search

flatpak / flatpak

Linux application sandboxing and distribution framework
https://flatpak.org
GNU Lesser General Public License v2.1
4.23k stars 404 forks source link

Expired GPG key leads to a cryptic error "GPG signatures found, but none are in trusted keyring" instead of telling that the key expired #2503

Open jiri-janousek opened 5 years ago

jiri-janousek commented 5 years ago

Linux distribution and version

Fedora 29

Flatpak version

Flatpak 1.0.6

Description of the problem

When a GPG key in Flatpak keyring expires, error messages "GPG signatures found, but none are in trusted keyring" are shown. It is very misleading because the key actually exists in the Flatpak keyring. Could Flatpak show something like "GPG key found in the trusted keyring, but it has expired."?

Steps to reproduce

Add a repo with an expired key, e.g. expiredkey.flatpakrepo.txt

$ flatpak remote-add tmp --from expiredkey.flatpakrepo
error: GPG signatures found, but none are in trusted keyring
matthiasclasen commented 5 years ago

This is missing OSTree apis - it simply doesn't give us anything other than this error message.

The best I can achieve by hacking up the code that generates that message is this:

flatpak remote-add --user flath ~/Downloads/expiredkey.flatpakrepo
error: GPG signatures found, but none are in trusted keyring 
  Signature made Fri 28 Dec 2018 09:13:51 AM EST using RSA key ID 7E92267ADA184021
  BAD signature from "Tiliado Flatpaks <flatpaks@tiliado.eu>"

So it seems that even gpg itself does not flag this key as expired, but rather just generically 'BAD'

jiri-janousek commented 5 years ago

So it seems that even gpg itself does not flag this key as expired, but rather just generically 'BAD'

Is it possible to distinguish between "the corresponding key was not found in the keyring" and "the key found but the signature is bad"? One could then investigate why the signature is bad instead of wondering why flatpak/ostree cannot find the key in the trusted keyring while it is present in /var/lib/flatpak/repo.

HenriqueCSJ commented 5 years ago

I'm having the same error, also in Fedora 29:

