All our Travis builds are failing because apt has bad keys for chrome

https://travis-ci.org/mit-plv/fiat-crypto/jobs/566645440

Why is Travis trying to fetch Chrome anyway?

48813.14s$ travis_retry ./etc/ci/sudo-apt-get-update.sh -q
489Hit:1 http://dl.hhvm.com/ubuntu trusty InRelease
490Hit:3 http://ppa.launchpad.net/chris-lea/redis-server/ubuntu trusty InRelease
491Hit:5 http://apt.postgresql.org/pub/repos/apt trusty-pgdg InRelease
492Hit:6 http://security.ubuntu.com/ubuntu trusty-security InRelease
493Hit:2 http://dl.bintray.com/apache/cassandra 39x InRelease
494Ign:7 http://us-east-1.ec2.archive.ubuntu.com/ubuntu trusty InRelease
495Hit:8 http://us-east-1.ec2.archive.ubuntu.com/ubuntu trusty-updates InRelease
496Ign:9 http://repo.mongodb.org/apt/ubuntu trusty/mongodb-org/3.4 InRelease
497Hit:10 http://us-east-1.ec2.archive.ubuntu.com/ubuntu trusty-backports InRelease
498Hit:11 http://repo.mongodb.org/apt/ubuntu trusty/mongodb-org/3.4 Release
499Hit:12 http://us-east-1.ec2.archive.ubuntu.com/ubuntu trusty Release
500Ign:4 http://heroku-toolbelt.s3.amazonaws.com/apt ./ InRelease
501Hit:13 http://heroku-toolbelt.s3.amazonaws.com/apt ./ Release
502Ign:14 http://ppa.launchpad.net/couchdb/stable/ubuntu trusty InRelease
503Hit:15 http://ppa.launchpad.net/git-core/ppa/ubuntu trusty InRelease
504Get:16 http://ppa.launchpad.net/jgross-h/coq-master-daily/ubuntu trusty InRelease [16.0 kB]
505Hit:17 http://ppa.launchpad.net/openjdk-r/ppa/ubuntu trusty InRelease
506Hit:18 http://ppa.launchpad.net/pollinate/ppa/ubuntu trusty InRelease
507Get:19 http://ppa.launchpad.net/ubuntu-toolchain-r/test/ubuntu trusty InRelease [15.4 kB]
508Hit:20 http://ppa.launchpad.net/webupd8team/java/ubuntu trusty InRelease
509Hit:21 https://download.docker.com/linux/ubuntu trusty InRelease
510Hit:22 http://ppa.launchpad.net/couchdb/stable/ubuntu trusty Release
511Ign:23 http://dl.google.com/linux/chrome/deb stable InRelease
512Get:24 http://dl.google.com/linux/chrome/deb stable Release [943 B]
513Get:25 http://dl.google.com/linux/chrome/deb stable Release.gpg [819 B]
514Get:29 http://ppa.launchpad.net/jgross-h/coq-master-daily/ubuntu trusty/main amd64 Packages [12.3 kB]
515Get:30 http://ppa.launchpad.net/jgross-h/coq-master-daily/ubuntu trusty/main i386 Packages [12.3 kB]
516Get:31 http://ppa.launchpad.net/jgross-h/coq-master-daily/ubuntu trusty/main Translation-en [8,862 B]
517Hit:32 https://packagecloud.io/computology/apt-backport/ubuntu trusty InRelease
518Get:33 http://ppa.launchpad.net/ubuntu-toolchain-r/test/ubuntu trusty/main amd64 Packages [93.6 kB]
519Get:34 http://ppa.launchpad.net/ubuntu-toolchain-r/test/ubuntu trusty/main i386 Packages [91.8 kB]
520Get:35 http://ppa.launchpad.net/ubuntu-toolchain-r/test/ubuntu trusty/main Translation-en [19.3 kB]
521Get:36 https://packagecloud.io/github/git-lfs/ubuntu trusty InRelease [23.2 kB]
522Ign:25 http://dl.google.com/linux/chrome/deb stable Release.gpg
523Get:38 http://dl.google.com/linux/chrome/deb stable/main amd64 Packages [1,101 B]
524Err:38 http://dl.google.com/linux/chrome/deb stable/main amd64 Packages
525  Hash Sum mismatch
526Ign:36 https://packagecloud.io/github/git-lfs/ubuntu trusty InRelease
527Hit:39 https://packagecloud.io/rabbitmq/rabbitmq-server/ubuntu trusty InRelease
528Fetched 295 kB in 1s (215 kB/s)
529Reading package lists...
530W: http://ppa.launchpad.net/couchdb/stable/ubuntu/dists/trusty/Release.gpg: Signature by key 15866BAFD9BCC4F3C1E0DFC7D69548E1C17EAB57 uses weak digest algorithm (SHA1)
531W: GPG error: http://dl.google.com/linux/chrome/deb stable Release: The following signatures were invalid: BADSIG 6494C6D6997C215E Google Inc. (Linux Packages Signing Authority) <linux-packages-keymaster@google.com>  The following signatures were invalid: KEYEXPIRED 1555048520  KEYEXPIRED 1555048520
532W: The repository 'http://dl.google.com/linux/chrome/deb stable Release' is not signed.
533W: GPG error: https://packagecloud.io/github/git-lfs/ubuntu trusty InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 6B05F25D762E3157
534W: The repository 'https://packagecloud.io/github/git-lfs/ubuntu trusty InRelease' is not signed.
535W: There is no public key available for the following key IDs:
5366B05F25D762E3157  
537E: Failed to fetch http://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages.gz  Hash Sum mismatch
538E: Some index files failed to download. They have been ignored, or old ones used instead.
539E: update failed
540
541The command "./etc/ci/sudo-apt-get-update.sh -q" failed. Retrying, 2 of 3.

We wrap apt-get update in a script that fails if any packages fail to update, because normally this is just a transient Travis connectivity issue, but now it looks like Travis is just misconfigured on some of its packages (?), and this is causing all of our builds to fail.

See also https://github.com/travis-ci/travis-ci/issues/9037#issuecomment-517453325

It seems like this has happened before, and took three days to solve last time?

I believe this issue was transient and only lasted for 1-2 hours yesterday. Can you try to restart your builds and let me know if they are working today?

They seem to mostly work now, thanks! (Out of a couple dozen builds, only one failed with an apt error; the apt error was not about Chrome, and that job worked fine when I restarted it.)

1 Like
Imprint