The following signatures were invalid: EXPKEYSIG

  • kkumtree

2024-11-04T21:24:49+09:00

debian
ubuntu
apt
expkeysig

๋งค๋ฒˆ ์ˆ˜์ •ํ•˜๊ธฐ ๊ท€์ฐฎ์•„์„œ, ๋‚˜์ค‘์— ์ฐพ์•„์„œ ์“ฐ๋ ค๊ณ  ๋„์ ์ด๋Š” ๋ฉ”๋ชจ
๋ณดํ†ต GPGํ‚ค ์ง€์šฐ๊ณ  ๋‹ค์‹œ ๋ฐ›์œผ๋ฉด ๋œ๋‹ค.

๊ทธ๋Ÿฐ ๋‚ ์ด ์žˆ๋‹ค. ๋ฌด์‹ฌ๊ฒฐ์— sudo apt-get update๋ฅผ ์‹คํ–‰ํ•˜๋Š” ์ˆœ๊ฐ„, ์—๋Ÿฌ๊ฐ€ ๋œจ๋Š” ๋‚ .

expkeysig

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://prod-cdn.packages.k8s.io/repositories/isv:/kubernetes:/core:/stable:/v1.31/deb  InRelease: The following signatures were invalid: EXPKEYSIG 234654DA9A296436 isv:kubernetes OBS Project <isv:[email protected]>
W: Failed to fetch https://pkgs.k8s.io/core:/stable:/v1.31/deb/InRelease  The following signatures were invalid: EXPKEYSIG 234654DA9A296436 isv:kubernetes OBS Project <isv:[email protected]>
W: Some index files failed to download. They have been ignored, or old ones used instead.

Zorin OS๋กœ ์ฒ˜์Œ ์ž…๋ฌธํ•  ๋•Œ๋Š” ์ด๊ฑฐ ๋งˆ์ฃผ์น˜๋ฉด ๋ฒ„ํ‹ฐ๋‹ค ๋ฒ„ํ‹ฐ๋‹ค ํฌ๋งทํ–ˆ๋Š”๋ฐ, ์ด์ œ๋Š” ๋ญ… ์–ด๋””์„œ ํ‚ค ๋งŒ๋ฃŒ๋๋‚˜๋ณด๋‹ค ํ•˜๊ณ  ๊ทธ๋ ค๋ ค๋‹ˆ ํ•œ๋‹ค. =ใ……=);

์•„๋ž˜ ๋ช…๋ น์–ด๋ฅผ ์น˜๋ฉด, ์ด๋ฒˆ ์ผ€์ด์Šค๋Š” keyrings ๋””๋ ‰ํ† ๋ฆฌ์™€ sources.list.d ๋””๋ ‰ํ† ๋ฆฌ๋งŒ ์‚ดํŽด๋ณด๋ฉด ๋๋‚œ๋‹ค.

tree /etc/apt/ -L 1
# /etc/apt/
# โ”œโ”€โ”€ apt.conf.d
# โ”œโ”€โ”€ auth.conf.d
# โ”œโ”€โ”€ keyrings
# โ”œโ”€โ”€ preferences.d
# โ”œโ”€โ”€ sources.list
# โ”œโ”€โ”€ sources.list.d
# โ”œโ”€โ”€ sources.list.distUpgrade
# โ”œโ”€โ”€ trusted.gpg.d
# โ””โ”€โ”€ trusted.gpg~

# 7 directories, 3 files

๊ทธ์ € ์˜ค๋ฅ˜๊ฐ€ ๋‚œ ํŒŒ์ผ์„ ์—ด์–ด, GPG Key์˜ ์œ„์น˜๋ฅผ ํ™•์ธํ•˜๊ณ  ํ•ด๋‹น ํŒจํ‚ค์ง€๋ฅผ ์„ค์น˜ํ•œ ๊ธฐ์–ต์„ ๋˜์ƒˆ๊ธฐ๋ฉด ๋œ๋‹ค.

ls /etc/apt/sources.list.d
# docker.list.distUpgrade                               kubernetes.list                  ubuntu-esm-infra.sources
# gns3-ubuntu-ppa-lunar.list.distUpgrade                microsoft-edge.list              ubuntu.sources
# gns3-ubuntu-ppa-lunar.sources                         microsoft-prod.list.distUpgrade  vscode.list.distUpgrade
# graphics-drivers-ubuntu-ppa-kinetic.list.distUpgrade  microsoft-prod.sources           vscode.sources
# graphics-drivers-ubuntu-ppa-kinetic.sources           tailscale.list.distUpgrade       yarn.list.distUpgrade
# graphics-drivers-ubuntu-ppa-noble.sources             third-party.sources              yarn.sources
# helm-stable-debian.list                               ubuntu-esm-apps.sources
cat /etc/apt/sources.list.d/kubernetes.list
# deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.31/deb/ /

๊ทธ๋žฌ์ง€. kubectl ์“ฐ๊ฒ ๋‹ค๊ณ  ์„ค์น˜ํ–ˆ์—ˆ๊ตฌ๋‚˜.

