SVI/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-06-10 01:12:51 -04:00
Code Issues 3.0k Packages Projects Releases 10 Wiki Activity

Install fails due to expired PGP key #457

New Issue
Open
opened 2025-11-20 05:11:41 -05:00 by saavagebueno · 24 comments
saavagebueno commented 2025-11-20 05:11:41 -05:00
Owner
Copy Link

Originally created by @risasoft on GitHub (Sep 25, 2023).

Describe the problem
Attempt to install via cli:

curl -fsSL https://pkgs.netbird.io/install.sh | sh

I am getting error about PGP key:

➜  ~ curl -fsSL https://pkgs.netbird.io/install.sh | sh
NetBird UI installation will be omitted as Linux does not run desktop environment
The installation will be performed using apt package manager
Hit:1 http://nova.clouds.archive.ubuntu.com/ubuntu jammy InRelease
Hit:2 http://nova.clouds.archive.ubuntu.com/ubuntu jammy-updates InRelease                                                               
Hit:3 http://nova.clouds.archive.ubuntu.com/ubuntu jammy-backports InRelease                                                                                     
Hit:4 https://swupdate.openvpn.net/community/openvpn3/repos jammy InRelease                                                                                      
Get:5 https://pkgs.tailscale.com/stable/ubuntu jammy InRelease                                                                                                   
Hit:6 http://security.ubuntu.com/ubuntu jammy-security InRelease                            
Get:7 https://pkgs.netbird.io/debian stable InRelease [5934 B]        
Err:7 https://pkgs.netbird.io/debian stable InRelease
  The following signatures were invalid: EXPKEYSIG 83F79AD029778355 Wiretrustee <dev@wiretrustee.com>
Reading package lists... Done
W: GPG error: https://pkgs.netbird.io/debian stable InRelease: The following signatures were invalid: EXPKEYSIG 83F79AD029778355 Wiretrustee <dev@wiretrustee.com>
E: The repository 'https://pkgs.netbird.io/debian stable InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
Originally created by @risasoft on GitHub (Sep 25, 2023). **Describe the problem** Attempt to install via cli: ``` curl -fsSL https://pkgs.netbird.io/install.sh | sh``` I am getting error about PGP key: ``` ➜ ~ curl -fsSL https://pkgs.netbird.io/install.sh | sh NetBird UI installation will be omitted as Linux does not run desktop environment The installation will be performed using apt package manager Hit:1 http://nova.clouds.archive.ubuntu.com/ubuntu jammy InRelease Hit:2 http://nova.clouds.archive.ubuntu.com/ubuntu jammy-updates InRelease Hit:3 http://nova.clouds.archive.ubuntu.com/ubuntu jammy-backports InRelease Hit:4 https://swupdate.openvpn.net/community/openvpn3/repos jammy InRelease Get:5 https://pkgs.tailscale.com/stable/ubuntu jammy InRelease Hit:6 http://security.ubuntu.com/ubuntu jammy-security InRelease Get:7 https://pkgs.netbird.io/debian stable InRelease [5934 B] Err:7 https://pkgs.netbird.io/debian stable InRelease The following signatures were invalid: EXPKEYSIG 83F79AD029778355 Wiretrustee <dev@wiretrustee.com> Reading package lists... Done W: GPG error: https://pkgs.netbird.io/debian stable InRelease: The following signatures were invalid: EXPKEYSIG 83F79AD029778355 Wiretrustee <dev@wiretrustee.com> E: The repository 'https://pkgs.netbird.io/debian stable InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. ```
saavagebueno added the waiting-feedback label 2025-11-20 05:11:41 -05:00
saavagebueno commented 2025-11-20 05:11:42 -05:00
Author
Owner
Copy Link

@gene1wood commented on GitHub (Sep 25, 2023):

This key which expired today on 2023-09-25 is not only breaking new installs but apt upgrade also errors out now due to the key expiration

