ubuntu 22.04 "no longer signed"

[foucdeg]

Describe the issue

Getting this error in a Github Actions job:

apt-get update
  Get:1 https://packages.microsoft.com/ubuntu/22.04/prod jammy InRelease
  Err:1 https://packages.microsoft.com/ubuntu/22.04/prod jammy InRelease
    Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?)

E: Failed to fetch https://packages.microsoft.com/ubuntu/22.04/prod/dists/jammy/InRelease  Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?)
  E: The repository 'https://packages.microsoft.com/ubuntu/22.04/prod jammy InRelease' is no longer signed.

When did the issue occur?

Around 8:40 UTC today (April 24th 2024)

If applicable, what package did you attempt to install, and from which repo?

ubuntu/22.04/prod jammy InRelease

[KerstinKeller]

Encountering the exact same issue, see build log: https://github.com/eclipse-ecal/ecal/actions/runs/8813839529/job/24192444569?pr=1562

[PietroPasotti]

same-same on all our repos e.g. https://github.com/canonical/traefik-k8s-operator/actions/runs/8813690572/job/24192769293

[jserpapinto]

Same on all our repos:

deb [arch=amd64 signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ jammy main
/usr/bin/sudo apt update

WARNING: apt does not have a stable CLI interface. Use with caution in scripts.

Get:1 file:/etc/apt/apt-mirrors.txt Mirrorlist [142 B]
Get:6 https://packages.microsoft.com/ubuntu/22.04/prod jammy InRelease
Err:6 https://packages.microsoft.com/ubuntu/22.04/prod jammy InRelease
  Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?)
Hit:2 http://azure.archive.ubuntu.com/ubuntu jammy InRelease
Hit:3 http://azure.archive.ubuntu.com/ubuntu jammy-updates InRelease
Hit:4 http://azure.archive.ubuntu.com/ubuntu jammy-backports InRelease
Hit:5 http://azure.archive.ubuntu.com/ubuntu jammy-security InRelease
Hit:7 https://pkg.cloudflareclient.com/ jammy InRelease
Hit:8 https://ppa.launchpadcontent.net/ubuntu-toolchain-r/test/ubuntu jammy InRelease
Reading package lists...
E: Failed to fetch https://packages.microsoft.com/ubuntu/22.04/prod/dists/jammy/InRelease  Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?)
E: The repository 'https://packages.microsoft.com/ubuntu/22.04/prod jammy InRelease' is no longer signed.

[svorcan-rho]

Encountering same issue starting today.

[ThibaultCoudertSephora]

Same issue since this morning 8:40AM.

[osesantos]

Same is happening on all our repos

. prepare: . prepare:playwright: Get:20 http://azure.archive.ubuntu.com/ubuntu jammy-security/restricted Translation-en [299 kB]
. prepare: . prepare:playwright: Get:21 http://azure.archive.ubuntu.com/ubuntu jammy-security/universe amd64 Packages [848 kB]
. prepare: . prepare:playwright: Get:22 http://azure.archive.ubuntu.com/ubuntu jammy-security/universe Translation-en [163 kB]
. prepare: . prepare:playwright: Reading package lists...
. prepare: . prepare:playwright: E: Failed to fetch https://packages.microsoft.com/ubuntu/22.04/prod/dists/jammy/InRelease  Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?)
. prepare: . prepare:playwright: E: The repository 'https://packages.microsoft.com/ubuntu/22.04/prod jammy InRelease' is no longer signed.
. prepare: . prepare:playwright: Failed to install browsers
. prepare: . prepare:playwright: Error: Installation process exited with code: 100
. prepare: . prepare:playwright: Failed
. prepare:  ELIFECYCLE  Command failed with exit code 1.
. prepare: Failed
 ELIFECYCLE  Command failed with exit code 1.

[windnfc]

Same here. Yesterday it was still working fine.

