olimex apt repository key expired : NO_PUBKEY 0BCE9CE97FCB605C

[mossroy]

On all my existing A64 boards, any "apt update" fails today with the following message :

Err:3 http://staging.olimex.com/staging buster InRelease                       
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 0BCE9CE97FCB605C
Err:4 http://repository.olimex.com buster InRelease                           
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 0BCE9CE97FCB605C

It's probably because your GPG key has expired two days ago :

pub   rsa4096 2018-12-18 [SC] [expired: 2020-12-17]
      2BE3 3123 120C 50F2 6665  30ED 0927 1DCF B635 0689
uid           [ expired] Olimex Dev team <support@olimex.com>

I see that you have created a new key in your latest image http://images.olimex.com/release/a64/A64-OLinuXino-buster-minimal-20201217-194545.img.7z :

pub   rsa4096 2020-12-17 [SC]
      2308 7A95 8C19 08B2 0B16  FDB7 0BCE 9CE9 7FCB 605C
uid           [ unknown] Olimex Dev team <support@olimex.com>

Can you provide a migration path for existing installations : I suppose it's only a matter of importing the new key?


More generally, please keep in mind that your "mainline" images are now the ones you recommend on https://www.olimex.com/Products/OLinuXino/A64/A64-OLinuXino/open-source-hardware
So people using them expect to have all the features of the board on a stable OS, and to have security updates (with apt upgrade) with no major regression. This issue and https://www.olimex.com/forum/index.php?topic=7976.0 are significant IMHO.

Regarding https://www.olimex.com/forum/index.php?topic=7238.0 , I understand that it's complicated (and that it affects all boards based on A64), but it's a real stability issue when you use the board as a 24/7 headless server.

[olimex]

did you visit http://images.olimex.com/

[LubOlimex]

Probably the keys expired, thanks for the report.

If you have an image older than 20201217-194545, please update repository key:

wget http://repository.olimex.com/public.key -O - | apt-key add -