I think I was able to update 2.9.2 to 2.9.3 successfully using sudo apt update. However, today I'm getting a key error:
Code:
Get:7 http://download.opensuse.org/repositories/science:/EtherLab/Debian_12 ./ InRelease [1,575 B]
Hit:8 https://www.linuxcnc.org bookworm InRelease
Err:7 http://download.opensuse.org/repositories/science:/EtherLab/Debian_12 ./ InRelease
The following signatures were invalid: EXPKEYSIG A94819A7CB97A204 science:EtherLab OBS Project <science:EtherLab@build.opensuse.org>
Fetched 1,575 B in 3s (564 B/s)
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/science:/EtherLab/Debian_12 ./ InRelease: The following signatures were invalid: EXPKEYSIG A94819A7CB97A204 science:EtherLab OBS Project <science:EtherLab@build.opensuse.org>
W: Failed to fetch http://download.opensuse.org/repositories/science:/EtherLab/Debian_12/./InRelease The following signatures were invalid: EXPKEYSIG A94819A7CB97A204 science:EtherLab OBS Project <science:EtherLab@build.opensuse.org>
W: Some index files failed to download. They have been ignored, or old ones used instead.
This key error is really odd because that repo is not listed in /etc/apt/sources.list. Oh wait, found it under /etc/apt/sources.list.d/ighvh.sources. Seems it may have something to do with our EtherCAT?
build.opensuse.org/projects/science:EtherLab/prjconf
Looking further, they have a page for the key:
build.opensuse.org/projects/science:EtherLab/signing_keys
and a link there to download an "armored version" of a supposedly newer key (says it now expires in two years.)
Thinking maybe if that key were updated, things would improve, researched how to add it and did the following:
Code:
1. Downloaded the latest `science_EtherLab_key.gpg` to `~/Downloads`
2. cd there, then `gpg --dearmor science_EtherLab_key.gpg`, which created a `science_EtherLab_key.gpg.gpg` file.
3. `su` to temporarly be root, do `cp science_EtherLab_key.gpg.gpg /usr/share/keyrings/etherlab-archive-keyring.gpg` which copies the file into the appropriate system folder.
4. `exit` to quit root. Try `sudo apt update` again: nope, keysig still invalid.
As a temporary work-around (I'm not using EtherCAT), `sudo mv /etc/apt/sources.list.d/ighvh.sources /etc/apt/sources.list.d/ighvh.sources.disabled` will disable that source and the resulting error. But this should be investigated properly for the next .iso (if it hasn't already.)