$ sudo bash -c "apt update && apt -y upgrade"
Hit:1 http://us.archive.ubuntu.com/ubuntu focal InRelease
...snip...
Err:6 https://pkgs.wiretrustee.com/debian stable InRelease                                                                                                     
  The following signatures were invalid: EXPKEYSIG 83F79AD029778355 Wiretrustee <dev@wiretrustee.com>
Hit:8 https://downloads.plex.tv/repo/deb public InRelease                                                                               
...snip...
Get:29 http://us.archive.ubuntu.com/ubuntu focal-security/multiverse amd64 c-n-f Metadata [548 B]                                                              
Fetched 11.8 MB in 35s (341 kB/s)                                                                                                                              
Reading package lists... Done
Building dependency tree       
Reading state information... Done
1 package can be upgraded. Run 'apt list --upgradable' to see it.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://pkgs.wiretrustee.com/debian stable InRelease: The following signatures were invalid: EXPKEYSIG 83F79AD029778355 Wiretrustee <dev@wiretrustee.com>
W: Failed to fetch https://pkgs.wiretrustee.com/debian/dists/stable/InRelease  The following signatures were invalid: EXPKEYSIG 83F79AD029778355 Wiretrustee <dev@wiretrustee.com>
W: Some index files failed to download. They have been ignored, or old ones used instead.
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Calculating upgrade... Done
The following packages will be upgraded:
  netbird
1 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 8,836 kB of archives.
After this operation, 0 B of additional disk space will be used.
Get:1 https://pkgs.wiretrustee.com/debian stable/main amd64 netbird amd64 0.23.4 [8,836 kB]
Fetched 8,836 kB in 18s (486 kB/s)                                                                                                                             
(Reading database ... 219541 files and directories currently installed.)
Preparing to unpack .../netbird_0.23.4_amd64.deb ...
Unpacking netbird (0.23.4) over (0.23.2) ...
Setting up netbird (0.23.4) ...
 Post Install of an upgrade
 Stopping the service
Netbird has been uninstalled
Netbird service has been installed
Netbird service has been started
@gene1wood commented on GitHub (Sep 25, 2023): This key which expired today on 2023-09-25 is not only breaking new installs but `apt upgrade` also errors out now due to the key expiration ``` $ sudo bash -c "apt update && apt -y upgrade" Hit:1 http://us.archive.ubuntu.com/ubuntu focal InRelease ...snip... Err:6 https://pkgs.wiretrustee.com/debian stable InRelease The following signatures were invalid: EXPKEYSIG 83F79AD029778355 Wiretrustee <dev@wiretrustee.com> Hit:8 https://downloads.plex.tv/repo/deb public InRelease ...snip... Get:29 http://us.archive.ubuntu.com/ubuntu focal-security/multiverse amd64 c-n-f Metadata [548 B] Fetched 11.8 MB in 35s (341 kB/s) Reading package lists... Done Building dependency tree Reading state information... Done 1 package can be upgraded. Run 'apt list --upgradable' to see it. W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://pkgs.wiretrustee.com/debian stable InRelease: The following signatures were invalid: EXPKEYSIG 83F79AD029778355 Wiretrustee <dev@wiretrustee.com> W: Failed to fetch https://pkgs.wiretrustee.com/debian/dists/stable/InRelease The following signatures were invalid: EXPKEYSIG 83F79AD029778355 Wiretrustee <dev@wiretrustee.com> W: Some index files failed to download. They have been ignored, or old ones used instead. Reading package lists... Done Building dependency tree Reading state information... Done Calculating upgrade... Done The following packages will be upgraded: netbird 1 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. Need to get 8,836 kB of archives. After this operation, 0 B of additional disk space will be used. Get:1 https://pkgs.wiretrustee.com/debian stable/main amd64 netbird amd64 0.23.4 [8,836 kB] Fetched 8,836 kB in 18s (486 kB/s) (Reading database ... 219541 files and directories currently installed.) Preparing to unpack .../netbird_0.23.4_amd64.deb ... Unpacking netbird (0.23.4) over (0.23.2) ... Setting up netbird (0.23.4) ... Post Install of an upgrade Stopping the service Netbird has been uninstalled Netbird service has been installed Netbird service has been started ```
saavagebueno commented 2025-11-20 05:11:42 -05:00
Author
Owner
Copy Link

@mlsmaycon commented on GitHub (Sep 26, 2023):

@gene1wood @risasoft hello folks, our GPG public keys for deb and rpm based packages have expired. We updated them, and for you to be able to use the repository, you need to reimport the keys with the following commands:

deb based (Ubuntu, Debian, etc):

curl -sSL https://pkgs.netbird.io/debian/public.key | sudo gpg --dearmor --output /usr/share/keyrings/netbird-archive-keyring.gpg

rpm based (Centos, Fedora, Rocky, etc):

