ubuntu 20.04 can't install esl-erlang due to a GPG signing error

[brrygrdn]

This issue is similar to one my colleague filed last year #14

I've had issues installing esl-erlang, due to an invalid GPG signature:

#7 2.293 W: GPG error: http://binaries.erlang-solutions.com/debian focal Release: The following signatures were invalid: BADSIG D208507CA14F4FCA Erlang Solutions Ltd. <packages@erlang-solutions.com>
#7 2.293 E: The repository 'http://binaries.erlang-solutions.com/debian focal Release' is not signed

This is a minimal Dockerfile which reproduces the problem:

FROM ubuntu:20.04

RUN apt-get update \
  && apt-get install -y build-essential ca-certificates curl gnupg2

RUN curl -sSLO https://packages.erlang-solutions.com/erlang-solutions_2.0_all.deb \
  && dpkg -i erlang-solutions_2.0_all.deb \
  && apt-get update \
  && apt-get install -y esl-erlang

I was able to build this successfully at approximately 2023-02-23 14:45, it's only been in the last hour it has started to fail.

[mashayev]

Got the same error:

root@929636ababf8:/# apt-get update
Hit:1 http://deb.debian.org/debian buster InRelease
Ign:2 https://packages.erlang-solutions.com/debian buster InRelease
Hit:3 http://deb.debian.org/debian-security buster/updates InRelease
Hit:4 http://deb.debian.org/debian buster-updates InRelease
Get:5 https://packages.erlang-solutions.com/debian buster Release [4572 B]
Get:6 https://packages.erlang-solutions.com/debian buster Release.gpg [833 B]
Ign:6 https://packages.erlang-solutions.com/debian buster Release.gpg
Reading package lists... Done
W: GPG error: https://packages.erlang-solutions.com/debian buster Release: The following signatures were invalid: BADSIG D208507CA14F4FCA Erlang Solutions Ltd. <packages@erlang-solutions.com>
E: The repository 'https://packages.erlang-solutions.com/debian buster Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

[adolfov]

Same issue, it started a couple hours ago:

Ign:5 https://packages.erlang-solutions.com/ubuntu focal Release.gpg
Reading package lists...
W: GPG error: https://packages.erlang-solutions.com/ubuntu focal Release: The following signatures were invalid: BADSIG D208507CA14F4FCA Erlang Solutions Ltd. <packages@erlang-solutions.com>
E: The repository 'https://packages.erlang-solutions.com/ubuntu focal Release' is not signed.
The command "sudo apt-get update" failed and exited with 100 during .

[brrygrdn]

It looks like this issue may be resolved, I'm able to build the Dockerfile as expected now, I'll leave this open pending confirmation.

[brrygrdn]

Hmm, I may have spoke too soon, it worked on CI but on my laptop I see:

#7 66.78 W: Sources disagree on hashes for supposely identical version '1:25.2.3-1' of 'esl-erlang:amd64'.
#7 66.78 W: Sources disagree on hashes for supposely identical version '1:25.2.3-1' of 'esl-erlang:amd64'.
#7 66.78 E: Failed to fetch http://binaries.erlang-solutions.com/debian/pool/esl-erlang_25.2.3-1~ubuntu~focal_amd64.deb  File has unexpected size (40825356 != 40822988). Mirror sync in progress? [IP: REDACTED]
#7 66.78    Hashes of expected file:
#7 66.78     - SHA256:1b7888175d2c78f85369389bbdeba98ee5b0fcab80da41f22e415e51bdfaa607
#7 66.78     - SHA1:057f5ffca06301d9c812c0dd28cdaa9b605f7981 [weak]
#7 66.78     - MD5Sum:2d2ecb60417c808b929269a82e386ef5 [weak]
#7 66.78     - Filesize:40822988 [weak]
#7 66.78 E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

[adolfov]

It's resolved for me. I only use CI (travis) to build.

[dalbarado]

Yes, It was updated and should work. Thanks for the feedback