- This topic has 28 replies, 7 voices, and was last updated Jan 8-8:51 pm by olsztyn.
-
Posts
-
xtrader
Hi all
I’ve used antix for several years without issue, however when trying to update my repo’s today I received the error below, stating that the antix repo is unsigned.
I’ve tried several different mirrors without success and can’t find this problem covered on the forum.
Would someone be kind enough to suggest a fix or point me to a relevant thread if this issue has been raised before?
Output of sudo apt update:
Hit:1 http://deb.debian.org/debian buster-backports InRelease
Hit:2 http://ftp.uk.debian.org/debian buster-updates InRelease
Hit:3 https://www.stats.bris.ac.uk/R/bin/linux/debian buster-cran35/ InRelease
Get:4 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster InRelease [3 B]
Err:4 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster InRelease
Clearsigned file isn’t valid, got ‘NOSPLIT’ (does the network require authentication?)
Hit:5 http://ftp.uk.debian.org/debian buster InRelease
Hit:6 http://eddie.website/repository/apt stable InRelease
Hit:7 http://security.debian.org buster/updates InRelease
Reading package lists… Done
E: Failed to fetch http://mxlinux.mirrors.uk2.net/packages/antix/buster/dists/buster/InRelease Clearsigned file isn’t valid, got ‘NOSPLIT’ (does the network require authentication?)
E: The repository ‘http://mxlinux.mirrors.uk2.net/packages/antix/buster buster InRelease’ is not signed.
N: Updating from such a repository can’t be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.Many thanks
xtrader
- This topic was modified 2 years, 6 months ago by anticapitalista. Reason: solved
anticapitalista
Use repo-manager to choose another mirror.
Philosophers have interpreted the world in many ways; the point is to change it.
antiX with runit - leaner and meaner.
Well that was nice and easy.
I had tried a few mirrors without any joy but found a mirror in Germany that works.
Thank you for the swift response.
xtrader
olsztyn
I’ve used antix for several years without issue, however when trying to update my repo’s today I received the error below, stating that the antix repo is unsigned.
I’ve tried several different mirrors without success and can’t find this problem covered on the forum.Sorry for it is an old(er) thread but just attracted my attention…
Out of curiosity on significance of this I did spot checking of about a dozen of antiX/MX repositories listed in Repository Manager and all of those happen to be either unsigned or are missing release file.
Are there any proper antiX/MX repositories that are signed and are not missing release file?
Thanks and Regards…Live antiX Boot Options (Previously posted by Xecure):
https://antixlinuxfan.miraheze.org/wiki/Table_of_antiX_Boot_Parametersanticapitalista
All of them were working fine with signed release files until … covid19.
We have zero influence over the repos, except for the antiX/MX ones.Philosophers have interpreted the world in many ways; the point is to change it.
antiX with runit - leaner and meaner.
All of them were working fine with signed release files until … covid19.
We have zero influence over the repos, except for the antiX/MX ones.Thank you…
Unfortunately even the main one, controlled by antiX/MX seems to be unsigned:
http://la.mxrepo.com/antix/buster/
Just to mention…
Thanks and Regards…Live antiX Boot Options (Previously posted by Xecure):
https://antixlinuxfan.miraheze.org/wiki/Table_of_antiX_Boot_Parametersanticapitalista
All of them were working fine with signed release files until … covid19.
We have zero influence over the repos, except for the antiX/MX ones.Thank you…
Unfortunately even the main one, controlled by antiX/MX seems to be unsigned:
http://la.mxrepo.com/antix/buster/
Just to mention…
Thanks and Regards…According to the repo managers of MX and antiX, they are signed
https://forum.mxlinux.org/viewtopic.php?f=94&t=60502&hilit=signed+repos&start=10#p598961
http://la.mxrepo.com/antix/buster/dists/buster/InRelease
- This reply was modified 2 years, 4 months ago by anticapitalista.
