search

gazebo-tooling / release-tools

8 stars 9 forks source link

Bionic and Focal builds failed due to problems with packages.osrfoundation.org key #1069

Closed j-rivero closed 7 months ago

j-rivero commented 8 months ago

Some builds, specially on Bionic but now also on Focal are failing due to problems with the packages.osrfoundation.org key. Errors appear in the form of:

#23 3.778 Get:13 http://security.ubuntu.com/ubuntu focal-security/restricted amd64 Packages [3017 kB]
#23 4.193 Get:14 http://archive.ubuntu.com/ubuntu focal-updates/universe amd64 Packages [1427 kB]
#23 4.235 Get:15 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages [3683 kB]
#23 4.388 Get:16 http://archive.ubuntu.com/ubuntu focal-updates/multiverse amd64 Packages [32.0 kB]
#23 4.388 Get:17 http://archive.ubuntu.com/ubuntu focal-updates/restricted amd64 Packages [3166 kB]
#23 4.513 Get:18 http://archive.ubuntu.com/ubuntu focal-backports/main amd64 Packages [55.2 kB]
#23 4.514 Get:19 http://archive.ubuntu.com/ubuntu focal-backports/universe amd64 Packages [28.6 kB]

#23 6.285 W: GPG error: http://packages.osrfoundation.org/gazebo/ubuntu-stable focal InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 67170598AF249743
#23 6.285 E: The repository 'http://packages.osrfoundation.org/gazebo/ubuntu-stable focal InRelease' is not signed.

Really the problem is the apt-key call:

#14 0.607 Warning: apt-key output should not be parsed (stdout is not a terminal)
#14 0.625 Executing: /tmp/apt-key-gpghome.pDPnL9osSh/gpg.1.sh --keyserver keyserver.ubuntu.com --recv-keys D2486D2DD83DB69272AFE98867170598AF249743
#14 0.883 gpg: keyserver receive failed: Cannot assign requested address

The problem is affecting the docker cache which stores the unsuccessful call and makes the builds to fail over and over.

I've been unable to replicate the problems locally and don't have any tangible data about what is making the gpg --recv-keys to timeout more than usual hiccups on the servers. We can try changing the server a bit to see if things improve.

Since apt-key is deprecated, the short-term solution would be to implement the keyring file in gzdev.

j-rivero commented 7 months ago

Previously failing builds are passing now, close this by now: