Getting "Requires installation of untrusted packages" error after copying packages w/binaries between two of my PPAs

Asked by Jack Radigan

In addition to my personal PPAs, I have PPAs in two teams that I created. After moving packages from one of my personal PPAs to one of the team PPAs I'm getting this error from Update Manager. All of the keys for the PPAs are installed in my system, so I don't understand why I'm getting this error.

The keys in question are:

1024R/455756F9
1024R/325283A9
1024R/8D8E9F8C

I'm most concerned that the PPAs under the first key trust packages that were built/signed with the second and third keys.

Thanks in advance for the help.

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu software-center Edit question
Assignee:
No assignee Edit question
Solved by:
N1ck 7h0m4d4k15
Solved:
Last query:
Last reply:
Revision history for this message
N1ck 7h0m4d4k15 (nicktux) said :
#1

Your PPA has not the same signature as team's PPA. Correct ?

So you have to add the keys manually in apt, in order to install the software.

    sudo apt-key adv --recv-key --keyserver keyserver.ubuntu.com <keynumber>

Where <keynumber> replace it with the number of the key is missing. e.g 455756F9

Repeat as many times is required to import all missing keys.

Regards,
 NikTh

Revision history for this message
Jack Radigan (jprad) said :
#2

No, all three keys are installed in my system.

I can install packages from a PPA that were built in that PPA without problem.

What I can't do is install those same packages after copying them to a different PPA.

Revision history for this message
actionparsnip (andrew-woodhead666) said :
#3

Can you give the output of:

sudo apt-get update; lsb_release -a

Thanks

Revision history for this message
Jack Radigan (jprad) said :
#4

Sure, it it is:

Wanted to double-check so I could give you a specific problem:

If I try to update the libreoffice package that is in ppa:centrych/updates, I get an error.

That package was built in one of my personal scratch PPAs and copied to the updates PPA. I had deleted it after copying, so I forget which one it was originally.

However, after copying the package to ppa:jprad/scractch1, the update works.