for pubring in /var/cache/dnf/NetBird-*/pubring /var/lib/yum/repos/*/*/NetBird/gpgdir /var/lib/yum/repos/*/*/NetBird/gpgdir-ro
do
  gpg --homedir $pubring --delete-key AA9C09AA9DEA2F58112B40DFDFFEAB2FD267A61F
done
@mlsmaycon commented on GitHub (Sep 26, 2023): @gene1wood @risasoft hello folks, our GPG public keys for deb and rpm based packages have expired. We updated them, and for you to be able to use the repository, you need to reimport the keys with the following commands: deb based (Ubuntu, Debian, etc): ``` curl -sSL https://pkgs.netbird.io/debian/public.key | sudo gpg --dearmor --output /usr/share/keyrings/netbird-archive-keyring.gpg ``` rpm based (Centos, Fedora, Rocky, etc): ```shell for pubring in /var/cache/dnf/NetBird-*/pubring /var/lib/yum/repos/*/*/NetBird/gpgdir /var/lib/yum/repos/*/*/NetBird/gpgdir-ro do gpg --homedir $pubring --delete-key AA9C09AA9DEA2F58112B40DFDFFEAB2FD267A61F done ```
saavagebueno commented 2025-11-20 05:11:43 -05:00
Author
Owner
Copy Link

@PanagiotisS commented on GitHub (Sep 26, 2023):

Hello, the key https://pkgs.netbird.io/debian/public.key still reports that it has expired yesterday

$ curl -sSL https://pkgs.netbird.io/debian/public.key -o public.key 
$ gpg public.key                                                                                                                                        
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa3072 2021-09-25 [SC]
      EFE37DF047DF7CCDF1FC54FA83F79AD029778355
uid           Wiretrustee <dev@wiretrustee.com>
sub   rsa3072 2021-09-25 [E] [expired: 2023-09-25]
@PanagiotisS commented on GitHub (Sep 26, 2023): Hello, the key `https://pkgs.netbird.io/debian/public.key` still reports that it has expired yesterday ``` $ curl -sSL https://pkgs.netbird.io/debian/public.key -o public.key $ gpg public.key gpg: WARNING: no command supplied. Trying to guess what you mean ... pub rsa3072 2021-09-25 [SC] EFE37DF047DF7CCDF1FC54FA83F79AD029778355 uid Wiretrustee <dev@wiretrustee.com> sub rsa3072 2021-09-25 [E] [expired: 2023-09-25] ```
saavagebueno commented 2025-11-20 05:11:43 -05:00
Author
Owner
Copy Link

@gene1wood commented on GitHub (Sep 26, 2023):

I think it's correct now

$ curl -sSL https://pkgs.netbird.io/debian/public.key -o public.key
$ gpg public.key
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa3072 2021-09-25 [SC]
      EFE37DF047DF7CCDF1FC54FA83F79AD029778355
uid           Wiretrustee <dev@wiretrustee.com>
sub   rsa3072 2021-09-25 [E]
@gene1wood commented on GitHub (Sep 26, 2023): I think it's correct now ``` $ curl -sSL https://pkgs.netbird.io/debian/public.key -o public.key $ gpg public.key gpg: WARNING: no command supplied. Trying to guess what you mean ... pub rsa3072 2021-09-25 [SC] EFE37DF047DF7CCDF1FC54FA83F79AD029778355 uid Wiretrustee <dev@wiretrustee.com> sub rsa3072 2021-09-25 [E] ```
saavagebueno commented 2025-11-20 05:11:43 -05:00
Author
Owner
Copy Link

@gene1wood commented on GitHub (Sep 26, 2023):

@mlsmaycon Does this mean that every existing Linux netbird user will have to do this manual process? If so you may want to work on some communication (blog post, i dunno) since every Linux user will encounter this and maybe not find this GitHub issue.

@gene1wood commented on GitHub (Sep 26, 2023): @mlsmaycon Does this mean that every existing Linux netbird user will have to do this manual process? If so you may want to work on some communication (blog post, i dunno) since every Linux user will encounter this and maybe not find this GitHub issue.
saavagebueno commented 2025-11-20 05:11:43 -05:00
Author
Owner
Copy Link

@gene1wood commented on GitHub (Sep 26, 2023):

Note that the instructions above work based on the assumption that the expired key file is located at /usr/share/keyrings/netbird-archive-keyring.gpg but mine was located at

/usr/share/keyrings/wiretrustee-archive-keyring.gpg

so I needed to remove that key before creating the new key.

@gene1wood commented on GitHub (Sep 26, 2023): Note that the [instructions above](https://github.com/netbirdio/netbird/issues/1168#issuecomment-1735171804) work based on the assumption that the expired key file is located at ` /usr/share/keyrings/netbird-archive-keyring.gpg` but mine was located at `/usr/share/keyrings/wiretrustee-archive-keyring.gpg` so I needed to remove that key before creating the new key.
saavagebueno commented 2025-11-20 05:11:43 -05:00
Author
Owner
Copy Link

@shvchk commented on GitHub (Sep 27, 2023):