Philosophers have interpreted the world in many ways; the point is to change it.
antiX with runit - leaner and meaner.
BobC
I hit this error when I tried to add the source repos the other day.
hank you…
Unfortunately even the main one, controlled by antiX/MX seems to be unsigned:
http://la.mxrepo.com/antix/buster/
Just to mention…I did not mean to dwell on this topic but main repositories for antiX/MX (as I understand controlled by MX/antiX team) remain suffering from the issues raised by the originator of this thread, which prompts me to ask the following question so we can put this to sleep:
– Will these issues be fixed?
If antiX is meant just to play with and enjoy without much attention to integrity and security of repositories, then I have to accept it and not raise this question again.
However, just to mention, antiX is not just another trivial distro. It is an excellent, full featured, one of the most efficient systems that deserves more attention to these issues, so it can be as well considered for some serious use, not just for playing around.
So why not take this extra step and ensure these issues are resolved, at least for MX/antiX controlled repositories?
Just as a specific example:
The main antiX repository, which is http://la.mxrepo.com/antix/buster has issues as brought up by the originator of this thread.
On the other hand the debian repository attached in the list, http://deb.debian.org/debian is fine – not having these issues.
Some insight would be greatly appreciated.
Thanks and Regards.Live antiX Boot Options (Previously posted by Xecure):
https://antixlinuxfan.miraheze.org/wiki/Table_of_antiX_Boot_Parametersanticapitalista
I cannot reproduce the issues in the first thread when using the http://la.mxrepo.com/antix/buster/ repos.
See the output. Note no issues with unsigned repos/apps.au Hit:1 http://security.debian.org buster/updates InRelease Hit:2 http://deb.debian.org/debian buster-backports InRelease Hit:3 http://debian.ipacct.com/debian buster-updates InRelease Hit:4 http://debian.ipacct.com/debian buster InRelease Hit:5 http://dl.google.com/linux/chrome/deb stable InRelease Hit:6 https://repo.skype.com/deb stable InRelease Hit:7 http://download.virtualbox.org/virtualbox/debian buster InRelease Hit:8 http://repository.spotify.com stable InRelease Hit:9 https://packages.microsoft.com/repos/ms-teams stable InRelease Get:10 http://la.mxrepo.com/antix/buster buster InRelease [27.4 kB] Get:11 http://la.mxrepo.com/antix/buster buster/main amd64 Packages [309 kB] Get:12 http://la.mxrepo.com/antix/buster buster/main i386 Packages [310 kB] Get:13 http://la.mxrepo.com/antix/buster buster/nonfree amd64 Packages [24.3 kB] Get:14 http://la.mxrepo.com/antix/buster buster/nonfree i386 Packages [24.3 kB] Get:15 http://la.mxrepo.com/antix/buster buster/nosystemd amd64 Packages [4,393 B] Get:16 http://la.mxrepo.com/antix/buster buster/nosystemd i386 Packages [4,386 B] Get:17 http://la.mxrepo.com/antix/buster buster/dev amd64 Packages [75.7 kB] Get:18 http://la.mxrepo.com/antix/buster buster/dev i386 Packages [74.2 kB] Fetched 854 kB in 45s (19.0 kB/s) Reading package lists... Done Building dependency tree Reading state information... Done All packages are up to date. root@L412:/home/anticap# apt install apt-notifier Reading package lists... Done Building dependency tree Reading state information... Done The following additional packages