Can't update: package signing public key is not available

[watels]

Hi !
I have the same issue than on this thread :

Repository Issues when hitting apt update

Hi All I am using the following documentation to migrate from install scripts to ubuntu I followed the steps from here Passbolt Help | Migrate passbolt CE from install scripts to Ubuntu package I seem to be getting the following back when running the apt update command The following signatures couldn’t be verified because the public key is not available: NO_PUBKEY DE8B853FC155581D Has anyone ran into this issue ?

[Action Needed] Update of the package signing key

The package signing key was updated As some of you may have noticed, the public key we are currently using to verify the signature of the package expires on the 18th of May 2022. We needed to update it to remove the expiry date. The fingerprint stays the same: 3D1A 0346 C8E1 802F 774A EF21 DE8b 853F C155 581D. Debian and Ubuntu Packages In order to make this change as smooth as possible, we released a new version of our debian package on the 13th of April 2022 containing the mechanism to pul…

But I followed the steps but I am still facing this issue :

apt-get update
Atteint :1 http://ftp.fr.debian.org/debian buster InRelease
Réception de :2 http://ftp.fr.debian.org/debian buster-updates InRelease [56,6 kB]
Atteint :3 http://security.debian.org buster/updates InRelease
Réception de :4 https://download.passbolt.com/ce/debian buster InRelease
Err :4 https://download.passbolt.com/ce/debian buster InRelease
  Les signatures suivantes n'ont pas pu être vérifiées car la clé publique n'est pas disponible : NO_PUBKEY DE8B853FC155581D
92,4 ko réceptionnés en 1s (108 ko/s)
Lecture des listes de paquets... Fait
W: Une erreur s'est produite lors du contrôle de la signature. Le dépôt n'est pas mis à jour et les fichiers d'index précédents seront utilisés. Erreur de GPG : https://download.passbolt.com/ce/debian buster InRelease : Les signatures suivantes n'ont pas pu être vérifiées car la clé publique n'est pas disponible : NO_PUBKEY DE8B853FC155581D
W: Impossible de récupérer https://download.passbolt.com/ce/debian/dists/buster/InRelease  Les signatures suivantes n'ont pas pu être vérifiées car la clé publique n'est pas disponible : NO_PUBKEY DE8B853FC155581D
W: Le téléchargement de quelques fichiers d'index a échoué, ils ont été ignorés, ou les anciens ont été utilisés à la place.

cat /etc/os-release
PRETTY_NAME="Debian GNU/Linux 10 (buster)"
NAME="Debian GNU/Linux"
VERSION_ID="10"
VERSION="10 (buster)"
VERSION_CODENAME=buster
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"

cat /usr/share/keyrings/passbolt-repository.gpg | gpg
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa2048 2020-05-18 [SC]
      3D1A0346C8E1802F774AEF21DE8B853FC155581D
uid           Passbolt SA package signing key <contact@passbolt.com>
sub   rsa2048 2020-05-18 [E]

sudo stat -c %a /usr/share/keyrings/passbolt-repository.gpg
644
sudo stat -c %A /usr/share/keyrings/passbolt-repository.gpg
-rw-r--r--

sudo stat -c %U:%G /usr/share/keyrings/passbolt-repository.gpg
root:root

file /usr/share/keyrings/passbolt-repository.gpg
/usr/share/keyrings/passbolt-repository.gpg: PGP/GPG key public ring (v4) created Mon May 18 16:11:39 2020 RSA (Encrypt or Sign) 2048 bits MPI=0xa827fe9657144e59...

gpg --show-keys /usr/share/keyrings/passbolt-repository.gpg
pub   rsa2048 2020-05-18 [SC]
      3D1A0346C8E1802F774AEF21DE8B853FC155581D
uid                      Passbolt SA package signing key <contact@passbolt.com>
sub   rsa2048 2020-05-18 [E]

grep ^UMASK /etc/login.defs
UMASK           022

I tried to remove the key, add it again but it still fail.

Can you help me please ?

[max]

Hey @watels

Can you follow the procedure described here: Passbolt Help | Wide Open

Let us know!

[clayton]

Some additional information here, I see you are on Debian 10 but you’ll need to update to Debian 11 to get php7.4 which is required for version 4.0.0 and above, so might be worthwhile to migrate to a new server on debian 11

[watels]

You are awesome !!!
I updated my server to Debian 11 and PHP to 7.4
Then I managed to update passbolt.

I then got an Nginx 502 error, I had to change the passbold nginx conf to “php7.4-fpm.sock”

Have a great day !

[clayton]

Glad it worked and sorry about forgetting to mention the php7.4-fpm line but happy that you found that right away!