@gene1wood here's a list of known possible (old) keys and repo source files locations on Debian / Ubuntu + proper manual fix: https://github.com/netbirdio/public-keys/issues/1#issuecomment-1736322449

install.sh has been updated, so at least on Debian it should now fix all problems with expired keys or wrong repo source file location. Looks like it will also fix problems on RPM distros, although I didn't test that.

curl -fsSL https://pkgs.netbird.io/install.sh | sh

Remaining things to fix / check, imo:

  • Sync control panel Add peer guide with other docs (file locations)
  • Test if install.sh fixes problems with keys on RPM distros
  • Mention install.sh in the main Installation guide, now it seems to be only mentioned on the Add peer page
@shvchk commented on GitHub (Sep 27, 2023): @gene1wood here's a list of known possible (old) keys and repo source files locations on Debian / Ubuntu + proper manual fix: https://github.com/netbirdio/public-keys/issues/1#issuecomment-1736322449 `install.sh` has been updated, so at least on Debian it should now fix all problems with expired keys or wrong repo source file location. Looks like it will also fix problems on RPM distros, although I didn't test that. ```sh curl -fsSL https://pkgs.netbird.io/install.sh | sh ``` Remaining things to fix / check, imo: - [x] Sync control panel _Add peer_ guide with other docs (file locations) - [ ] Test if `install.sh` fixes problems with keys on RPM distros - [x] Mention `install.sh` in the [main Installation guide](https://docs.netbird.io/how-to/installation), now it seems to be only mentioned on the _Add peer_ page
saavagebueno commented 2025-11-20 05:11:43 -05:00
Author
Owner
Copy Link

@lfarkas commented on GitHub (Oct 8, 2023):

fedora repo contains this:

name=Wiretrustee
baseurl=https://pkgs.wiretrustee.com/yum/
enabled=1
gpgcheck=0
gpgkey=https://pkgs.wiretrustee.com/yum/repodata/repomd.xml.key
repo_gpgcheck=1

and the gpgkey url still contains this:

pub   rsa3072 2021-09-25 [SC]
      AA9C09AA9DEA2F58112B40DFDFFEAB2FD267A61F
uid           Wiretrustee <dev@wiretrustee.com>
sub   rsa3072 2021-09-25 [E]

it means that the key file on your own server is still the old one!
it has nothing to do with my keyring or anything else!

so why don't you simple replace the file???

@lfarkas commented on GitHub (Oct 8, 2023): fedora repo contains this: ```[Wiretrustee] name=Wiretrustee baseurl=https://pkgs.wiretrustee.com/yum/ enabled=1 gpgcheck=0 gpgkey=https://pkgs.wiretrustee.com/yum/repodata/repomd.xml.key repo_gpgcheck=1 ``` and the gpgkey url still contains this: ``` pub rsa3072 2021-09-25 [SC] AA9C09AA9DEA2F58112B40DFDFFEAB2FD267A61F uid Wiretrustee <dev@wiretrustee.com> sub rsa3072 2021-09-25 [E] ``` it means that the key file on your own server is still the old one! it has nothing to do with my keyring or anything else! so why don't you simple replace the file???
saavagebueno commented 2025-11-20 05:11:44 -05:00
Author
Owner
Copy Link

@lfarkas commented on GitHub (Oct 13, 2023):

is it that complicated to replace a file???

@lfarkas commented on GitHub (Oct 13, 2023): is it that complicated to replace a file???
saavagebueno commented 2025-11-20 05:11:44 -05:00
Author
Owner
Copy Link

@mlsmaycon commented on GitHub (Oct 13, 2023):

@lfarkas It might be a misunderstanding, the file has been replaced, and the output is correct.

Can you test in a clean environment by running a fedora docker container and running the install script as follows?

curl -fsSL https://pkgs.netbird.io/install.sh | sh
@mlsmaycon commented on GitHub (Oct 13, 2023): @lfarkas It might be a misunderstanding, the file has been replaced, and the output is correct. Can you test in a clean environment by running a fedora docker container and running the install script as follows? ``` curl -fsSL https://pkgs.netbird.io/install.sh | sh ```
saavagebueno commented 2025-11-20 05:11:44 -05:00
Author
Owner
Copy Link

@lfarkas commented on GitHub (Oct 13, 2023):

sorry a rpm -e `rpm -qa|grep gpg-pubkey help but it's would be nice to document it

@lfarkas commented on GitHub (Oct 13, 2023): sorry a ```rpm -e `rpm -qa|grep gpg-pubkey``` help but it's would be nice to document it
saavagebueno commented 2025-11-20 05:11:44 -05:00
Author
Owner
Copy Link