[henrique@cpd08 ~] $ flatpak update
Looking for updates...
flatpak update: Error updating remote metadata for 'flathub': GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.videolan.VLC.Locale/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.videolan.VLC.Locale/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.kde.kalzium.Locale/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.kde.kalzium.Locale/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.kde.Sdk/x86_64/5.11 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.kde.Sdk/x86_64/5.11 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.kde.Sdk.Locale/x86_64/5.11 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.kde.Sdk.Locale/x86_64/5.11 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.kde.Platform/x86_64/5.9 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.kde.Platform/x86_64/5.9 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.kde.Platform/x86_64/5.12 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.kde.Platform/x86_64/5.12 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.kde.Platform/x86_64/5.11 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.kde.Platform/x86_64/5.11 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.kde.Platform.Locale/x86_64/5.9 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.kde.Platform.Locale/x86_64/5.9 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.kde.Platform.Locale/x86_64/5.12 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.kde.Platform.Locale/x86_64/5.12 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.kde.Platform.Locale/x86_64/5.11 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.kde.Platform.Locale/x86_64/5.11 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.kde.KStyle.Adwaita/x86_64/5.9 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.kde.KStyle.Adwaita/x86_64/5.9 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.kde.KStyle.Adwaita/x86_64/5.12 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.kde.KStyle.Adwaita/x86_64/5.12 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.kde.KStyle.Adwaita/x86_64/5.11 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.kde.KStyle.Adwaita/x86_64/5.11 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.inkscape.Inkscape.Locale/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.inkscape.Inkscape.Locale/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gtk.Gtk3theme.deepin/x86_64/3.22 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gtk.Gtk3theme.deepin/x86_64/3.22 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gtk.Gtk3theme.Pop/x86_64/3.22 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gtk.Gtk3theme.Pop/x86_64/3.22 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gtk.Gtk3theme.Pop-light/x86_64/3.22 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gtk.Gtk3theme.Pop-light/x86_64/3.22 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gtk.Gtk3theme.Numix/x86_64/3.22 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gtk.Gtk3theme.Numix/x86_64/3.22 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gtk.Gtk3theme.Numix/i386/3.22 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gtk.Gtk3theme.Numix/i386/3.22 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gtk.Gtk3theme.Arc/x86_64/3.22 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gtk.Gtk3theme.Arc/x86_64/3.22 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gtk.Gtk3theme.Adapta/x86_64/3.22 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gtk.Gtk3theme.Adapta/x86_64/3.22 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gtk.Gtk3theme.Adapta-Eta/x86_64/3.22 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gtk.Gtk3theme.Adapta-Eta/x86_64/3.22 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gtk.Gtk3theme.Adapta-Eta/i386/3.22 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gtk.Gtk3theme.Adapta-Eta/i386/3.22 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gtk.Gtk3theme.Adapta-Brila/x86_64/3.22 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gtk.Gtk3theme.Adapta-Brila/x86_64/3.22 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gtk.Gtk3theme.Adapta-Brila-Eta/x86_64/3.22 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gtk.Gtk3theme.Adapta-Brila-Eta/x86_64/3.22 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gnome.Platform/x86_64/3.30 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gnome.Platform/x86_64/3.30 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gnome.Platform/x86_64/3.28 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gnome.Platform/x86_64/3.28 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gnome.Platform/x86_64/3.26 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gnome.Platform/x86_64/3.26 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gnome.Platform.Locale/x86_64/3.30 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gnome.Platform.Locale/x86_64/3.30 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gnome.Platform.Locale/x86_64/3.28 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gnome.Platform.Locale/x86_64/3.28 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gnome.Platform.Locale/x86_64/3.26 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gnome.Platform.Locale/x86_64/3.26 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.gnome.Glade.Locale/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.gnome.Glade.Locale/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.freedesktop.Sdk/x86_64/18.08 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.freedesktop.Sdk/x86_64/18.08 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.freedesktop.Sdk.Locale/x86_64/18.08 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.freedesktop.Sdk.Locale/x86_64/18.08 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.freedesktop.Platform/x86_64/18.08 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.freedesktop.Platform/x86_64/18.08 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.freedesktop.Platform/i386/18.08 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.freedesktop.Platform/i386/18.08 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.freedesktop.Platform.html5-codecs/x86_64/18.08 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.freedesktop.Platform.html5-codecs/x86_64/18.08 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.freedesktop.Platform.html5-codecs/i386/18.08 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.freedesktop.Platform.html5-codecs/i386/18.08 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.freedesktop.Platform.ffmpeg/x86_64/1.6 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.freedesktop.Platform.ffmpeg/x86_64/1.6 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.freedesktop.Platform.VAAPI.Intel/x86_64/18.08 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.freedesktop.Platform.VAAPI.Intel/x86_64/18.08 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.freedesktop.Platform.VAAPI.Intel/x86_64/1.6 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.freedesktop.Platform.VAAPI.Intel/x86_64/1.6 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.freedesktop.Platform.VAAPI.Intel/i386/18.08 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.freedesktop.Platform.VAAPI.Intel/i386/18.08 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.freedesktop.Platform.Locale/x86_64/18.08 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.freedesktop.Platform.Locale/x86_64/18.08 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.freedesktop.Platform.Locale/i386/18.08 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.freedesktop.Platform.Locale/i386/18.08 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.freedesktop.Platform.Compat.i386/x86_64/18.08 is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.freedesktop.Platform.Compat.i386/x86_64/18.08 metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/net.poedit.Poedit.Locale/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/net.poedit.Poedit.Locale/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/net.pcsx2.PCSX2.Locale/i386/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/net.pcsx2.PCSX2.Locale/i386/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/io.neovim.nvim.Locale/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/io.neovim.nvim.Locale/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/org.videolan.VLC/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/org.videolan.VLC/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/org.telegram.desktop/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/org.telegram.desktop/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/org.octave.Octave/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/org.octave.Octave/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/org.kde.kalzium/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/org.kde.kalzium/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/org.inkscape.Inkscape/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/org.inkscape.Inkscape/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/org.gnome.Glade/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/org.gnome.Glade/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/org.fedoraproject.MediaWriter/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/org.fedoraproject.MediaWriter/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/net.wz2100.wz2100/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/net.wz2100.wz2100/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/net.poedit.Poedit/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/net.poedit.Poedit/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/net.pcsx2.PCSX2/i386/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/net.pcsx2.PCSX2/i386/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/io.neovim.nvim/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/io.neovim.nvim/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/io.github.arunsivaramanneo.GPUViewer/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/io.github.arunsivaramanneo.GPUViewer/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/io.atom.Atom/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/io.atom.Atom/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/com.valvesoftware.Steam/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/com.valvesoftware.Steam/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/com.spotify.Client/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/com.spotify.Client/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/com.skype.Client/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/com.skype.Client/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/com.play0ad.zeroad/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/com.play0ad.zeroad/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/com.moddb.TotalChaos/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/com.moddb.TotalChaos/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/com.calibre_ebook.calibre/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/com.calibre_ebook.calibre/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/com.axosoft.GitKraken/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/com.axosoft.GitKraken/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/ch.openboard.OpenBoard/x86_64/stable is already installed: Unable to load summary from remote flathub: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/ch.openboard.OpenBoard/x86_64/stable metadata for dependencies: Unable to load metadata from remote flathub: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Error updating remote metadata for 'org.videolan.VLC-origin': GPG signatures found, but none are in trusted keyring
flatpak update: Error updating remote metadata for 'com.elsevier.MendeleyDesktop-origin': GPG signatures found, but none are in trusted keyring
flatpak update: Error updating remote metadata for 'com.github.marktext.marktext-origin': GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/org.videolan.VLC.Locale/x86_64/stable is already installed: Unable to load summary from remote org.videolan.VLC-origin: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/org.videolan.VLC.Locale/x86_64/stable metadata for dependencies: Unable to load metadata from remote org.videolan.VLC-origin: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since runtime/com.github.marktext.marktext.Locale/x86_64/stable is already installed: Unable to load summary from remote com.github.marktext.marktext-origin: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find runtime/com.github.marktext.marktext.Locale/x86_64/stable metadata for dependencies: Unable to load metadata from remote com.github.marktext.marktext-origin: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/org.videolan.VLC/x86_64/stable is already installed: Unable to load summary from remote org.videolan.VLC-origin: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/org.videolan.VLC/x86_64/stable metadata for dependencies: Unable to load metadata from remote org.videolan.VLC-origin: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/com.github.marktext.marktext/x86_64/stable is already installed: Unable to load summary from remote com.github.marktext.marktext-origin: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/com.github.marktext.marktext/x86_64/stable metadata for dependencies: Unable to load metadata from remote com.github.marktext.marktext-origin: summary fetch error: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Treating remote fetch error as non-fatal since app/com.elsevier.MendeleyDesktop/x86_64/stable is already installed: Unable to load summary from remote com.elsevier.MendeleyDesktop-origin: GPG signatures found, but none are in trusted keyring
flatpak update: Warning: Can't find app/com.elsevier.MendeleyDesktop/x86_64/stable metadata for dependencies: Unable to load metadata from remote com.elsevier.MendeleyDesktop-origin: summary fetch error: GPG signatures found, but none are in trusted keyring
dbnicholson commented 5 years ago

I'm pretty sure this is a duplicate of #1450. There the issue is more likely a mismatched summary signature, but the issue is the same - ostree's error is wrong.