[SOLVED] keyring problem

[consufed]

I had Debian8 installed (AMD-64) for years. When I recently upgraded (half) to Debian 9, midway through the procedure I got a NO_PUBKEY 'keyring' error. This seems to mean that the kernel didn't get upgraded, although some packages did, e.g. -> Firefox browser and ->Thunderbird email server. But hey, the system still seems to work. So I just carried on using.
Unfortunately apt-get update now always gives a keyring message:

W: GPG error: http://download.opensuse.org Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 164B4655667F68A8

I searched around and tried this (I disabled my router's firewall & ufw):
gpg --keyserver subkeys.pgp.net --recv 164B4655667F68A8

which returned this:
gpg: requesting key 667F68A8 from hkp server subkeys.pgp.net
....before timing out after several minutes.

Evidently there is a loose bit somewhere.
The only thing I can think of is to create a DVD for the latest stable Debian, wipe all existing system directories, and install from new.

[arochester]

http://download.opensuse.org

opensuse?

It would be interesting to see you sources list and the contents of /etc/apt.sources.list.d

[RU55EL]

Please post the output of:

Code: Select all

cat /etc/apt/sources.list

[None1975]

W: GPG error: http://download.opensuse.org Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 164B4655667F68A8

Don't make a FrankenDebian

[Lysander]

I recently upgraded (half) to Debian 9

Doesn't sound too promising.

[consufed]

Here's what's in /etc/apt/sources.list

deb http://download.virtualbox.org/virtualbox/debian jessie contrib
deb http://httpredir.debian.org/debian jessie-backports main contrib non-free
deb http://ftp.de.debian.org/debian stretch main
deb http://ftp.be.debian.org/debian/ jessie main
deb-src http://ftp.be.debian.org/debian/ jessie main
deb http://security.debian.org/ jessie/updates main
deb-src http://security.debian.org/ jessie/updates main
deb http://ftp.be.debian.org/debian/ jessie-updates main
deb-src http://ftp.be.debian.org/debian/ jessie-updates main
deb http://ftp.de.debian.org/debian jessie main contrib non-free
deb http://www.deb-multimedia.org jessie main non-free
deb-src http://www.deb-multimedia.org jessie main non-free

I also don't understand the suse message.

[Lysander]

You've mixed together stable and what is now oldstable. Which is bad for a start.

You also need to post the output of this

Code: Select all

cat /etc/apt/sources.list.d/*

[bryanmc]

You've mixed together stable and what is now oldstable. Which is bad for a start.

Only one stretch repo in the bunch. I can only imagine what a "half upgrade" is.

[RU55EL]

Here's what's in /etc/apt/sources.list

Code: Select all

deb http://download.virtualbox.org/virtualbox/debian jessie contrib
deb http://httpredir.debian.org/debian jessie-backports main contrib non-free
deb http://ftp.de.debian.org/debian stretch main
deb http://ftp.be.debian.org/debian/ jessie main
deb-src http://ftp.be.debian.org/debian/ jessie main
deb http://security.debian.org/ jessie/updates main
deb-src http://security.debian.org/ jessie/updates main
deb http://ftp.be.debian.org/debian/ jessie-updates main
deb-src http://ftp.be.debian.org/debian/ jessie-updates main
deb http://ftp.de.debian.org/debian jessie main contrib non-free
deb http://www.deb-multimedia.org jessie main non-free
deb-src http://www.deb-multimedia.org jessie main non-free

I also don't understand the suse message.

Your sources.list file is configured in such a way that it can cause problems to your system.

Read sources.list from the Debian Wiki and Don't break Debian to understand why.

[consufed]

Whoops! I cleaned out all old Jessie references in sources.list , then an apt-get update & upgrade completed ok without any keyring or other messages.
Thanks for the replies.

[RU55EL]

You've mixed together stable and what is now oldstable. Which is bad for a start.

You also need to post the output of this

Code: Select all

cat /etc/apt/sources.list.d/*

Huh, I'm not familiar with this [directory] so I took a look in my system...

Code: Select all

russel@NUC-G:~$ ls -la /etc/apt/sources.list.d/
total 8
drwxr-xr-x 2 root root 4096 Jun  1 01:50 .
drwxr-xr-x 6 root root 4096 Aug 14 08:41 ..

Should the directory be empty?

[edit] Changed the word "folder" to directory. My bad! [/edit]

[sunrat]

It's ok for it to be empty. It's where extra sources files go which are not in the main sources.list and is where one would expect something such as a Suse source file to be.
It may help to install inxi and run

Code: Select all

inxi -r

This should show all your sources.

[RU55EL]

Thanks for the explanation Sunrat.

I need to do some reading about inxi, it is a great little program!

Code: Select all

russel@debian:~$ inxi -r
Repos:     Active apt sources in file: /etc/apt/sources.list
           deb http://deb.debian.org/debian/ stretch main
           deb http://deb.debian.org/debian/ stretch-updates main
           deb http://security.debian.org/ stretch/updates main

Nice. Also, inxi is nice because of all the other stuff you can do with it!

[sunrat]

Just normal Debian sources, no Suse.

[RU55EL]

Code: Select all

russel@debian:~$ inxi -r
Repos:     Active apt sources in file: /etc/apt/sources.list
           deb http://deb.debian.org/debian/ stretch main
           deb http://deb.debian.org/debian/ stretch-updates main
           deb http://security.debian.org/ stretch/updates main

Just normal Debian sources, no Suse.

Sorry if I wasn't very clear. This is the output from my machine, not the original poster. I was just trying out the inxi -r command.

The OP, I believe, read material at Debian wiki about source.list and don't break Debian. Then reconfigured sources.list, solving the problem.