@fluidum commented on GitHub (Oct 19, 2023):

curl -fsSL https://pkgs.netbird.io/install.sh | sh

Err:6 https://pkgs.netbird.io/debian stable InRelease                            
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 83F79AD029778355
Hit:16 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu jammy InRelease
Reading package lists... Done
W: GPG error: https://pkgs.netbird.io/debian stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 83F79AD029778355
E: The repository 'https://pkgs.netbird.io/debian stable InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

gpg /usr/share/keyrings/netbird-archive-keyring.gpg
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa3072 2021-09-25 [SC]
      EFE37DF047DF7CCDF1FC54FA83F79AD029778355
uid           Wiretrustee <dev@wiretrustee.com>
sub   rsa3072 2021-09-25 [E]

Ubuntu 22.04.3 LTS

EDIT: weird, works when doing so via Dockerfile

FROM ubuntu:latest
RUN apt update && \
apt install curl gpg -y && \
curl -fsSL https://pkgs.netbird.io/install.sh | sh
@fluidum commented on GitHub (Oct 19, 2023): > curl -fsSL https://pkgs.netbird.io/install.sh | sh ``` Err:6 https://pkgs.netbird.io/debian stable InRelease The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 83F79AD029778355 Hit:16 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu jammy InRelease Reading package lists... Done W: GPG error: https://pkgs.netbird.io/debian stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 83F79AD029778355 E: The repository 'https://pkgs.netbird.io/debian stable InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. gpg /usr/share/keyrings/netbird-archive-keyring.gpg gpg: WARNING: no command supplied. Trying to guess what you mean ... pub rsa3072 2021-09-25 [SC] EFE37DF047DF7CCDF1FC54FA83F79AD029778355 uid Wiretrustee <dev@wiretrustee.com> sub rsa3072 2021-09-25 [E] ``` Ubuntu 22.04.3 LTS EDIT: weird, works when doing so via Dockerfile ``` FROM ubuntu:latest RUN apt update && \ apt install curl gpg -y && \ curl -fsSL https://pkgs.netbird.io/install.sh | sh ```
saavagebueno commented 2025-11-20 05:11:44 -05:00
Author
Owner
Copy Link

@shvchk commented on GitHub (Oct 19, 2023):

@fluidum Try to delete old keys and repo source files manually an then re-add: https://github.com/netbirdio/public-keys/issues/1#issuecomment-1736322449

@shvchk commented on GitHub (Oct 19, 2023): @fluidum Try to delete old keys and repo source files manually an then re-add: https://github.com/netbirdio/public-keys/issues/1#issuecomment-1736322449
saavagebueno commented 2025-11-20 05:11:44 -05:00
Author
Owner
Copy Link

@fluidum commented on GitHub (Oct 22, 2023):

@fluidum Try to delete old keys and repo source files manually an then re-add: netbirdio/public-keys#1 (comment)

FYI: Same result as before. It looks like it needs some deeper knowledge about apt troubleshooting in Ubuntu for some users.

root@host:/etc/apt# sudo rm -f \
  /etc/apt/sources.list.d/netbird.list \
  /etc/apt/sources.list.d/wiretrustee.list \
  /etc/apt/trusted.gpg.d/wiretrustee.gpg \
  /usr/share/keyrings/netbird-archive-keyring.gpg \
  /usr/share/keyrings/wiretrustee-archive-keyring.gpg

curl -sSL https://pkgs.netbird.io/debian/public.key \
| sudo gpg --dearmor -o /usr/share/keyrings/netbird-archive-keyring.gpg

echo 'deb [signed-by=/usr/share/keyrings/netbird-archive-keyring.gpg] https://pkgs.netbird.io/debian stable main' \
| sudo tee /etc/apt/sources.list.d/netbird.list

