Missing NVIDIA GPG key for APT repository in container

[LukeShortCloud]

When using a 5.0.0-beta6 container, apt-get update fails due to a missing GPG key from NVIDIA. This is already handled during stage 1 of the container build but not in stage 2 which is the actual container image that is shipped. This causes problems with re-using the container image. For example:

Building a container with it:

$ echo "FROM ghcr.io/k4yt3x/video2x:5.0.0-beta6
RUN apt-get update" > Dockerfile
$ podman build .

Using distrobox with it:

$ distrobox create --image ghcr.io/k4yt3x/video2x:5.0.0-beta6 video2x
$ distrobox enter video2x

Both result in the same error:

+ apt-get update
Get:1 http://archive.ubuntu.com/ubuntu focal InRelease [265 kB]
Get:2 http://security.ubuntu.com/ubuntu focal-security InRelease [114 kB]
Get:3 https://developer.download.nvidia.com/compute/cuda/repos/ubuntu2004/x86_64  InRelease [1581 B]
Err:3 https://developer.download.nvidia.com/compute/cuda/repos/ubuntu2004/x86_64  InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY A4B469963BF863CC
Get:4 http://security.ubuntu.com/ubuntu focal-security/multiverse amd64 Packages [29.3 kB]
Get:5 http://archive.ubuntu.com/ubuntu focal-updates InRelease [114 kB]
Get:6 http://security.ubuntu.com/ubuntu focal-security/restricted amd64 Packages [3017 kB]
Get:7 http://archive.ubuntu.com/ubuntu focal-backports InRelease [108 kB]
Get:8 http://archive.ubuntu.com/ubuntu focal/restricted amd64 Packages [33.4 kB]
Get:9 http://archive.ubuntu.com/ubuntu focal/main amd64 Packages [1275 kB]
Get:10 http://archive.ubuntu.com/ubuntu focal/multiverse amd64 Packages [177 kB]
Get:11 http://archive.ubuntu.com/ubuntu focal/universe amd64 Packages [11.3 MB]
Get:12 http://security.ubuntu.com/ubuntu focal-security/main amd64 Packages [3189 kB]
Get:13 http://security.ubuntu.com/ubuntu focal-security/universe amd64 Packages [1127 kB]
Get:14 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages [3677 kB]
Get:15 http://archive.ubuntu.com/ubuntu focal-updates/restricted amd64 Packages [3167 kB]
Get:16 http://archive.ubuntu.com/ubuntu focal-updates/universe amd64 Packages [1431 kB]
Get:17 http://archive.ubuntu.com/ubuntu focal-updates/multiverse amd64 Packages [32.1 kB]
Get:18 http://archive.ubuntu.com/ubuntu focal-backports/main amd64 Packages [55.2 kB]
Get:19 http://archive.ubuntu.com/ubuntu focal-backports/universe amd64 Packages [28.6 kB]
Reading package lists...
W: GPG error: https://developer.download.nvidia.com/compute/cuda/repos/ubuntu2004/x86_64  InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY A4B469963BF863CC
E: The repository 'https://developer.download.nvidia.com/compute/cuda/repos/ubuntu2004/x86_64  InRelease' is not signed.
+ [ 100 -ne 0 ]
+ printf Error: An error occurred\n
Error: An error occurred

On a related note, the docker.io/nvidia/vulkan container is a year old and has not had any updates. Reports say that newer containers from NVIDIA do not have this problem. It might be worth switching to the docker.io/nvidia/cuda container instead. However, that is UBI8 (RHEL 8, Fedora family) based versus being Ubuntu so the Dockerfile would need to be rewritten to account for that.

See also: NVIDIA/nvidia-container-toolkit#257