NginxProxyManager - fail APT broken package openresty

[lubbertkramer]

✅ Have you read and understood the above guidelines?

yes

🔎 Did you run the script with verbose mode enabled?

Yes, verbose mode was enabled and the output is included below

📜 What is the name of the script you are using?

nginxproxymanager

📂 What was the exact command used to execute the script?

bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/cloudflare-ddns.sh)"

⚙️ What settings are you using?

• Default Settings
• Advanced Settings

🖥️ Which Linux distribution are you using?

Debian 13

📈 Which Proxmox version are you on?

9.1.4

📝 Provide a clear and concise description of the issue.

⚙️ Using User Defaults (default.vars) on node pve1
💡 PVE Version 9.1.4 (Kernel: 6.17.4-2-pve)
🆔 Container ID: 100
🖥️ Operating System: debian (13)
📦 Container Type: Unprivileged
💾 Disk Size: 8 GB
🧠 CPU Cores: 2
🛠️ RAM Size: 2048 MiB
🚀 Creating a Nginx Proxy Manager LXC using the above default settings

✔️ Storage space validated
✔️ Storage local (Free: 817.8GB Used: 1.4GB) [Template]
✔️ Storage local-zfs (Free: 817.8GB Used: 71.9GB) [Container]
✔️ Storage 'local-zfs' (zfspool) validated
✔️ Template storage 'local' validated
✔️ Cluster is quorate
✔️ Template search completed
✔️ Template debian-13-standard_13.1-2_amd64.tar.zst [local]
✔️ LXC Container 100 was successfully created.
✔️ Started LXC Container
✔️ Network in LXC is reachable (ping)
✔️ Customized LXC Container
✔️ Set up Container OS
✔️ Network Connected: 192.168.1.226
✔️ IPv4 Internet Connected
✖️ IPv6 Internet Not Connected
✔️ Git DNS: github.com:(✔️ ) raw.githubusercontent.com:(✔️ ) api.github.com:(✔️ ) git.community-scripts.org:(✔️ )
✔️ Updated Container OS
✔️ Installed Dependencies
✔️ Installed Python Dependencies
✔️ Set up Certbot
✖️ in line 51: exit code 100 (APT: Package manager error (broken packages / dependency problems))
→ apt update
--- Last 10 lines of silent log ---

Hit:1 http://deb.debian.org/debian trixie InRelease
Hit:2 http://deb.debian.org/debian trixie-updates InRelease
Hit:3 http://security.debian.org trixie-security InRelease
Get:4 http://openresty.org/package/debian bookworm InRelease [2,596 B]
Err:4 http://openresty.org/package/debian bookworm InRelease
Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on E52218E7087897DC6DEA6D6D97DB7443D5EDEB74 is not bound: No binding signature at time 2025-12-13T01:36:05Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
Reading package lists...
Warning: OpenPGP signature verification failed: http://openresty.org/package/debian bookworm InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on E52218E7087897DC6DEA6D6D97DB7443D5EDEB74 is not bound: No binding signature at time 2025-12-13T01:36:05Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
Error: The repository 'http://openresty.org/package/debian bookworm InRelease' is not signed.

📋 View full log (853 lines): /root/.install-9cf7828d.log
✖️ Installation failed in container 100 (exit code: 100)

🔄 Steps to reproduce the issue.

Install with
bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/cloudflare-ddns.sh)"

on Proxmox 9.1.4 results in the following error

❌ Paste the full error output (if available).

--- Last 10 lines of silent log ---

Hit:1 http://deb.debian.org/debian trixie InRelease
Hit:2 http://deb.debian.org/debian trixie-updates InRelease
Hit:3 http://security.debian.org trixie-security InRelease
Get:4 http://openresty.org/package/debian bookworm InRelease [2,596 B]
Err:4 http://openresty.org/package/debian bookworm InRelease
Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on E52218E7087897DC6DEA6D6D97DB7443D5EDEB74 is not bound: No binding signature at time 2025-12-13T01:36:05Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
Reading package lists...
Warning: OpenPGP signature verification failed: http://openresty.org/package/debian bookworm InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on E52218E7087897DC6DEA6D6D97DB7443D5EDEB74 is not bound: No binding signature at time 2025-12-13T01:36:05Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
Error: The repository 'http://openresty.org/package/debian bookworm InRelease' is not signed.

📋 View full log (853 lines): /root/.install-9cf7828d.log
✖️ Installation failed in container 100 (exit code: 100)

🖼️ Additional context (optional).

No response

[phellarv]

Same error on ProxMox 8.4.16

[MickLesk]

Report it there:
https://github.com/openresty/openresty

[e4glenight]

Same using a live LXC when apt-get update :

root@nginxproxymanager:~# apt-get update Hit:1 http://deb.debian.org/debian trixie InRelease Hit:2 http://security.debian.org trixie-security InRelease Hit:3 http://openresty.org/package/debian bookworm InRelease Err:3 http://openresty.org/package/debian bookworm InRelease Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on E52218E7087897DC6DEA6D6D97DB7443D5EDEB74 is not bound: No binding signature at time 2025-12-13T01:36:05Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z Hit:4 http://deb.debian.org/debian trixie-updates InRelease Hit:5 https://deb.nodesource.com/node_22.x nodistro InRelease Err:5 https://deb.nodesource.com/node_22.x nodistro InRelease Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 6F71F525282841EEDAF851B42F59B5F99B1BE0B4 is not bound: No binding signature at time 2026-01-23T18:12:38Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z Reading package lists... Done W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. OpenPGP signature verification failed: http://openresty.org/package/debian bookworm InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on E52218E7087897DC6DEA6D6D97DB7443D5EDEB74 is not bound: No binding signature at time 2025-12-13T01:36:05Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. OpenPGP signature verification failed: https://deb.nodesource.com/node_22.x nodistro InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 6F71F525282841EEDAF851B42F59B5F99B1BE0B4 is not bound: No binding signature at time 2026-01-23T18:12:38Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z W: Failed to fetch https://deb.nodesource.com/node_22.x/dists/nodistro/InRelease Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 6F71F525282841EEDAF851B42F59B5F99B1BE0B4 is not bound: No binding signature at time 2026-01-23T18:12:38Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z W: Failed to fetch http://openresty.org/package/debian/dists/bookworm/InRelease Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on E52218E7087897DC6DEA6D6D97DB7443D5EDEB74 is not bound: No binding signature at time 2025-12-13T01:36:05Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z W: Some index files failed to download. They have been ignored, or old ones used instead.

Hope they will update soon.

[MickLesk]

If anyone create an Upstream issue 🤷🏼‍♂️😀

[coltc50]

Same here...

[jodur]

I have exactly the same problem. I also tried an alternative install with a apline LXC container, but also stalled at openrestly install.
Problem is that the library is not updated for new OS.
see: openresty/openresty#1094

I also found a post of someone who compiled oprestly to work on Debian trixie:
https://ramon.vanraaij.eu/nginx-proxy-manager-on-debian-trixie-the-upgrade-survival-guide/

[MickLesk]

Thats wrong, we use the bookworm Repo of openresty, Not Trixie. Its clearly an gpg issue.

[e4glenight]

i've got the same problems with node_22. is the same issues you think ?

[MickLesk]

For Node gpg we have a Script in Discussions.

[e4glenight]

For Node gpg we have a Script in Discussions.

so when its ready you can tell me here ? :)

[MickLesk]

search in discussion -> guide. im on mobile