์Šฅ์‚ญ ์ง€์šด๋‹ค.

sudo rm /etc/apt/keyrings/kubernetes-apt-keyring.gpg

์„ค์น˜ ๊ฐ€์ด๋“œ๋Œ€๋กœ ์–Œ์ „ํžˆ ๋‹ค์‹œ ํ‚ค ๋ฐ›์•„์„œ dearmorํ•˜๊ณ , ๊ฒฝ๋กœ์— ๋‘์ž.

follow-what-kubernetes-says

curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.31/deb/Release.key | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg
sudo chmod 644 /etc/apt/keyrings/kubernetes-apt-keyring.gpg # allow unprivileged APT programs to read this keyring

๊ทธ์ € ์ž˜๋œ๋‹ค.

properly-work

sudo apt-get update
# Hit:1 https://packages.microsoft.com/repos/edge stable InRelease
# Hit:3 http://security.ubuntu.com/ubuntu noble-security InRelease
# Hit:4 http://kr.archive.ubuntu.com/ubuntu noble InRelease
# Hit:5 https://baltocdn.com/helm/stable/debian all InRelease
# Hit:2 https://prod-cdn.packages.k8s.io/repositories/isv:/kubernetes:/core:/stable:/v1.31/deb  InRelease
# Hit:6 http://kr.archive.ubuntu.com/ubuntu noble-updates InRelease
# Hit:7 https://esm.ubuntu.com/apps/ubuntu noble-apps-security InRelease
# Hit:8 http://kr.archive.ubuntu.com/ubuntu noble-backports InRelease
# Hit:9 https://ppa.launchpadcontent.net/graphics-drivers/ppa/ubuntu noble InRelease
# Hit:10 https://esm.ubuntu.com/apps/ubuntu noble-apps-updates InRelease
# Hit:11 https://esm.ubuntu.com/infra/ubuntu noble-infra-security InRelease
# Hit:12 https://esm.ubuntu.com/infra/ubuntu noble-infra-updates InRelease
# Reading package lists... Done
sudo apt-get upgrade
# Reading package lists... Done
# Building dependency tree... Done
# Reading state information... Done
# Calculating upgrade... Done
# The following upgrades have been deferred due to phasing:
#   file-roller python3-distupgrade shotwell shotwell-common ubuntu-release-upgrader-core ubuntu-release-upgrader-gtk
# 0 upgraded, 0 newly installed, 0 to remove and 6 not upgraded.

๊ทธ๋ฆฌ๊ณ  ๋”ฑํžˆ ์—…๊ทธ๋ ˆ์ด๋“œํ•ด์•ผํ•  ๊ฒƒ๋„ ์—†์—ˆ๋‹ค.

์•„๋งˆ, ์˜ˆ์ „ ๊ธ€์— sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 234654DA9A296436 ์จ๋„ ๋œ๋‹ค๊ณ  ์žˆ๋Š”๋ฐ,
์ด๊ฑด deprecated ๋ฐฉ์‹์ด๋ผ ์ข€ ๊บผ๋ ค์ง„๋‹ค.
๋ฌผ๋ก  ์„ค์น˜ ์•ˆ๋‚ด๋ฌธ์— ์žˆ๋Š” ๋‚ด์šฉ๋„ ์•„๋‹ˆ๊ณ , ํ‚ค๊ฐ€ ๋˜ ๋”ฐ๋กœ ๋†€๊ฒŒ๋œ๋‹ค.

sudo apt-key list
# Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)).
# /etc/apt/trusted.gpg
# --------------------
# pub   rsa2048 2022-08-25 [SC] [expires: 2026-12-29]
#       DE15 B144 86CD 377B 9E87  6E1A 2346 54DA 9A29 6436
# uid           [ unknown] isv:kubernetes OBS Project <isv:[email protected]>

์•ˆ๊ทธ๋ž˜๋„ ์ง€๊ธˆ Authentication ์ •๋ฆฌ๋ฅผ ๋ฏธ๋ค„์„œ ์ž”๋œฉ ์Œ“์˜€๋Š”๋ฐ, ์•„๋ž˜ ๋ฉ”๋‰ด๋กœ ์ง„์ž…ํ•ด์„œ ์ง€์› ๋‹ค.
๋‚ด GUI๊ธฐ์ค€์œผ๋กœ๋Š” Software & Updates ์ด๋‹ค.

remove-deprecated-key

์–ด์ฐจํ”ผ ํ•ด๋‹น ํŒŒ์ผ์ด ๋‚ ์•„๊ฐ”์–ด๋„, ์ง์ „์˜ ์ด๋ ฅ์€ /etc/apt/trusted.gpg\~ ์— ๋‚จ์•„์žˆ๋‹ค.

kkumtree

plumber for infra

kkumtree

Source code on GitHub

ยฉ 2025 kkumtree and contributors All rights reserved.
Licensed under
CC BY-NC-ND 4.0