$ sudo apt-get update; lsb_release -a
Get:1 http://security.ubuntu.com precise-security Release.gpg [198 B]
Hit http://us.archive.ubuntu.com precise Release.gpg
Get:2 http://us.archive.ubuntu.com precise-updates Release.gpg [198 B]
Hit http://us.archive.ubuntu.com precise-backports Release.gpg
Hit http://dl.google.com stable Release.gpg
Get:3 http://security.ubuntu.com precise-security Release [49.6 kB]
Hit http://us.archive.ubuntu.com precise Release
Get:4 http://us.archive.ubuntu.com precise-updates Release [49.6 kB]
Hit http://dl.google.com stable Release.gpg
Hit http://dl.google.com stable Release
Hit http://us.archive.ubuntu.com precise-backports Release
Hit http://ppa.launchpad.net precise Release.gpg
Hit http://ppa.launchpad.net precise Release.gpg
Ign http://ppa.launchpad.net precise Release.gpg
Get:5 http://security.ubuntu.com precise-security/main Sources [80.2 kB]
Hit http://us.archive.ubuntu.com precise/main Sources
Hit http://us.archive.ubuntu.com precise/restricted Sources
Hit http://us.archive.ubuntu.com precise/universe Sources
Hit http://us.archive.ubuntu.com precise/multiverse Sources
Hit http://us.archive.ubuntu.com precise/main amd64 Packages
Hit http://dl.google.com stable Release
Hit http://us.archive.ubuntu.com precise/restricted amd64 Packages
Hit http://us.archive.ubuntu.com precise/universe amd64 Packages
Hit http://us.archive.ubuntu.com precise/multiverse amd64 Packages
Hit http://us.archive.ubuntu.com precise/main i386 Packages
Hit http://us.archive.ubuntu.com precise/restricted i386 Packages
Hit http://us.archive.ubuntu.com precise/universe i386 Packages
Hit http://us.archive.ubuntu.com precise/multiverse i386 Packages
Hit http://us.archive.ubuntu.com precise/main TranslationIndex
Hit http://us.archive.ubuntu.com precise/multiverse TranslationIndex
Hit http://us.archive.ubuntu.com precise/restricted TranslationIndex
Hit http://dl.google.com stable/main amd64 Packages
Hit http://us.archive.ubuntu.com precise/universe TranslationIndex
Get:6 http://us.archive.ubuntu.com precise-updates/main Sources [396 kB]
Hit http://dl.google.com stable/main i386 Packages
Ign http://dl.google.com stable/main TranslationIndex
Get:7 http://security.ubuntu.com precise-security/restricted Sources [2,494 B]
Get:8 http://security.ubuntu.com precise-security/universe Sources [25.9 kB]
Get:9 http://security.ubuntu.com precise-security/multiverse Sources [1,383 B]
Get:10 http://security.ubuntu.com precise-security/main amd64 Packages [290 kB]
Get:11 http://ppa.launchpad.net precise Release.gpg [316 B]
Hit http://ppa.launchpad.net precise Release.gpg
Hit http://ppa.launchpad.net precise Release
Hit http://ppa.launchpad.net precise Release
Hit http://dl.google.com stable/main amd64 Packages
Hit http://dl.google.com stable/main i386 Packages
Ign http://dl.google.com stable/main TranslationIndex
Get:12 http://ppa.launchpad.net precise Release [11.9 kB]
Get:13 http://security.ubuntu.com precise-security/restricted amd64 Packages [4,627 B]
Get:14 http://security.ubuntu.com precise-security/universe amd64 Packages [75.5 kB]
Get:15 http://us.archive.ubuntu.com precise-updates/restricted Sources [5,467 B]
Get:16 http://us.archive.ubuntu.com precise-updates/universe Sources [90.6 kB]
Get:17 http://ppa.launchpad.net precise Release [11.9 kB]
Get:18 http://security.ubuntu.com precise-security/multiverse amd64 Packages [2,182 B]
Get:19 http://security.ubuntu.com precise-security/main i386 Packages [306 kB]
Get:20 http://us.archive.ubuntu.com precise-updates/multiverse Sources [6,571 B]
Get:21 http://us.archive.ubuntu.com precise-updates/main amd64 Packages [637 kB]
Hit http://ppa.launchpad.net precise Release
Hit http://ppa.launchpad.net precise/main Sources
Hit http://ppa.launchpad.net precise/main amd64 Packages
Hit http://ppa.launchpad.net precise/main i386 Packages
Ign http://ppa.launchpad.net precise/main TranslationIndex
Hit http://ppa.launchpad.net precise/main Sources
Hit http://ppa.launchpad.net precise/main amd64 Packages
Get:22 http://security.ubuntu.com precise-security/restricted i386 Packages [4,620 B]
Get:23 http://security.ubuntu.com precise-security/universe i386 Packages [78.2 kB]
Get:24 http://security.ubuntu.com precise-security/multiverse i386 Packages [2,367 B]
Hit http://security.ubuntu.com precise-security/main TranslationIndex
Hit http://security.ubuntu.com precise-security/multiverse TranslationIndex
Hit http://security.ubuntu.com precise-security/restricted TranslationIndex
Hit http://security.ubuntu.com precise-security/universe TranslationIndex
Get:25 http://us.archive.ubuntu.com precise-updates/restricted amd64 Packages [10.1 kB]
Get:26 http://us.archive.ubuntu.com precise-updates/universe amd64 Packages [206 kB]
Hit http://ppa.launchpad.net precise/main i386 Packages
