Problem upgrading packages in Ubuntu 14.04.3

kaplan71 · 11-01-2016, 12:37 PM

Hello --

I have been unable to do any upgrade to one of our servers running the Ubuntu 14.04.3 distribution. The initial attempt was made through the Webmin utility. The packages in question, 212 in total, were selected and while the download appeared to be successful, the following error message appeared on-screen:

Quote:

Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

I then went to the command line, and as root, I ran the following:

Quote:

apt-get update --fix-missing

The error messages that I encountered were as follows:

Quote:

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://free.nchc.org.tw drbl Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 667857D045599AFD

W: Failed to fetch http://free.nchc.org.tw/drbl-core/dists/drbl/Release

W: Some index files failed to download. They have been ignored, or old ones used instead.
W: Duplicate sources.list entry http://us.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages (/var/lib/apt/lists/us.archive.ubuntu.com_ubuntu_dists_trusty_main_binary-amd64_Packages)
W: Duplicate sources.list entry http://us.archive.ubuntu.com/ubuntu/ trusty/restricted amd64 Packages (/var/lib/apt/lists/us.archive.ubuntu.com_ubuntu_dists_trusty_restricted_binary-amd64_Packages)
W: Duplicate sources.list entry http://us.archive.ubuntu.com/ubuntu/ trusty/main i386 Packages (/var/lib/apt/lists/us.archive.ubuntu.com_ubuntu_dists_trusty_main_binary-i386_Packages)
W: Duplicate sources.list entry http://us.archive.ubuntu.com/ubuntu/ trusty/restricted i386 Packages (/var/lib/apt/lists/us.archive.ubuntu.com_ubuntu_dists_trusty_restricted_binary-i386_Packages)

I did a quick check in several of the files, but when I did a search for the entry that was listed in the error messages, it was not found.

How can I correct this situation, so I can proceed with the upgrade of the packages?

Thanks.

AlucardZero · 11-01-2016, 01:23 PM

The "Duplicate sources.list" errors should be ignorable
The "NO_PUBKEY 667857D045599AFD" is preventing you from using the NCHC repo, at least. There are at least 50,000 Google results for "NO_PUBKEY", but here's another:
Assuming you trust that key 667857D045599AFD is owned by NCHC (their web site should really securely provide you with these directions), run:

Code:

sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 667857D045599AFD

and try apt-get update again

273 · 11-01-2016, 01:37 PM

You added some kind of PPA or another repository. I think synaptic allows selection of repositories? Otherwise, look in the Ubuntu Software Shop for the ability to select repositories.
Looks like you've a rogue repository you added for "some cool app" but it's inm the apt.d scheme.

kaplan71 · 11-01-2016, 01:39 PM

Hello --

Thank-you for your reply. I ran the apt-key command, and the output was the following:

Quote:

Executing: gpg --ignore-time-conflict --no-options --no-default-keyring --homedir /tmp/tmp.uO7HI0LVsT --no-auto-check-trustdb --trust-model always --keyring /etc/apt/trusted.gpg --primary-keyring /etc/apt/trusted.gpg --keyserver keyserver.ubuntu.com --recv-keys 667857D045599AFD
gpg: requesting key 45599AFD from hkp server keyserver.ubuntu.com
gpg: key 45599AFD: "DRBL Project (Diskless Remote Boot in Linux) <drbl@nchc.org.tw>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1

I then ran the apt-get update command, and the following error messages appeared on-screen:

Quote:

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://free.nchc.org.tw drbl Release: The following signatures were invalid: BADSIG 667857D045599AFD DRBL Project (Diskless Remote Boot in Linux) <drbl@nchc.org.tw>

W: Failed to fetch http://free.nchc.org.tw/drbl-core/dists/drbl/Release

I checked the /var/lib/apt/lists directory, and there is folder with the name 'partial' at that location. The files listed below were listed in this folder:

Quote:

free.nchc.org.tw_drbl-core_dists_drbl_Release
free.nchc.org.tw_drbl-core_dists_drbl_Release.gpg
us.archive.ubuntu.com_ubuntu_dists_trusty-updates_InRelease.reverify

Since the nchc site appears to be the culprit, can I simply removed the two references to the site from the partial folder, or should I remove the folder entirely?

273 · 11-01-2016, 01:43 PM

I think your best bet really is firing up synaptic. Failing that edit sources.list and anything under /etc/apt and ensure they only contain what they ought.

kaplan71 · 11-01-2016, 02:34 PM

Hello --

Thank-you for the feedback. I went to the /etc/apt/sources.list file, and commented out the references to the drbl webpages. Once that was done, the upgrade completed successfully.