All our Travis builds are failing because apt has bad keys for chrome

Environments Linux
1

https://travis-ci.org/mit-plv/fiat-crypto/jobs/566645440

Why is Travis trying to fetch Chrome anyway?

48813.14s$ travis_retry ./etc/ci/sudo-apt-get-update.sh -q
489Hit:1 http://dl.hhvm.com/ubuntu trusty InRelease
490Hit:3 http://ppa.launchpad.net/chris-lea/redis-server/ubuntu trusty InRelease
491Hit:5 http://apt.postgresql.org/pub/repos/apt trusty-pgdg InRelease
492Hit:6 http://security.ubuntu.com/ubuntu trusty-security InRelease
493Hit:2 http://dl.bintray.com/apache/cassandra 39x InRelease
494Ign:7 http://us-east-1.ec2.archive.ubuntu.com/ubuntu trusty InRelease
495Hit:8 http://us-east-1.ec2.archive.ubuntu.com/ubuntu trusty-updates InRelease
496Ign:9 http://repo.mongodb.org/apt/ubuntu trusty/mongodb-org/3.4 InRelease
497Hit:10 http://us-east-1.ec2.archive.ubuntu.com/ubuntu trusty-backports InRelease
498Hit:11 http://repo.mongodb.org/apt/ubuntu trusty/mongodb-org/3.4 Release
499Hit:12 http://us-east-1.ec2.archive.ubuntu.com/ubuntu trusty Release
500Ign:4 http://heroku-toolbelt.s3.amazonaws.com/apt ./ InRelease
501Hit:13 http://heroku-toolbelt.s3.amazonaws.com/apt ./ Release
502Ign:14 http://ppa.launchpad.net/couchdb/stable/ubuntu trusty InRelease
503Hit:15 http://ppa.launchpad.net/git-core/ppa/ubuntu trusty InRelease
504Get:16 http://ppa.launchpad.net/jgross-h/coq-master-daily/ubuntu trusty InRelease [16.0 kB]
505Hit:17 http://ppa.launchpad.net/openjdk-r/ppa/ubuntu trusty InRelease
506Hit:18 http://ppa.launchpad.net/pollinate/ppa/ubuntu trusty InRelease
507Get:19 http://ppa.launchpad.net/ubuntu-toolchain-r/test/ubuntu trusty InRelease [15.4 kB]
508Hit:20 http://ppa.launchpad.net/webupd8team/java/ubuntu trusty InRelease
509Hit:21 https://download.docker.com/linux/ubuntu trusty InRelease
510Hit:22 http://ppa.launchpad.net/couchdb/stable/ubuntu trusty Release
511Ign:23 http://dl.google.com/linux/chrome/deb stable InRelease
512Get:24 http://dl.google.com/linux/chrome/deb stable Release [943 B]
513Get:25 http://dl.google.com/linux/chrome/deb stable Release.gpg [819 B]
514Get:29 http://ppa.launchpad.net/jgross-h/coq-master-daily/ubuntu trusty/main amd64 Packages [12.3 kB]
515Get:30 http://ppa.launchpad.net/jgross-h/coq-master-daily/ubuntu trusty/main i386 Packages [12.3 kB]
516Get:31 http://ppa.launchpad.net/jgross-h/coq-master-daily/ubuntu trusty/main Translation-en [8,862 B]
517Hit:32 https://packagecloud.io/computology/apt-backport/ubuntu trusty InRelease
518Get:33 http://ppa.launchpad.net/ubuntu-toolchain-r/test/ubuntu trusty/main amd64 Packages [93.6 kB]
519Get:34 http://ppa.launchpad.net/ubuntu-toolchain-r/test/ubuntu trusty/main i386 Packages [91.8 kB]
520Get:35 http://ppa.launchpad.net/ubuntu-toolchain-r/test/ubuntu trusty/main Translation-en [19.3 kB]
521Get:36 https://packagecloud.io/github/git-lfs/ubuntu trusty InRelease [23.2 kB]
522Ign:25 http://dl.google.com/linux/chrome/deb stable Release.gpg
523Get:38 http://dl.google.com/linux/chrome/deb stable/main amd64 Packages [1,101 B]
524Err:38 http://dl.google.com/linux/chrome/deb stable/main amd64 Packages
525  Hash Sum mismatch
526Ign:36 https://packagecloud.io/github/git-lfs/ubuntu trusty InRelease
527Hit:39 https://packagecloud.io/rabbitmq/rabbitmq-server/ubuntu trusty InRelease
528Fetched 295 kB in 1s (215 kB/s)
529Reading package lists...
530W: http://ppa.launchpad.net/couchdb/stable/ubuntu/dists/trusty/Release.gpg: Signature by key 15866BAFD9BCC4F3C1E0DFC7D69548E1C17EAB57 uses weak digest algorithm (SHA1)
531W: GPG error: http://dl.google.com/linux/chrome/deb stable Release: The following signatures were invalid: BADSIG 6494C6D6997C215E Google Inc. (Linux Packages Signing Authority) <linux-packages-keymaster@google.com>  The following signatures were invalid: KEYEXPIRED 1555048520  KEYEXPIRED 1555048520
532W: The repository 'http://dl.google.com/linux/chrome/deb stable Release' is not signed.
533W: GPG error: https://packagecloud.io/github/git-lfs/ubuntu trusty InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 6B05F25D762E3157
534W: The repository 'https://packagecloud.io/github/git-lfs/ubuntu trusty InRelease' is not signed.
535W: There is no public key available for the following key IDs:
5366B05F25D762E3157  
537E: Failed to fetch http://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages.gz  Hash Sum mismatch
538E: Some index files failed to download. They have been ignored, or old ones used instead.
539E: update failed
540
541The command "./etc/ci/sudo-apt-get-update.sh -q" failed. Retrying, 2 of 3.

We wrap apt-get update in a script that fails if any packages fail to update, because normally this is just a transient Travis connectivity issue, but now it looks like Travis is just misconfigured on some of its packages (?), and this is causing all of our builds to fail.

2

See also https://github.com/travis-ci/travis-ci/issues/9037#issuecomment-517453325

3

It seems like this has happened before, and took three days to solve last time?

4

I believe this issue was transient and only lasted for 1-2 hours yesterday. Can you try to restart your builds and let me know if they are working today?

5

They seem to mostly work now, thanks! (Out of a couple dozen builds, only one failed with an apt error; the apt error was not about Chrome, and that job worked fine when I restarted it.)

1 Like