sudo apt update
deb [signed-by=/usr/share/keyrings/netbird-archive-keyring.gpg] https://pkgs.netbird.io/debian stable main
Hit:1 http://asi-fs-n.contabo.net/ubuntu jammy InRelease
Hit:2 http://asi-fs-n.contabo.net/ubuntu jammy-updates InRelease                                                           
Hit:3 http://asi-fs-n.contabo.net/ubuntu jammy-backports InRelease                                                         
Get:4 https://pkgs.netbird.io/debian stable InRelease [5934 B]                                                                                      
Get:5 https://esm.ubuntu.com/apps/ubuntu jammy-apps-security InRelease [7553 B]                                                                     
Hit:6 https://pkg.cloudflare.com/cloudflared jammy InRelease        
Hit:7 http://security.ubuntu.com/ubuntu jammy-security InRelease    
Get:8 https://esm.ubuntu.com/apps/ubuntu jammy-apps-updates InRelease [7456 B]
Get:9 https://esm.ubuntu.com/infra/ubuntu jammy-infra-security InRelease [7450 B]
Get:10 https://esm.ubuntu.com/infra/ubuntu jammy-infra-updates InRelease [7449 B]
Err:4 https://pkgs.netbird.io/debian stable InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 83F79AD029778355
Reading package lists... Done
W: GPG error: https://pkgs.netbird.io/debian stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 83F79AD029778355
E: The repository 'https://pkgs.netbird.io/debian stable InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details
@fluidum commented on GitHub (Oct 22, 2023): > @fluidum Try to delete old keys and repo source files manually an then re-add: [netbirdio/public-keys#1 (comment)](https://github.com/netbirdio/public-keys/issues/1#issuecomment-1736322449) FYI: Same result as before. It looks like it needs some deeper knowledge about apt troubleshooting in Ubuntu for some users. ``` root@host:/etc/apt# sudo rm -f \ /etc/apt/sources.list.d/netbird.list \ /etc/apt/sources.list.d/wiretrustee.list \ /etc/apt/trusted.gpg.d/wiretrustee.gpg \ /usr/share/keyrings/netbird-archive-keyring.gpg \ /usr/share/keyrings/wiretrustee-archive-keyring.gpg curl -sSL https://pkgs.netbird.io/debian/public.key \ | sudo gpg --dearmor -o /usr/share/keyrings/netbird-archive-keyring.gpg echo 'deb [signed-by=/usr/share/keyrings/netbird-archive-keyring.gpg] https://pkgs.netbird.io/debian stable main' \ | sudo tee /etc/apt/sources.list.d/netbird.list sudo apt update deb [signed-by=/usr/share/keyrings/netbird-archive-keyring.gpg] https://pkgs.netbird.io/debian stable main Hit:1 http://asi-fs-n.contabo.net/ubuntu jammy InRelease Hit:2 http://asi-fs-n.contabo.net/ubuntu jammy-updates InRelease Hit:3 http://asi-fs-n.contabo.net/ubuntu jammy-backports InRelease Get:4 https://pkgs.netbird.io/debian stable InRelease [5934 B] Get:5 https://esm.ubuntu.com/apps/ubuntu jammy-apps-security InRelease [7553 B] Hit:6 https://pkg.cloudflare.com/cloudflared jammy InRelease Hit:7 http://security.ubuntu.com/ubuntu jammy-security InRelease Get:8 https://esm.ubuntu.com/apps/ubuntu jammy-apps-updates InRelease [7456 B] Get:9 https://esm.ubuntu.com/infra/ubuntu jammy-infra-security InRelease [7450 B] Get:10 https://esm.ubuntu.com/infra/ubuntu jammy-infra-updates InRelease [7449 B] Err:4 https://pkgs.netbird.io/debian stable InRelease The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 83F79AD029778355 Reading package lists... Done W: GPG error: https://pkgs.netbird.io/debian stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 83F79AD029778355 E: The repository 'https://pkgs.netbird.io/debian stable InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details ```
saavagebueno commented 2025-11-20 05:11:44 -05:00
Author
Owner
Copy Link

@shvchk commented on GitHub (Oct 23, 2023):

@fluidum strange, maybe you have netbird added in some other repo source file? you can find that with sudo grep -riE 'netbird|wiretrustee' /etc/apt

@shvchk commented on GitHub (Oct 23, 2023): @fluidum strange, maybe you have netbird added in some other repo source file? you can find that with `sudo grep -riE 'netbird|wiretrustee' /etc/apt`
saavagebueno commented 2025-11-20 05:11:45 -05:00
Author
Owner
Copy Link

@Hiyajomaho-num9 commented on GitHub (Nov 10, 2023):

image
Why is the server not deployed in the United States?
The download speed is too slow.

@Hiyajomaho-num9 commented on GitHub (Nov 10, 2023): ![image](https://github.com/netbirdio/netbird/assets/49302073/be3403c7-6d3e-424e-9032-f97a03385d6a) Why is the server not deployed in the United States? The download speed is too slow.
saavagebueno commented 2025-11-20 05:11:45 -05:00
Author
Owner
Copy Link

@fluidum commented on GitHub (Dec 15, 2023):

My solution was:

chmod go+r /usr/share/keyrings/netbird-archive-keyring.gpg

@fluidum commented on GitHub (Dec 15, 2023): My solution was: `chmod go+r /usr/share/keyrings/netbird-archive-keyring.gpg`
saavagebueno commented 2025-11-20 05:11:45 -05:00
Author
Owner
Copy Link

@bmcgonag commented on GitHub (Feb 27, 2024):

@fluidum is a rockstar. That is what worked for me with a ubuntu 22.04 LXC container in Proxmox. Run that command, then do the quick install command again, and it worked.

