更新过期的 GPG 密钥

从 Cumulus Linux 5.5.0 或更早版本到 5.8.0 的软件包升级

问题

当您尝试使用软件包升级将交换机从 Cumulus Linux 5.5.0 或更早版本升级到 5.8.0 时，您会看到过期的 GPG 密钥错误，阻止您升级

W: GPG error: http://apt.cumulusnetworks.com/repo CumulusLinux-5-latest InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 191184DAB33070E2

解决方案

安装新密钥，然后升级交换机

cumulus@switch:~$ wget https://download.nvidia.com/cumulus/apt.cumulusnetworks.com/repo/pool/cumulus/c/cumulus-archive-keyring/cumulus-archive-keyring_4-cl5.6.0u5_all.deb
cumulus@switch:~$ sudo apt install ./cumulus-archive-keyring_4-cl5.6.0u5_all.deb
cumulus@switch:~$ sudo apt update
cumulus@switch:~$ sudo apt upgrade

从 Cumulus Linux 4.4.0 到 4.4.x 的软件包升级

问题

当您尝试使用软件包升级将交换机从 Cumulus Linux 4.4.0 升级到 4.4.x 时，您会看到过期的 GPG 密钥错误，阻止您升级

Err:4 https://download.nvidia.com/cumulus/apt.cumulusnetworks.com/repo CumulusLinux-4.4-latest InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 191184DAB33070E2
Reading package lists... Done
W: GPG error: https://download.nvidia.com/cumulus/apt.cumulusnetworks.com/repo CumulusLinux-4.4-latest InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 191184DAB33070E2
E: The repository 'http://apt.cumulusnetworks.com/repo CumulusLinux-4.4-latest InRelease' is not signed.

解决方案

下载新的存储库密钥，然后升级交换机

cumulus@switch:~$ wget https://download.nvidia.com/cumulus/apt.cumulusnetworks.com/repo/pool/cumulus/c/cumulus-archive-keyring/cumulus-archive-keyring_4-cl4.4.7u1_all.deb
cumulus@switch:~$ sudo apt install ./cumulus-archive-keyring_4-cl4.4.7u1_all.deb 
cumulus@switch:~$ sudo -E apt-get update
cumulus@switch:~$ sudo -E apt-get upgrade

从 Cumulus Linux 4.3.0 到 4.3.x 的软件包升级

问题

当您尝试使用软件包升级将交换机从 Cumulus Linux 4.3.0 升级到 4.3.x 时，您会看到过期的 GPG 密钥错误，阻止您升级

Err:4 https://download.nvidia.com/cumulus/apt.cumulusnetworks.com/repo CumulusLinux-4.3.2 InRelease
  The following signatures were invalid: EXPKEYSIG A3C0E377EB5BF3F0 Cumulus Linux 4.0 Package Repository Release Signing Key <dev-support@cumulusnetworks.com>
Reading package lists... Done
W: GPG error: https://download.nvidia.com/cumulus/apt.cumulusnetworks.com/repo CumulusLinux-4.3.2 InRelease: The following signatures were invalid: EXPKEYSIG A3C0E377EB5BF3F0 Cumulus Linux 4.0 Package Repository Release Signing Key <dev-support@cumulusnetworks.com>

解决方案

下载新的存储库密钥，然后升级交换机

cumulus@switch:~$ wget https://download.nvidia.com/cumulus/apt.cumulusnetworks.com/repo/pool/cumulus/c/cumulus-archive-keyring/cumulus-archive-keyring_4-cl4.3.4u1_all.deb
cumulus@switch:~$ sudo apt install ./cumulus-archive-keyring_4-cl4.3.4u1_all.deb 
cumulus@switch:~$ sudo apt update
cumulus@switch:~$ sudo apt upgrade

从 Cumulus Linux 3.7.x 到 3.7.16 的软件包升级

问题

当您尝试使用软件包升级将交换机从 Cumulus Linux 3.7.x 升级到 3.7.16 时，您会看到过期的 GPG 密钥错误，阻止您升级

W: GPG error: http://repo3.cumulusnetworks.com CumulusLinux-3 InRelease: The following signatures were invalid: KEYEXPIRED 1522652605 KEYEXPIRED 1522652605 KEYEXPIRED 1522652605
W: GPG error: http://repo3.cumulusnetworks.com CumulusLinux-3-security-updates InRelease: The following signatures were invalid: KEYEXPIRED 1522652605 KEYEXPIRED 1522652605 KEYEXPIRED 1522652605
W: GPG error: http://repo3.cumulusnetworks.com CumulusLinux-3-updates InRelease: The following signatures were invalid: KEYEXPIRED 1522652605 KEYEXPIRED 1522652605 KEYEXPIRED 1522652605

解决方案

下载新的存储库密钥，然后升级交换机

cumulus@switch:~$ wget https://download.nvidia.com/cumulus/repo3.cumulusnetworks.com/public-key/repo3-2024-key
cumulus@switch:~$ sudo apt-key add repo3-2024-key
cumulus@switch:~$ sudo -E apt-get update
cumulus@switch:~$ sudo -E apt-get upgrade