will be installed: anacron python-enum34 python-pyqt5 python-sip python3-distro-info unattended-upgrades Suggested packages: default-mta | mail-transport-agent python-enum34-doc python-pyqt5-dbg bsd-mailx needrestart The following NEW packages will be installed: anacron apt-notifier python-enum34 python-pyqt5 python-sip python3-distro-info unattended-upgrades 0 upgraded, 7 newly installed, 0 to remove and 0 not upgraded. Need to get 2,634 kB of archives. After this operation, 15.9 MB of additional disk space will be used. Do you want to continue? [Y/n] Get:1 http://la.mxrepo.com/antix/buster buster/main amd64 apt-notifier all 18.04.12 [69.0 kB] Get:2 http://debian.ipacct.com/debian buster/main amd64 anacron amd64 2.3-28 [34.6 kB] Get:3 http://debian.ipacct.com/debian buster/main amd64 python-enum34 all 1.1.6-2 [35.3 kB] Get:4 http://debian.ipacct.com/debian buster/main amd64 python-sip amd64 4.19.14+dfsg-2 [170 kB] Get:5 http://debian.ipacct.com/debian buster/main amd64 python-pyqt5 amd64 5.11.3+dfsg-1+b3 [2,238 kB] Get:6 http://debian.ipacct.com/debian buster/main amd64 python3-distro-info all 0.21 [7,896 B] Get:7 http://debian.ipacct.com/debian buster/main amd64 unattended-upgrades all 1.11.2 [79.0 kB] Fetched 2,634 kB in 2s (1,730 kB/s) Preconfiguring packages ... Selecting previously unselected package anacron. (Reading database ... 312075 files and directories currently installed.) Preparing to unpack .../0-anacron_2.3-28_amd64.deb ... Unpacking anacron (2.3-28) ... Selecting previously unselected package python-enum34. Preparing to unpack .../1-python-enum34_1.1.6-2_all.deb ... Unpacking python-enum34 (1.1.6-2) ... Selecting previously unselected package python-sip. Preparing to unpack .../2-python-sip_4.19.14+dfsg-2_amd64.deb ... Unpacking python-sip (4.19.14+dfsg-2) ... Selecting previously unselected package python-pyqt5. Preparing to unpack .../3-python-pyqt5_5.11.3+dfsg-1+b3_amd64.deb ... Unpacking python-pyqt5 (5.11.3+dfsg-1+b3) ... Selecting previously unselected package python3-distro-info. Preparing to unpack .../4-python3-distro-info_0.21_all.deb ... Unpacking python3-distro-info (0.21) ... Selecting previously unselected package unattended-upgrades. Preparing to unpack .../5-unattended-upgrades_1.11.2_all.deb ... Unpacking unattended-upgrades (1.11.2) ... Selecting previously unselected package apt-notifier. Preparing to unpack .../6-apt-notifier_18.04.12_all.deb ... Unpacking apt-notifier (18.04.12) ... Setting up python-enum34 (1.1.6-2) ... Setting up anacron (2.3-28) ... Setting up python3-distro-info (0.21) ... Setting up python-sip (4.19.14+dfsg-2) ... Setting up unattended-upgrades (1.11.2) ... Creating config file /etc/apt/apt.conf.d/20auto-upgrades with new version Creating config file /etc/apt/apt.conf.d/50unattended-upgrades with new version Setting up python-pyqt5 (5.11.3+dfsg-1+b3) ... Setting up apt-notifier (18.04.12) ... Processing triggers for desktop-file-utils (0.23-4) ... Processing triggers for mime-support (3.62) ... Processing triggers for hicolor-icon-theme (0.17-2) ... Processing triggers for man-db (2.8.5-2) ... Writing Menu: jwm Writing Menu: fluxbox Writing Menu: icewmThis shows that the packages are signed:
http://la.mxrepo.com/antix/buster/dists/buster/
which is essentially the same as the Debian repo.
http://ftp.debian.org/debian/dists/Debian10.7/
Even using the repos in the first post show no errors.
