build.opensuse.org E: The repository 'http://download.opensuse.org/repositories/isv:/ownCloud:/server:/10.9.0/Ubun... InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. ---- In the past, the instructions on software.opensuse.org used `curl .../Release.key | sudo apt-get -` to retrieve the key before installing. That method works fine for me: ``` $ curl -fsSL https://download.opensuse.org/repositories/isv:ownCloud:server:10.9.1/Ubuntu... | sudo apt-key add - $ sudo apt update Get:22 http://download.opensuse.org/repositories/isv:/ownCloud:/server:/10.9.0/Ubun... Packages [887 B] Fetched 225 kB in 2s (91,4 kB/s) Reading package lists... Done $ ``` I suggest to revert to the old trusted way of handling gpg keys. -- You are receiving this mail because: You are on the CC list for the bug.