Ubuntu
debian-installer package

ISST-LTE: Ubuntu 16.04: Debootstrap BAD signature error while installing base system

Bug #1544339 reported by bugproxy
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
debian-installer (Ubuntu)
New
Undecided
Taco Screen team

Bug Description

FYI Canonical:

Somethings may not be in sync with the mirrors as we have been recently experiencing a lot of intermittent 16.04 install failures with errors like the following while trying to install with the 08-Feb netboot images ( http://ports.ubuntu.com/ubuntu-ports/dists/xenial/main/installer-ppc64el/20101020ubuntu419/images/netboot/ )

debootstrap: gpgv: BAD signature from "Ubuntu Archive Automatic Signing Key <email address hidden>"

The Signature dates appear to be slipping around a bit. From a couple of recent install failures (the installs were reset back to the partitioning stage and retried until successful):

Non-proxy (p822l):

Feb 10 21:00:57 debootstrap: gpgv: Signature made Tue Feb 9 19:23:47 2016 UTC using DSA key ID 437D05B5
Feb 10 21:00:57 debootstrap: gpgv: BAD signature from "Ubuntu Archive Automatic Signing Key <email address hidden>"
Feb 10 21:09:19 debootstrap: gpgv: Signature made Wed Feb 10 20:45:14 2016 UTC using DSA key ID 437D05B5
Feb 10 21:09:19 debootstrap: gpgv: Good signature from "Ubuntu Archive Automatic Signing Key <email address hidden>"
Feb 10 21:09:19 debootstrap: gpgv: Signature made Wed Feb 10 20:45:14 2016 UTC using RSA key ID C0B21F32
Feb 10 21:09:19 debootstrap: gpgv: Good signature from "Ubuntu Archive Automatic Signing Key (2012) <email address hidden>"

Proxy-based install (irislp2):

Feb 10 19:29:34 debootstrap: gpgv: Signature made Wed Feb 10 17:50:18 2016 UTC using DSA key ID 437D05B5
Feb 10 19:29:34 debootstrap: gpgv: BAD signature from "Ubuntu Archive Automatic Signing Key <email address hidden>"
Feb 10 20:45:14 debootstrap: gpgv: Signature made Wed Feb 10 20:09:32 2016 UTC using DSA key ID 437D05B5
Feb 10 20:45:14 debootstrap: gpgv: BAD signature from "Ubuntu Archive Automatic Signing Key <email address hidden>"
Feb 10 20:55:56 debootstrap: gpgv: Signature made Wed Feb 10 20:09:32 2016 UTC using DSA key ID 437D05B5
Feb 10 20:55:56 debootstrap: gpgv: Good signature from "Ubuntu Archive Automatic Signing Key <email address hidden>"
Feb 10 20:55:56 debootstrap: gpgv: Signature made Wed Feb 10 20:09:32 2016 UTC using RSA key ID C0B21F32
Feb 10 20:55:56 debootstrap: gpgv: Good signature from "Ubuntu Archive Automatic Signing Key (2012) <email address hidden>"

Revision history for this message
bugproxy (bugproxy) wrote : install logs from non-proxy install

Default Comment by Bridge

tags: added: architecture-ppc64le bugnameltc-136852 severity-critical targetmilestone-inin---
Revision history for this message
bugproxy (bugproxy) wrote : install logs from proxy-based install

Default Comment by Bridge

Changed in ubuntu:
assignee: nobody → Taco Screen team (taco-screen-team)
Revision history for this message
bugproxy (bugproxy) wrote : Comment bridged from LTC Bugzilla

------- Comment From <email address hidden> 2016-02-10 18:16 EDT-------
*** Bug 136777 has been marked as a duplicate of this bug. ***

tags: added: targetmilestone-inin1604
removed: targetmilestone-inin---
Kevin W. Rudd (kevinr)
affects: ubuntu → debian-installer (Ubuntu)
Revision history for this message
bugproxy (bugproxy) wrote :

------- Comment From <email address hidden> 2016-02-17 07:02 EDT-------
I got a similar result two days ago when installing from mini.iso [1], but I retried yesterday and today and saw no more errors.
Unfortunately I did not check the logs at the time and I already discarded the vm.
This is how it looks from the last installation I performed.

