Installing of jessie failing

[pythagorasmk]

For some reasons I have to install jessie on some old computer. But installation is failing on tasksel.
I have managed to install the base system, but after:

Code: Select all

apt update

I get error about expired key.
I have tried some solutions listed on the net, but none of them worked.
How to remove the error about expired key?

[sunrat]

Debian Jessie is oldoldstable and its repositories are now in archive. You need to edit your sources to point there. See https://www.debian.org/distrib/archive

[pythagorasmk]

Debian Jessie is oldoldstable and its repositories are now in archive. You need to edit your sources to point there. See https://www.debian.org/distrib/archive

I know about that, the mirror I am using is archive.debian.org. The problem is that the key for that archive is expired.

[fabien]

I tested in a VM and can confirm. I also confirm the difficulties with tasksel during installation.

Code: Select all

#> apt-cache policy debian-archive-keyring
debian-archive-keyring:
  Installed: 2017.5~deb8u1
  Candidate: 2017.5~deb8u1
  Version table:
 *** 2017.5~deb8u1 0
        500 http://archive.debian.org/debian/ jessie/main amd64 Packages
        100 /var/lib/dpkg/status

#> apt-get update
Ign http://archive.debian.org jessie InRelease
Get:1 http://archive.debian.org jessie Release.gpg [2420 B]
Hit http://archive.debian.org jessie Release
Ign http://archive.debian.org jessie Release
Ign http://archive.debian.org jessie/main amd64 Packages/DiffIndex
Hit http://archive.debian.org jessie/main Translation-en
Hit http://archive.debian.org jessie/main Translation-fr
Err http://archive.debian.org jessie/main amd64 Packages
Hit http://archive.debian.org jessie/main amd64 Packages
Fetched 2420 B in 1s (1497 B/s)
Reading package lists... Done
W: GPG error: http://archive.debian.org jessie Release: The following signatures were invalid: KEYEXPIRED 1587841717

[fabien]

I also tried to install the debian-archive-keyring from Stretch and from Buster to no avail

Code: Select all

#> apt-cache policy debian-archive-keyring
debian-archive-keyring:
  Installed: 2017.5+deb9u1
  Candidate: 2017.5+deb9u1
  Version table:
 *** 2017.5+deb9u1 0
        500 http://deb.debian.org/debian/ stretch/main amd64 Packages
        100 /var/lib/dpkg/status
     2017.5~deb8u1 0
        500 http://archive.debian.org/debian/ jessie/main amd64 Packages

#> apt-get update
Ign http://archive.debian.org jessie InRelease
Get:1 http://archive.debian.org jessie Release.gpg [2420 B]
Hit http://archive.debian.org jessie Release
Ign http://archive.debian.org jessie Release
Ign http://archive.debian.org jessie/main amd64 Packages/DiffIndex
Hit http://archive.debian.org jessie/main Translation-en
Hit http://archive.debian.org jessie/main Translation-fr
Err http://archive.debian.org jessie/main amd64 Packages
Hit http://archive.debian.org jessie/main amd64 Packages
Fetched 2420 B in 1s (1785 B/s)
Reading package lists... Done
W: GPG error: http://archive.debian.org jessie Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 8B48AD6246925553

[zerodeux]

If you have access to the feature on your hypervisor, fake the RTC time to some point in the past, and run the whole install without syncing with NTP.

Later on you can defeat the expiry with something like

Code: Select all

echo 'Acquire::Check-Valid-Until "false";' > /etc/apt/apt.conf.d/10expired

But I'm not sure how to put that APT feature early on in debian-installer. You could try the install up to the failing point, grab a shell, implement the ack above, then continue the install. It might work. Or even grab a shell very early in the boot process and set the date to some point in the past (RTC is only read at boot time IMHO).