Ign http://ppa.launchpad.net precise/main TranslationIndex
Get:27 http://ppa.launchpad.net precise/main Sources [3,263 B]
Hit http://security.ubuntu.com precise-security/main Translation-en
Hit http://security.ubuntu.com precise-security/multiverse Translation-en
Hit http://security.ubuntu.com precise-security/restricted Translation-en
Get:28 http://ppa.launchpad.net precise/main amd64 Packages [13.4 kB]
Get:29 http://us.archive.ubuntu.com precise-updates/multiverse amd64 Packages [13.6 kB]
Get:30 http://us.archive.ubuntu.com precise-updates/main i386 Packages [657 kB]
Hit http://security.ubuntu.com precise-security/universe Translation-en
Get:31 http://ppa.launchpad.net precise/main i386 Packages [13.4 kB]
Ign http://ppa.launchpad.net precise/main TranslationIndex
Get:32 http://ppa.launchpad.net precise/main Sources [3,263 B]
Get:33 http://ppa.launchpad.net precise/main amd64 Packages [13.4 kB]
Get:34 http://us.archive.ubuntu.com precise-updates/restricted i386 Packages [10.0 kB]
Get:35 http://us.archive.ubuntu.com precise-updates/universe i386 Packages [209 kB]
Get:36 http://ppa.launchpad.net precise/main i386 Packages [13.4 kB]
Ign http://ppa.launchpad.net precise/main TranslationIndex
Hit http://ppa.launchpad.net precise/main Sources
Hit http://ppa.launchpad.net precise/main amd64 Packages
Hit http://ppa.launchpad.net precise/main i386 Packages
Ign http://ppa.launchpad.net precise/main TranslationIndex
Get:37 http://us.archive.ubuntu.com precise-updates/multiverse i386 Packages [13.8 kB]
Hit http://us.archive.ubuntu.com precise-updates/main TranslationIndex
Hit http://us.archive.ubuntu.com precise-updates/multiverse TranslationIndex
Hit http://us.archive.ubuntu.com precise-updates/restricted TranslationIndex
Hit http://us.archive.ubuntu.com precise-updates/universe TranslationIndex
Hit http://us.archive.ubuntu.com precise-backports/main Sources
Hit http://us.archive.ubuntu.com precise-backports/restricted Sources
Hit http://us.archive.ubuntu.com precise-backports/universe Sources
Hit http://us.archive.ubuntu.com precise-backports/multiverse Sources
Hit http://us.archive.ubuntu.com precise-backports/main amd64 Packages
Hit http://us.archive.ubuntu.com precise-backports/restricted amd64 Packages
Hit http://us.archive.ubuntu.com precise-backports/universe amd64 Packages
Hit http://us.archive.ubuntu.com precise-backports/multiverse amd64 Packages
Hit http://us.archive.ubuntu.com precise-backports/main i386 Packages
Hit http://us.archive.ubuntu.com precise-backports/restricted i386 Packages
Hit http://us.archive.ubuntu.com precise-backports/universe i386 Packages
Hit http://us.archive.ubuntu.com precise-backports/multiverse i386 Packages
Hit http://us.archive.ubuntu.com precise-backports/main TranslationIndex
Hit http://us.archive.ubuntu.com precise-backports/multiverse TranslationIndex
Hit http://us.archive.ubuntu.com precise-backports/restricted TranslationIndex
Hit http://us.archive.ubuntu.com precise-backports/universe TranslationIndex
Hit http://us.archive.ubuntu.com precise/main Translation-en
Ign http://dl.google.com stable/main Translation-en_US
Hit http://us.archive.ubuntu.com precise/multiverse Translation-en
Hit http://us.archive.ubuntu.com precise/restricted Translation-en
Hit http://us.archive.ubuntu.com precise/universe Translation-en
Hit http://us.archive.ubuntu.com precise-updates/main Translation-en
Hit http://us.archive.ubuntu.com precise-updates/multiverse Translation-en
Ign http://dl.google.com stable/main Translation-en
Hit http://us.archive.ubuntu.com precise-updates/restricted Translation-en
Hit http://us.archive.ubuntu.com precise-updates/universe Translation-en
Hit http://us.archive.ubuntu.com precise-backports/main Translation-en
Hit http://us.archive.ubuntu.com precise-backports/multiverse Translation-en
Hit http://us.archive.ubuntu.com precise-backports/restricted Translation-en
Ign http://dl.google.com stable/main Translation-en_US
Hit http://us.archive.ubuntu.com precise-backports/universe Translation-en
Ign http://dl.google.com stable/main Translation-en
Ign http://ppa.launchpad.net precise/main Translation-en_US
Ign http://ppa.launchpad.net precise/main Translation-en
Ign http://ppa.launchpad.net precise/main Translation-en_US
Ign http://ppa.launchpad.net precise/main Translation-en
Ign http://ppa.launchpad.net precise/main Translation-en_US
Ign http://ppa.launchpad.net precise/main Translation-en
Ign http://ppa.launchpad.net precise/main Translation-en_US
Ign http://ppa.launchpad.net precise/main Translation-en
Ign http://ppa.launchpad.net precise/main Translation-en_US
Ign http://ppa.launchpad.net precise/main Translation-en
Fetched 3,311 kB in 2s (1,352 kB/s)
Reading package lists... Done
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 12.04.2 LTS
Release: 12.04
Codename: precise