Feb 16 19:24:19 debootstrap: gpgv:
Feb 16 19:24:19 debootstrap: Signature made Tue Feb 16 18:55:04 2016 UTC using DSA key ID 437D05B5
Feb 16 19:24:19 debootstrap: gpgv:
Feb 16 19:24:19 debootstrap: Good signature from "Ubuntu Archive Automatic Signing Key <email address hidden>"
Feb 16 19:24:19 debootstrap:
Feb 16 19:24:19 debootstrap: gpgv:
Feb 16 19:24:19 debootstrap: Signature made Tue Feb 16 18:55:04 2016 UTC using RSA key ID C0B21F32
Feb 16 19:24:19 debootstrap: gpgv:
Feb 16 19:24:19 debootstrap: Good signature from "Ubuntu Archive Automatic Signing Key (2012) <email address hidden>"
Feb 16 19:24:19 debootstrap:

[1] http://ports.ubuntu.com/dists/xenial/main/installer-ppc64el/current/images/netboot/mini.iso

Revision history for this message
Mathieu Trudel-Lapierre (cyphermox) wrote :

Yes, this would be very much a time-sensitive, and not-always-reproducible bug. It hinges on whether every bit of the proxy is up to date with the archive, so that Release and Release.gpg are in sync or out of sync, which is why InRelease could work around it pretty well.

Another option is to make sure the proxy does not cache any files for the archive, although that will negate the speedups you could see from caching.

Revision history for this message
bugproxy (bugproxy) wrote :

------- Comment From <email address hidden> 2016-02-29 10:36 EDT-------
Since there have been no further reports of problems in the last couple of weeks, I'm going to go ahead and close this bug out as resolved.

Thanks.

Revision history for this message
Steve Langasek (vorlon) wrote :

The underlying mirroring race condition remains present. This should remain open on the Ubuntu side. (But this is a duplicate of bug #1485511, so marking as such.)

Revision history for this message
bugproxy (bugproxy) wrote :

------- Comment From <email address hidden> 2016-03-01 18:30 EDT-------
I tried to install my LPAR, conelp2, with Ubuntu 16.04 today, and the installation was blocked by the deboottrap error. conelp2 has two SSD drivers. I tried single path and multipath installation, but I hit this problem in both cases.

I have collect the /var/log/syslog, one from the single path installation and the other one from the multipath installation.

Revision history for this message
bugproxy (bugproxy) wrote : single path installation log from conelp2

------- Comment (attachment only) From <email address hidden> 2016-03-01 18:32 EDT-------

Revision history for this message
bugproxy (bugproxy) wrote : multipath installation log from conelp2

------- Comment (attachment only) From <email address hidden> 2016-03-01 18:34 EDT-------

Revision history for this message
Kevin W. Rudd (kevinr) wrote :

Since this bug is a mirror of IBM bug 136852 , duping it to LP bug #1485511 isn't really appropriate as we are getting reports of additional problems with this issue, and do not have any automatic visibility into the status of bug #1485511

Revision history for this message
Kevin W. Rudd (kevinr) wrote :

Ignore the last comment. The internal dup has been found for LP 1485511.

Revision history for this message
Breno Leitão (breno-leitao) wrote :

This bug is a dup of Launchpad 1485511 and it is marked as FIX Release, which means that it is solved.

Revision history for this message
bugproxy (bugproxy) wrote : Comment bridged from LTC Bugzilla

------- Comment From <email address hidden> 2016-03-16 10:13 EDT-------
*** This bug has been marked as a duplicate of bug 128579 ***

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.