Debian 9: apt update results in "The following signatures were invalid: B10FDCDCEC088467D0069F423C6E15887B190BD2" for repo.stackdriver.com.

[Martyn Drake]

On a Debian 9 GCE instance, I notice that every time I run update I see:

Ign:1 http://deb.debian.org/debian stretch InRelease

Hit:2 http://security.debian.org stretch/updates InRelease          

Hit:3 http://deb.debian.org/debian stretch-updates InRelease        

Hit:4 http://ppa.launchpad.net/webupd8team/java/ubuntu xenial InRelease                                              

Hit:5 http://deb.debian.org/debian stretch-backports InRelease                                                       

Hit:6 http://deb.debian.org/debian stretch Release                                             

Hit:8 http://packages.cloud.google.com/apt google-cloud-logging-wheezy InRelease               

Get:7 http://repo.stackdriver.com/apt stretch InRelease [2,100 B]        

Hit:10 http://packages.cloud.google.com/apt cloud-sdk-stretch InRelease               

Err:7 http://repo.stackdriver.com/apt stretch InRelease

  The following signatures were invalid: B10FDCDCEC088467D0069F423C6E15887B190BD2

Hit:12 http://packages.cloud.google.com/apt google-compute-engine-stretch-stable InRelease

Hit:13 http://packages.cloud.google.com/apt google-cloud-packages-archive-keyring-stretch InRelease

Hit:11 https://packagecloud.io/varnishcache/varnish41/debian stretch InRelease

Reading package lists... Done 

W: GPG error: http://repo.stackdriver.com/apt stretch InRelease: The following signatures were invalid: B10FDCDCEC088467D0069F423C6E15887B190BD2

E: The repository 'http://repo.stackdriver.com/apt stretch InRelease' is not signed.

N: Updating from such a repository can't be done securely, and is therefore disabled by default.

N: See apt-secure(8) manpage for repository creation and user configuration details.

I've tried:

curl --connect-timeout 5 -s -f "https://packages.cloud.google.com/apt/doc/apt-key.gpg" | apt-key add -

but no joy.  Does anybody know which repository I need to get the right key from so that I continue to receive updates?

Thanks,

Martyn

[Igor Peshansky]

Martyn,

Short term, you should be able to run:

curl -s -f https://dl.google.com/cloudagents/RPM-GPG-KEY-stackdriver | apt-key add -

Note, however, that repo.stackdriver.com is a legacy repo. I would suggest removing /etc/apt/sources.list.d/stackdriver.list and re-running the monitoring agent installation script following the current instructions at https://cloud.google.com/monitoring/agent/install-agent#linux-install . The agent binaries should be the same, just from the new location (packages.cloud.google.com, just like gcloud).

        Igor
-- sent from a mobile device, please excuse tyops and omissns

--
© 2016 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
 
Email preferences: You received this email because you signed up for the Google Stackdriver Discussion Google Group (google-stackdr...@googlegroups.com) to participate in discussions with other members of the GoogleStackdriver community.
---
You received this message because you are subscribed to the Google Groups "Google Stackdriver Discussion Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-stackdriver-d...@googlegroups.com.
To post to this group, send email to google-stackdr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-stackdriver-discussion/6cb5f4b2-b778-4996-8396-b986759c6649%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Martyn Drake]

Many thanks, Igor.

I've subsequently discovered we were installing via a different means, so have updated the imaging scripts for our instances to use the new one.

Thanks again,

Martyn

Email preferences: You received this email because you signed up for the Google Stackdriver Discussion Google Group (google-stackdriver-discu...@googlegroups.com) to participate in discussions with other members of the GoogleStackdriver community.

---
You received this message because you are subscribed to the Google Groups "Google Stackdriver Discussion Forum" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-stackdriver-discussion+unsub...@googlegroups.com.