au Hit:1 http://debian.ipacct.com/debian buster-updates InRelease Hit:2 http://debian.ipacct.com/debian buster InRelease Hit:3 http://deb.debian.org/debian buster-backports InRelease Hit:4 http://dl.google.com/linux/chrome/deb stable InRelease Hit:5 https://repo.skype.com/deb stable InRelease Hit:6 http://security.debian.org buster/updates InRelease Hit:7 http://repository.spotify.com stable InRelease Hit:8 http://download.virtualbox.org/virtualbox/debian buster InRelease Get:9 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster InRelease [27.4 kB] Hit:10 https://packages.microsoft.com/repos/ms-teams stable InRelease Get:11 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/main amd64 Packages [309 kB] Get:12 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/main i386 Packages [310 kB] Get:13 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/nonfree amd64 Packages [24.3 kB] Get:14 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/nonfree i386 Packages [24.3 kB] Get:15 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/nosystemd i386 Packages [4,386 B] Get:16 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/nosystemd amd64 Packages [4,393 B] Get:17 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/dev amd64 Packages [75.7 kB] Get:18 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/dev i386 Packages [74.2 kB] Fetched 854 kB in 2s (384 kB/s) Reading package lists... Done Building dependency tree Reading state information... Done All packages are up to date.Therefore, nothing to fix.
Philosophers have interpreted the world in many ways; the point is to change it.
antiX with runit - leaner and meaner.
anticapitalista
I hit this error when I tried to add the source repos the other day.
I cannot reproduce this either.
au Hit:1 http://deb.debian.org/debian buster-backports InRelease Hit:2 http://security.debian.org buster/updates InRelease Hit:3 http://debian.ipacct.com/debian buster-updates InRelease Hit:4 http://debian.ipacct.com/debian buster InRelease Hit:5 http://dl.google.com/linux/chrome/deb stable InRelease Get:6 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster InRelease [27.4 kB] Hit:7 https://repo.skype.com/deb stable InRelease Hit:8 http://repository.spotify.com stable InRelease Hit:9 http://download.virtualbox.org/virtualbox/debian buster InRelease Hit:10 http://repo.antixlinux.com/buster buster InRelease Hit:11 https://packages.microsoft.com/repos/ms-teams stable InRelease Get:12 http://la.mxrepo.com/antix/buster buster InRelease [27.4 kB] Get:13 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/dev Sources [8,493 B] Get:14 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/nosystemd Sources [1,130 B] Get:15 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/main Sources [155 kB] Get:16 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/nonfree Sources [2,223 B] Get:17 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/main amd64 Packages [309 kB] Get:18 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/main i386 Packages [310 kB] Get:19 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/nonfree amd64 Packages [24.3 kB] Get:20 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/nonfree i386 Packages [24.3 kB] Get:21 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/nosystemd i386 Packages [4,386 B] Get:22 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/nosystemd amd64 Packages [4,393 B] Get:23 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/dev amd64 Packages [75.7 kB] Get:24 http://mxlinux.mirrors.uk2.net/packages/antix/buster buster/dev i386 Packages [74.2 kB] Get:25 http://la.mxrepo.com/antix/buster buster/nosystemd Sources [1,130 B] Get:26 http://la.mxrepo.com/antix/buster buster/dev Sources [8,493 B] Get:27 http://la.mxrepo.com/antix/buster buster/nonfree Sources [2,223 B] Get:28 http://la.mxrepo.com/antix/buster buster/main Sources [155 kB] Get:29 http://la.mxrepo.com/antix/buster buster/main amd64 Packages [309 kB] Get:30 http://la.mxrepo.com/antix/buster buster/main i386 Packages [310 kB] Get:31 http://la.mxrepo.com/antix/buster buster/nonfree i386 Packages [24.3 kB] Get:32 http://la.mxrepo.com/antix/buster buster/nonfree amd64 Packages [24.3 kB] Get:33 http://la.mxrepo.com/antix/buster buster/nosystemd i386 Packages [4,386 B] Get:34 http://la.mxrepo.com/antix/buster buster/nosystemd amd64 Packages [4,393 B] Get:35 http://la.mxrepo.com/antix/buster buster/dev i386 Packages [74.2 kB] Get:36 http://la.mxrepo.com/antix/buster buster/dev amd64 Packages [75.7 kB] Fetched 2,042 kB in 1min 15s (27.4 kB/s) Reading package lists... Done Building dependency tree Reading state information... Done All packages are up to date.Philosophers have interpreted the world in many ways; the point is to change it.
antiX with runit - leaner and meaner.
