401 Unauthorized Error + Repository is Unsigned Error from apt-puppetcore Repository on Ubuntu #92

securitasis · 2025-02-18T18:31:06Z

securitasis
Feb 18, 2025

Hello Community,

I am experiencing an issue when running sudo apt update on freshly provisioned Ubuntu systems (20.04, 22.04, and 24.04). The update process fails with a 401 Unauthorized error related to the Puppet repository. Below is the excerpt from the terminal output:

sudo apt update

Hit:1 http://archive.ubuntu.com/ubuntu noble InRelease
Hit:2 http://archive.ubuntu.com/ubuntu noble-updates InRelease
Hit:3 http://archive.ubuntu.com/ubuntu noble-security InRelease
Err:4 https://apt-puppetcore.puppet.com noble InRelease
  401  Unauthorized [IP: 65.8.248.69 443]
Reading package lists...
E: Failed to fetch https://apt-puppetcore.puppet.com/dists/noble/InRelease  401  Unauthorized [IP: 65.8.248.69 443]
E: The repository 'https://apt-puppetcore.puppet.com noble InRelease' is not signed.

I have also attached the full debug log for your reference:
puppet8_install_debug.log

Background:

I have developed an install-puppet8.ps script that sets up Puppet on these Ubuntu versions.
The script successfully provisions the system; however, the repository update error persists across all tested versions.

What I've Tried:

Deleted and recreated new Puppet API Keys from https://forge.puppet.com/.
Verifying the repository URL from https://apt-puppetcore.puppet.com/
Ensuring that my system’s network settings allow access to the specified repository.
Checking for any possible authentication or signing issues that might require additional credentials or updated keys.

Request for Assistance:

Has anyone encountered a similar issue with the Puppet repository?
Could there be a change or deprecation in the repository configuration for these Ubuntu versions?
Are there recommended steps to resolve the 401 Unauthorized error or adjust the repository configuration to obtain a signed release?

I appreciate any insights, troubleshooting tips, or recommendations from the community. Thank you for your support and for taking the time to help resolve this issue.

Best regards,
Jerry Collins | Securitasis