The key for the PPA is now expired, which breaks apt on servers:
$ sudo apt update
...
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ppa.edx.org xenial InRelease: The following signatures were invalid: KEYEXPIRED 1638722487 KEYEXPIRED 1638722487 KEYEXPIRED 1638722487
W: http://packages.elastic.co/elasticsearch/1.5/debian/dists/stable/Release.gpg: Signature by key 46095ACC8548582C1A2699A9D27D666CD88E42B4 uses weak digest algorithm (SHA1)
W: Failed to fetch http://ppa.edx.org/dists/xenial/InRelease The following signatures were invalid: KEYEXPIRED 1638722487 KEYEXPIRED 1638722487 KEYEXPIRED 1638722487
$ sudo apt-key list | grep -A 1 expired
pub 4096R/69464050 2015-12-16 [expired: 2021-12-05]
uid edX Inc. (edX PPA) <admin+ppa@edx.org>
As far as I can tell from the playbooks, that PPA is only used to install a python 2.7 package on Ubuntu Trusty. We don't use that, but it's still breaking things for us, so we should probably just remove it.
Additionally, I've confirmed that no packages appear to actually be installed from the openedx PPA:
So, folks who know more about Open edX than me, please confirm that we don't actually rely on that PPA for anything.
This PR will stop us from configuring that PPA on new deploys but does not remove it from existing systems. If you run into the error on existing system, just remove the /etc/apt/sources.list.d/ppa_edx_org.list file.
The key for the PPA is now expired, which breaks apt on servers:
As far as I can tell from the playbooks, that PPA is only used to install a python 2.7 package on Ubuntu Trusty. We don't use that, but it's still breaking things for us, so we should probably just remove it.
Additionally, I've confirmed that no packages appear to actually be installed from the openedx PPA:
So, folks who know more about Open edX than me, please confirm that we don't actually rely on that PPA for anything.
This PR will stop us from configuring that PPA on new deploys but does not remove it from existing systems. If you run into the error on existing system, just remove the
/etc/apt/sources.list.d/ppa_edx_org.list
file.