Sat Nov 05, 2016 9:47 am
[email protected]:~$ LANG=C sudo apt-get update
Hit http://auto.mirror.devuan.org jessie InRelease
Ign http://download.opensuse.org InRelease
Hit http://download.opensuse.org Release.gpg
Hit http://auto.mirror.devuan.org jessie-updates InRelease
Hit http://download.opensuse.org Release
Hit http://auto.mirror.devuan.org jessie-security InRelease
Get:1 http://auto.mirror.devuan.org jessie/main i386 Packages [6797 kB]
E: Release file for http://auto.mirror.devuan.org/merged/dists/jessie-security/InRelease is expired (invalid since 11h 28min 48s). Updates for this repository will not be applied.
[email protected]:~$
Sat Nov 05, 2016 12:06 pm
Sat Nov 05, 2016 3:04 pm
Sat Nov 05, 2016 3:38 pm
For anyone looking for a tempory workaround, try:
sudo apt-get -o Acquire::Check-Valid-Until=false update
Sat Nov 05, 2016 4:00 pm
Sat Nov 05, 2016 4:49 pm
Sun Nov 06, 2016 7:39 pm
Mon Nov 07, 2016 2:33 am
Tue Nov 08, 2016 10:26 am
Author: hellekin
Date: 2016-11-08 09:20 UTC
To: dng
Subject: [DNG] Recent Security Update Discrepancy
As you may have noticed, last week-end the security updates for JESSIE
and ASCII didn't work. We apologize for that glitch which reminds us
we're still in Beta. The problem was fixed and shouldn't happen again.
Recent changes in the devuan-keyring package made that the secondary
instance of Amprolla that's running the jessie-security and
ascii-security sessions was failing to check the cryptographic signature
on the InRelease file, and therefore was not updating packages.
The devuan-keyring was updated to comply to the latest format in Debian
and its derivatives that split the maintainers and archives/repositories
keyrings.
The secondary Amprolla session configuration was overlooked and kept
looking for the key in the old /usr/share/keyrings/devuan.gpg instead of
the new /usr/share/keyrings/devuan-archive-keyring.gpg.
The configuration file of Amprolla is supposed to seldom change if at
all, and the mind map of the sysadmins is now updated on this possibility.
The failure happened on a week-end, which made its resolution much
slower than usual (about 2 days), especially as everyone is rushing to
prepare a new beta version of JESSIE that will act as an Release Candidate.
Thank you for your patience,
==
hk