Cannot run apt-get update: expired signature php buster

[CorbaDigitpaint]

When we run apt-get update in our Dockerfile using your geerlingguy/drupal:latest base image we are now getting the following error:

0.426 Get:1 http://deb.debian.org/debian buster InRelease [122 kB]                                                                                                 
0.511 Get:2 http://deb.debian.org/debian-security buster/updates InRelease [34.8 kB]                                                                               
0.512 Get:3 http://deb.debian.org/debian buster-updates InRelease [56.6 kB]                                                                                        
0.544 Get:4 https://packages.sury.org/php buster InRelease [7559 B]                                                                                                
1.756 Get:5 http://deb.debian.org/debian buster/main amd64 Packages [7909 kB]
3.015 Get:6 http://deb.debian.org/debian-security buster/updates/main amd64 Packages [592 kB]
4.210 Get:7 http://deb.debian.org/debian buster-updates/main amd64 Packages [8788 B]
5.334 Err:4 https://packages.sury.org/php buster InRelease
5.334   The following signatures were invalid: EXPKEYSIG B188E2B695BD4743 DEB.SURY.ORG Automatic Signing Key <[email protected]>
6.113 Reading package lists...
9.599 W: GPG error: https://packages.sury.org/php buster InRelease: The following signatures were invalid: EXPKEYSIG B188E2B695BD4743 DEB.SURY.ORG Automatic Signing Key <[email protected]>
9.599 E: The repository 'https://packages.sury.org/php buster InRelease' is not signed.

[CorbaDigitpaint]

We managed to get our Docker environment working again, however we had to manually copy the docker-entrypoint.sh and Dockerfile from this repository to our own, and add our own apt-get install ... packages inside "your" Dockerfile, before calling the entrypoint.sh. (also made sure the file permissions for the docker-entrypoint.sh was correct with chmod +x)

FROM geerlingguy/php-apache:8.1

RUN apt-get update \
    && apt-get install -y mariadb-client git \
    && rm -rf /var/lib/apt/lists/*

COPY docker-entrypoint.sh /usr/local/bin/
RUN chmod +x /usr/local/bin/docker-entrypoint.sh
RUN ln -s usr/local/bin/docker-entrypoint.sh / # For backwards compatibility.

# === Digitpaint added dependencies ===
RUN apt-get update && apt-get install -y ***
# === End Digitpaint added dependencies ===

ENTRYPOINT ["./docker-entrypoint.sh"]

WORKDIR "/var/www/html"

EXPOSE 80
CMD ["/usr/sbin/apache2ctl", "-D", "FOREGROUND"]

However, preferably we'd rather use the geerlingguy/drupal docker image.. perhaps running a new build will fix this expired signature issue?

[geerlingguy]

I didn't realize the automated builds had stopped a year ago!

https://github.com/geerlingguy/drupal-container/actions — I've fired off another, hopefully it succeeds.

[geerlingguy]

I've confirmed the builds seem to be working. So I'm closing this issue but please re-open if you still hit that error!

[CorbaDigitpaint]

Great, thanks so much for the quick response. You are a legend @geerlingguy!

[mah-sanjay]

HI @geerlingguy ,
I am having this issue again while trying to run ' apt-get update'.

> [main stage-1 17/20] RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y     libgmp-dev     php8.1-gmp:
0.351 Get:1 http://deb.debian.org/debian buster InRelease [122 kB]
0.419 Get:2 http://deb.debian.org/debian-security buster/updates InRelease [34.8 kB]
0.442 Get:4 http://deb.debian.org/debian buster-updates InRelease [56.6 kB]
1.225 Get:3 https://packages.sury.org/php buster InRelease
1.297 Err:3 https://packages.sury.org/php buster InRelease
1.297   Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?)
1.448 Get:5 http://deb.debian.org/debian buster/main amd64 Packages [7909 kB]
2.496 Get:6 http://deb.debian.org/debian-security buster/updates/main amd64 Packages [610 kB]
3.534 Get:7 http://deb.debian.org/debian buster-updates/main amd64 Packages [8788 B]
3.566 Reading package lists...
4.032 E: Failed to fetch https://packages.sury.org/php/dists/buster/InRelease  Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?)
4.032 E: The repository 'https://packages.sury.org/php buster InRelease' is not signed.
------
failed to solve: process "/bin/sh -c apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y     libgmp-dev     php${PHP_VERSION}-gmp" did not complete successfully: exit code: 100

Seems like this is the issue with EOL Debian 10 Support

I cannot find a way around the issue.

[geerlingguy]

Please open a new issue for this, as it is slightly different than the original issue — https://github.com/geerlingguy/drupal-container/actions are indeed also failing, so it would be good to get this fixed!