[wjz304]

+1

[JJD1990]

+1 since about 8:40 this morning

[stefanahman]

A workaround for the ones in panic:

sudo apt-get update || true

[edlerd]

+1 since about 1 hour.

[mikhailkoliada]

Temporary Workaround (Azure DevOps & GitHub runners)

Actually

sudo apt-get update || true

won't help because apt index would be incomplete and the error to be ignored.

The problem is not in the image itself but in the Microsoft's apt repo, we are reaching them out.

the better workaround would be the following snippet of code:

    run: |
     sudo rm /etc/apt/sources.list.d/microsoft-prod.list
     sudo apt-get update

[jolelievre]

Same issue on all our CI for the PrestaShop project https://github.com/PrestaShop/PrestaShop/actions/runs/8814445565/job/24196124300?pr=35998

[eggplants]

playwright install --with-deps chromium has failed in apt-get update step on GitHub Actions due to this issue.

[MatteoJoliveau]

May I kindly request that people stop commenting with +1 or reports of their repository being affected? It adds a lot of noise to this issue, I subscribed to be notified when the issue is resolved or for possible workarounds, having my inbox filled with emails that do not contribute anything to the topic is not great :)

[lukasklein]

I miss the days where someone with simple FTP access to packages.microsoft.com could fix this real quick.

[hasnatdevops]

Please use below solution instead of ubuntu-latest in the github actions CI/CD file for quick fix.This worked for me.

runs-on: ubuntu-20.04

[mcw92]

Same for our repo in the testing workflow when using this action for setting up MPI.

[DeanMarques]

Same here :( surely the repo is the issue.. if I web browse and click inRelease nothing occurs just a blank page where as for focal it downloads the Release.gpg file

[MichaIng]

if I web browse and click inRelease nothing occurs just a blank page where as for focal it downloads the Release.gpg file

In fact it throws a 403 (forbidden), when trying to access. The Release and Release.gpg work, but APT seems to not fall back to trying them automatically, if InRelease exists (403 vs 404?).

[DeanMarques]

I can confirm with a fresh install of ubuntu and running the for ODBC driver 17 install following the instructions here:

https://learn.microsoft.com/en-us/sql/connect/odbc/linux-mac/installing-the-microsoft-odbc-driver-for-sql-server?view=sql-server-ver16&tabs=alpine18-install%2Cubuntu17-install%2Cubuntu16-install%2Credhat7-13-install%2Crhel7-offline#17

Same issue occurs whening trying to run apt update: sudo apt update Get:1 https://packages.microsoft.com/ubuntu/22.04/prod jammy InRelease Err:1 https://packages.microsoft.com/ubuntu/22.04/prod jammy InRelease Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?) Hit:2 http://za.archive.ubuntu.com/ubuntu jammy InRelease Hit:3 http://za.archive.ubuntu.com/ubuntu jammy-updates InRelease Hit:4 http://za.archive.ubuntu.com/ubuntu jammy-backports InRelease Hit:5 http://security.ubuntu.com/ubuntu jammy-security InRelease Reading package lists... Done E: Failed to fetch https://packages.microsoft.com/ubuntu/22.04/prod/dists/jammy/InRelease Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?) E: The repository 'https://packages.microsoft.com/ubuntu/22.04/prod jammy InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. root@test:~# cat /etc/os-release PRETTY_NAME="Ubuntu 22.04.4 LTS" NAME="Ubuntu" VERSION_ID="22.04" VERSION="22.04.4 LTS (Jammy Jellyfish)" VERSION_CODENAME=jammy ID=ubuntu ID_LIKE=debian HOME_URL="https://www.ubuntu.com/" SUPPORT_URL="https://help.ubuntu.com/" BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/" PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy" UBUNTU_CODENAME=jammy

[LukeDearden]

Same issue here attempting to install pwsh

 wget -q https://packages.microsoft.com/config/ubuntu/22.04/packages-microsoft-prod.deb
  dpkg -i packages-microsoft-prod.deb
  apt-get update

results in

Get:5 https://packages.microsoft.com/ubuntu/22.04/prod jammy InRelease
Err:5 https://packages.microsoft.com/ubuntu/22.04/prod jammy InRelease
  Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?)