@bmcgonag commented on GitHub (Feb 27, 2024): @fluidum is a rockstar. That is what worked for me with a ubuntu 22.04 LXC container in Proxmox. Run that command, then do the quick install command again, and it worked.
saavagebueno commented 2025-11-20 05:11:45 -05:00
Author
Owner
Copy Link

@PapaZigE commented on GitHub (Nov 17, 2024):

Hello, this is still an issue...

curl -fsSL https://pkgs.netbird.io/install.sh | sh
NetBird UI installation will be omitted as Linux does not run desktop environment
The installation will be performed using apt package manager
Hit:1 https://download.docker.com/linux/ubuntu jammy InRelease
Hit:2 http://security.ubuntu.com/ubuntu jammy-security InRelease                                           
Hit:3 http://archive.ubuntu.com/ubuntu jammy InRelease                                                     
Hit:4 https://esm.ubuntu.com/cis/ubuntu jammy InRelease                                     
Hit:5 https://esm.ubuntu.com/apps/ubuntu jammy-apps-security InRelease                      
Hit:6 https://esm.ubuntu.com/apps/ubuntu jammy-apps-updates InRelease                       
Hit:7 http://archive.ubuntu.com/ubuntu jammy-updates InRelease                              
Hit:8 https://esm.ubuntu.com/infra/ubuntu jammy-infra-security InRelease                    
Hit:9 https://esm.ubuntu.com/infra/ubuntu jammy-infra-updates InRelease                     
Hit:10 http://archive.ubuntu.com/ubuntu jammy-backports InRelease                           
Get:11 https://pkgs.netbird.io/debian stable InRelease [5944 B]
Err:11 https://pkgs.netbird.io/debian stable InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 83F79AD029778355
Reading package lists... Done
W: GPG error: https://pkgs.netbird.io/debian stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 83F79AD029778355
E: The repository 'https://pkgs.netbird.io/debian stable InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.```
@PapaZigE commented on GitHub (Nov 17, 2024): Hello, this is still an issue... ``` curl -fsSL https://pkgs.netbird.io/install.sh | sh NetBird UI installation will be omitted as Linux does not run desktop environment The installation will be performed using apt package manager Hit:1 https://download.docker.com/linux/ubuntu jammy InRelease Hit:2 http://security.ubuntu.com/ubuntu jammy-security InRelease Hit:3 http://archive.ubuntu.com/ubuntu jammy InRelease Hit:4 https://esm.ubuntu.com/cis/ubuntu jammy InRelease Hit:5 https://esm.ubuntu.com/apps/ubuntu jammy-apps-security InRelease Hit:6 https://esm.ubuntu.com/apps/ubuntu jammy-apps-updates InRelease Hit:7 http://archive.ubuntu.com/ubuntu jammy-updates InRelease Hit:8 https://esm.ubuntu.com/infra/ubuntu jammy-infra-security InRelease Hit:9 https://esm.ubuntu.com/infra/ubuntu jammy-infra-updates InRelease Hit:10 http://archive.ubuntu.com/ubuntu jammy-backports InRelease Get:11 https://pkgs.netbird.io/debian stable InRelease [5944 B] Err:11 https://pkgs.netbird.io/debian stable InRelease The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 83F79AD029778355 Reading package lists... Done W: GPG error: https://pkgs.netbird.io/debian stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 83F79AD029778355 E: The repository 'https://pkgs.netbird.io/debian stable InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details.```
saavagebueno commented 2025-11-20 05:11:45 -05:00
Author
Owner
Copy Link

@mgarces commented on GitHub (Nov 18, 2024):

Hi there,
I've tested this on Jammy Jellyfish (22.04.5 LTS) and several other versions of Ubuntu, and I can't replicate this issue; have you ran a full update (apt update && apt upgrade before running the install script?

@mgarces commented on GitHub (Nov 18, 2024): Hi there, I've tested this on Jammy Jellyfish (`22.04.5 LTS`) and several other versions of Ubuntu, and I can't replicate this issue; have you ran a full update (`apt update && apt upgrade` before running the install script?
saavagebueno commented 2025-11-20 05:11:45 -05:00
Author
Owner
Copy Link

@PapaZigE commented on GitHub (Nov 18, 2024):

@mgarces, yes I've removed all references to Netbird repos, did an update and upgrade, downloaded the install script and tried again. Received the errors above. I'm on Ubuntu 22.04.5 LTS. It must be my OS or there's something wrong with apt because I was able to install it on my on-prem Ubuntu server with no issue... Not sure why this happens or how to fix but it happened earlier this year as well and seemed to fix. Unfortunately, still an issue for me :/. Thanks for you help btw!

