All our Travis builds are failing because apt has bad keys for chrome

Why is Travis trying to fetch Chrome anyway?

48813.14s$ travis_retry ./etc/ci/ -q
489Hit:1 trusty InRelease
490Hit:3 trusty InRelease
491Hit:5 trusty-pgdg InRelease
492Hit:6 trusty-security InRelease
493Hit:2 39x InRelease
494Ign:7 trusty InRelease
495Hit:8 trusty-updates InRelease
496Ign:9 trusty/mongodb-org/3.4 InRelease
497Hit:10 trusty-backports InRelease
498Hit:11 trusty/mongodb-org/3.4 Release
499Hit:12 trusty Release
500Ign:4 ./ InRelease
501Hit:13 ./ Release
502Ign:14 trusty InRelease
503Hit:15 trusty InRelease
504Get:16 trusty InRelease [16.0 kB]
505Hit:17 trusty InRelease
506Hit:18 trusty InRelease
507Get:19 trusty InRelease [15.4 kB]
508Hit:20 trusty InRelease
509Hit:21 trusty InRelease
510Hit:22 trusty Release
511Ign:23 stable InRelease
512Get:24 stable Release [943 B]
513Get:25 stable Release.gpg [819 B]
514Get:29 trusty/main amd64 Packages [12.3 kB]
515Get:30 trusty/main i386 Packages [12.3 kB]
516Get:31 trusty/main Translation-en [8,862 B]
517Hit:32 trusty InRelease
518Get:33 trusty/main amd64 Packages [93.6 kB]
519Get:34 trusty/main i386 Packages [91.8 kB]
520Get:35 trusty/main Translation-en [19.3 kB]
521Get:36 trusty InRelease [23.2 kB]
522Ign:25 stable Release.gpg
523Get:38 stable/main amd64 Packages [1,101 B]
524Err:38 stable/main amd64 Packages
525  Hash Sum mismatch
526Ign:36 trusty InRelease
527Hit:39 trusty InRelease
528Fetched 295 kB in 1s (215 kB/s)
529Reading package lists...
530W: Signature by key 15866BAFD9BCC4F3C1E0DFC7D69548E1C17EAB57 uses weak digest algorithm (SHA1)
531W: GPG error: stable Release: The following signatures were invalid: BADSIG 6494C6D6997C215E Google Inc. (Linux Packages Signing Authority) <>  The following signatures were invalid: KEYEXPIRED 1555048520  KEYEXPIRED 1555048520
532W: The repository ' stable Release' is not signed.
533W: GPG error: trusty InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 6B05F25D762E3157
534W: The repository ' trusty InRelease' is not signed.
535W: There is no public key available for the following key IDs:
537E: Failed to fetch  Hash Sum mismatch
538E: Some index files failed to download. They have been ignored, or old ones used instead.
539E: update failed
541The command "./etc/ci/ -q" failed. Retrying, 2 of 3.

We wrap apt-get update in a script that fails if any packages fail to update, because normally this is just a transient Travis connectivity issue, but now it looks like Travis is just misconfigured on some of its packages (?), and this is causing all of our builds to fail.

See also

It seems like this has happened before, and took three days to solve last time?

I believe this issue was transient and only lasted for 1-2 hours yesterday. Can you try to restart your builds and let me know if they are working today?

They seem to mostly work now, thanks! (Out of a couple dozen builds, only one failed with an apt error; the apt error was not about Chrome, and that job worked fine when I restarted it.)

1 Like