[rami3l]

I think the conversation is already too heated at this point.

For those who have also encountered this issue, please include the link to this issue in your own repo rather than comment directly below. This way the subscribers will receive fewer notifications.

For those who are subscribed to this issue, you may try to adjust the notification level in Notifications - Customize.

[SqlOwl]

I am facing the same issue when installing msodbcsql18 on Databricks Ubuntu 22.04 node

[jypuigbo]

In case it helps, I'm having the same issue running this basic dockerfile:

FROM ubuntu-20.04
FROM python:3.12

USER root

RUN apt-get update 
# adding custom MS repository
RUN wget https://packages.microsoft.com/config/ubuntu/22.04/packages-microsoft-prod.deb -O packages-microsoft-prod.deb
RUN dpkg -i packages-microsoft-prod.deb
RUN rm packages-microsoft-prod.deb

RUN apt-get update

RUN ACCEPT_EULA=Y apt-get install -y msodbcsql17 unixodbc-dev

Notice that removing microsoft-prod.list (as suggested somewhere above) will not solve the problem, it just means you no longer needed to have this file and didn't clean, or it will generate issues for you later.

[florisKlinkert]

Same issue here.

Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?)

jammy InRelease' is no longer signed.

[n-thumann]

Looks like things are slowly working again. Most requests to https://packages.microsoft.com/ubuntu/22.04/prod/dists/jammy/InRelease (and subsequently apt update) are working for me again:

~ curl -v https://packages.microsoft.com/ubuntu/22.04/prod/dists/jammy/InRelease 2>&1                                                                                                                 
*   Trying 2620:1ec:bdf::67:443...                                                                                                                                                                       
* Connected to packages.microsoft.com (2620:1ec:bdf::67) port 443 (#0)
[...]
> GET /ubuntu/22.04/prod/dists/jammy/InRelease HTTP/2                                                                                                                                                    
> Host: packages.microsoft.com                                                                                                                                                                           
> user-agent: curl/7.81.0                                                                                                                                                                                
[...]                                                                                                                                                    
< HTTP/2 200                                                                                                                                                                                             
< date: Wed, 24 Apr 2024 12:52:11 GMT                                                                                                                                                                    
< content-type: application/octet-stream                                                                                                                                                                 
< content-length: 3632
[...]

[screig]

Captain Chaos approves of the state of affairs with Microsoft APT repos

[mbearup]

There was an issue signing the release file for this repo. We (PMC) just re-published the repo, and the updated release file should be replicating through AFD now. We built monitoring to detect this, which was scheduled to rollout as part of today's deployment. Else we would have caught this sooner.

[JJD1990]

Thanks for your work on sorting this, all seems good for us.

[ben-matthews6-NHSD]

Thanks for your work on sorting this, all seems good for us.

Ditto for us - thank you 👍

[oriolpiera]

Encountering the exact same issue, see build log: https://github.com/eclipse-ecal/ecal/actions/runs/8813839529/job/24192444569?pr=1562

@Janebeem re-run jobs and it should work

[mbearup]

@Janebeem this issue was resolved on 24Apr; any jobs run since then should be successful. Have you tried running this since 24Apr?

[Titas-OpenTrack]

@mbearup It has been working fine for a while, but the error has returned in the past few days:

W: Failed to fetch http://deb.debian.org/debian-security/dists/bullseye-security/InRelease Error reading from server - read (104: Connection reset by peer) [IP: 151.101.50.xxx xx]

75 | E: Failed to fetch http://deb.debian.org/debian/dists/bullseye/main/binary-amd64/Packages Connection timed out [IP: 151.101.50.xxx xx]

[mbearup]

@Titas-OpenTrack the error message is from debian.org. This forum is only for issues on packages.microsoft.com.