Thank you anti for this insight…
I will study this in more depth and I apologize if my post caused an unnecessary confusion and taking your precious time.
Thanks and Regards.Live antiX Boot Options (Previously posted by Xecure):
https://antixlinuxfan.miraheze.org/wiki/Table_of_antiX_Boot_ParametersThis shows that the packages are signed:
http://la.mxrepo.com/antix/buster/dists/buster/
which is essentially the same as the Debian repo.
I apologize for digging further into these but as I am trying to verify my set of repositories in antiX and update per the above quote by adding the quoted above http://ftp.debian.org/debian/dists/Debian10.7/, I am getting the following error, which indicates one of the issues pointed to by the originator of this thread, and adding this repository fails:
”
The repository ‘http://ftp.debian.org/debian/dists/Debian10.7 buster Release’ does not have a Release file.Updating from such a repository can’t be done securely, and is therefore disabled by default.See apt-secure(8) manpage for repository creation and user configuration details.Release file for http://deb.debian.org/debian/dists/buster-backports/InRelease is not valid yet (invalid for another 6h 44min 20s). Updates for this repository will not be applied.Release file for http://ftp.us.debian.org/debian/dists/buster-updates/InRelease is not valid yet (invalid for another 6h 44min 20s). Updates for this repository will not be applied.
”
I trying to understand: Is this that Synaptic is wrong and fails to attach a perfectly correctly structured repository?By raising these questions I do not mean to find fault but rather than that I do want to set antiX repositories to the correct ones, signed and with correct structure, so it is acceptable to Synaptic…
Just to mention, my antiX version is 19.2 Hannie Schaft fully updated.Thanks again and Regards.
- This reply was modified 2 years, 4 months ago by olsztyn.
Live antiX Boot Options (Previously posted by Xecure):
https://antixlinuxfan.miraheze.org/wiki/Table_of_antiX_Boot_Parametersanticapitalista
Post the output of inxi -r
Philosophers have interpreted the world in many ways; the point is to change it.
antiX with runit - leaner and meaner.
Xecure
I apologize for digging further into these but as I am trying to verify my set of repositories in antiX and update per the above quote by adding the quoted above http://ftp.debian.org/debian/dists/Debian10.7/, I am getting the following error, which indicates one of the issues pointed to by the originator of this thread, and adding this repository fails:
olsztyn, anticapitalista didn’t provide links to use in apt as a repository source, but for you to see the Release.gpg (that is the file which contains a string of characters that your system checks to see if the repo is signed). It is a PGP signature.
When apt check a repository, i compares the signature from the repo and the one saved in your system, to see if they match and to check if it has reached its “expiration date”.
The error seen by the thread OP is related to the GPG key not matching, not being found or for it reaching the expiration date.For antix linux case, all PGP signatures in your system come from the package antix-archive-keyring (if I am not mistaken). This package adds the corresponding PGP key to /etc/apt/trusted.gpg.d/ for APT signing verification.
You add a source to /etc/apt/sources.list.d/ (for example, antix.list). When apt does a packagelist update (sudo apt update)
It reads the different sources, sends a request to access Release and Release.gpg files, checks if the Release.gpg file matches the PGP key in your system and “confirms” the signature, and then adds the information of Release to the list of available packages to be downloaded. This is how it verifies that the repo is secure and OK.I don’t fully understand GPG / PGP signature keys, but I think what I wrote is understandable.
antiX Live system enthusiast.
General Live Boot Parameters for antiX.
- You must be logged in to reply to this topic.