Revision history for this message
actionparsnip (andrew-woodhead666) said :
#5

Then its fine, there are no mention of GPG keys in that output....

Revision history for this message
Jack Radigan (jprad) said :
#6

It's not fine, but I think I identified where the problem is.

I found another answer thread on launchpad with a similar error. One of the posts mentioned something about this happening if the PPA is renamed.

So, I set up a test by creating a dummy package in each of my PPAs, which are listed below, grouped by key. Each package has a unique version number and all of the PPAs have the same pin priority value.

With all of the PPAs enabled, the kernel, security and scratch1 PPAs are not listed in Synaptic when I select the Origin button.

I'm pretty sure I renamed each of those PPAs at some time in the past.

Hope that helps.

1024R/455756F9
deb http://ppa.launchpad.net/centrych/release/ubuntu precise main
deb http://ppa.launchpad.net/centrych/updates/ubuntu precise main
deb http://ppa.launchpad.net/centrych/proposed/ubuntu precise main
deb http://ppa.launchpad.net/centrych/kernel/ubuntu precise main
deb http://ppa.launchpad.net/centrych/security/ubuntu precise main

1024R/325283A9
deb http://ppa.launchpad.net/centrych-dev/beta/ubuntu precise main

1024R/8D8E9F8C
deb http://ppa.launchpad.net/jprad/personal/ubuntu precise main
deb http://ppa.launchpad.net/jprad/scratch1/ubuntu precise main
deb http://ppa.launchpad.net/jprad/scratch2/ubuntu precise main
deb http://ppa.launchpad.net/jprad/scratch3/ubuntu precise main
deb http://ppa.launchpad.net/jprad/scratch4/ubuntu precise main

Revision history for this message
N1ck 7h0m4d4k15 (nicktux) said :
#7

Sorry but I cannot understand what is the problem here. I've tested one of your PPAs (centrych/release) and there is no problem at all.

Maybe you meant something else ?

The key imported successfully and no untrusted packages message at all.

Regards
 NikTh

Revision history for this message
Jack Radigan (jprad) said :
#8

I can't understand what's going on either.

Here's a recap.

I moved the 3.6.6.2 build of LibreOffice from one of my scratch PPAs to the updates PPA.

After waiting for the move to complete, indicated by the checkmark in package details page for the PPA, I attempted an upgrade on my machine.

The update-manager saw the updated files, but I got the "Requires installation of untrusted packages" error when I tried it.

I tried it again late yesterday and it worked. I've made no changes to my two systems, i386 and amd64. Both failed, now they work.

However, I still have the same problem as I mentioned in post #6 above, when I enable all the PPAs, only a few are listed in Synaptic.

Revision history for this message
N1ck 7h0m4d4k15 (nicktux) said :
#9

Try to remove all the PPAs from your system.

    sudo add-apt-repository --remove ppa:<the name/here>

Then do

    sudo apt-get update

and then add them again one by one

    sudo add-apt-repository ppa:<the name/here>

Regards
 NikTh

Revision history for this message
Jack Radigan (jprad) said :
#10

Okay, that seems to have done the trick.

I had originally added the PPAs using the following:

# beta PPA
cat >/etc/apt/sources.list.d/centrych-dev-beta-precise.list <<EOF
deb http://ppa.launchpad.net/centrych-dev/beta/ubuntu precise main
deb-src http://ppa.launchpad.net/centrych-dev/beta/ubuntu precise main
EOF

# beta key
apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 325283A9

Is there something else that add-apt-repository is doing that I'm missing doing it this way?

Revision history for this message
Best N1ck 7h0m4d4k15 (nicktux) said :
#11

Probably yes.
add-apt-repository adds the PPA to sources.list or sources.list.d , then imports the key and signed it as trusted in apt.

Please mark the question as solved.

Regards
 NikTh

Revision history for this message
Jack Radigan (jprad) said :
#12

Thanks NikTh, that solved my question.