@PapaZigE commented on GitHub (Nov 18, 2024): @mgarces, yes I've removed all references to Netbird repos, did an update and upgrade, downloaded the install script and tried again. Received the errors above. I'm on Ubuntu 22.04.5 LTS. It must be my OS or there's something wrong with apt because I was able to install it on my on-prem Ubuntu server with no issue... Not sure why this happens or how to fix but it happened earlier this year as well and seemed to fix. Unfortunately, still an issue for me :/. Thanks for you help btw!
saavagebueno commented 2025-11-20 05:11:46 -05:00
Author
Owner
Copy Link

@senorsmile commented on GitHub (Jul 28, 2025):

@mgarces, yes I've removed all references to Netbird repos, did an update and upgrade, downloaded the install script and tried again. Received the errors above. I'm on Ubuntu 22.04.5 LTS. It must be my OS or there's something wrong with apt because I was able to install it on my on-prem Ubuntu server with no issue... Not sure why this happens or how to fix but it happened earlier this year as well and seemed to fix. Unfortunately, still an issue for me :/. Thanks for you help btw!

I have a 22.04 server with the exact same error and tried exactly the same but still run into this issue.

@senorsmile commented on GitHub (Jul 28, 2025): > [@mgarces](https://github.com/mgarces), yes I've removed all references to Netbird repos, did an update and upgrade, downloaded the install script and tried again. Received the errors above. I'm on Ubuntu 22.04.5 LTS. It must be my OS or there's something wrong with apt because I was able to install it on my on-prem Ubuntu server with no issue... Not sure why this happens or how to fix but it happened earlier this year as well and seemed to fix. Unfortunately, still an issue for me :/. Thanks for you help btw! I have a 22.04 server with the exact same error and tried exactly the same but still run into this issue.
saavagebueno commented 2025-11-20 05:11:46 -05:00
Author
Owner
Copy Link

@senorsmile commented on GitHub (Jul 28, 2025):

I found a solution that worked for me:

https://github.com/netbirdio/netbird/issues/1168#issuecomment-1858058780

@senorsmile commented on GitHub (Jul 28, 2025): I found a solution that worked for me: https://github.com/netbirdio/netbird/issues/1168#issuecomment-1858058780
saavagebueno commented 2025-11-20 05:11:46 -05:00
Author
Owner
Copy Link

@Joshiy13 commented on GitHub (Jul 30, 2025):

Hi, im on Fedora 42 and none of the solutions in this issue work for me. Installing it works fine but when doing updates via kde discover it throws this error:
/var/cache/PackageKit/42/metadata/NetBird-42-x86_64/packages/netbird_0.52.1_linux_amd64.rpm could not be verified. /var/cache/PackageKit/42/metadata/NetBird-42-x86_64/packages/netbird_0.52.1_linux_amd64.rpm: digest: SIGNATURE: NOT OK

@Joshiy13 commented on GitHub (Jul 30, 2025): Hi, im on Fedora 42 and none of the solutions in this issue work for me. Installing it works fine but when doing updates via kde discover it throws this error: `/var/cache/PackageKit/42/metadata/NetBird-42-x86_64/packages/netbird_0.52.1_linux_amd64.rpm could not be verified. /var/cache/PackageKit/42/metadata/NetBird-42-x86_64/packages/netbird_0.52.1_linux_amd64.rpm: digest: SIGNATURE: NOT OK`
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2022 Q1
2022 Q1
accessibility
acl
agent
agent
Android
Android
api
authentik
automation
azure
battery-usage
bug
cache
client
client-ui
cloud
cloud-only
cloudflare
community
compatibility
config-idp
config-issue
connection
contribution
coturn
cross-vpn
dashboard
data-usage
distribution
dns
docker
documentation
duplicate
enhancement
enhancement
event-stream
feature-request
freebsd
getting-started
go
good first issue
gui
help wanted
home-assistant
idp
inconsistency
integration
integrations
ios
ipv6
jwt
k8s
keycloak
linux
login
macos
management-service
missing-docs
mobile
moved-internal
needs-review
netbird-ui
networking
new-platform
nginx
notification
okta
openwrt
packaging
peer-management
peer-management
peer-management
performance
postgres
posture-checks
psk
pull-request
Mirrored from GitHub Pull Request
 question
refactor
relay
release
rfc
routes
security
security-related
self-hosting
server
signal
sleep-issue
ssh
ssl
status
store
synology
system-compatibility-issue
test-suite
third-party-integration
triage
triage-needed
troubleshooting
UX
waiting-feedback
windows
wontfix
zitadel
No Label waiting-feedback
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#457
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?