存储库“ http://dl.google.com/linux/chrome/deb稳定发行版”未签名

Mat*_*ski 26 linux ubuntu apt google-chrome

在CircleCi设置中,我需要执行以下步骤来安装Google Chrome:

  - run:
      name: Install Chrome headless
      working_directory: /
      command: |
        wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | apt-key add - && \
          echo "deb http://dl.google.com/linux/chrome/deb/ stable main" > /etc/apt/sources.list.d/google.list && \
          apt-get update && \
          apt-get install -y dbus-x11 google-chrome-unstable && \
          rm -rf /var/lib/apt/lists/*
Run Code Online (Sandbox Code Playgroud)

它停止工作并返回以下错误消息:

W: GPG error: http://dl.google.com/linux/chrome/deb stable Release: The following signatures were invalid: EXPKEYSIG 1397BC53640DB551 Google Inc. (Linux Packages Signing Authority) <linux-packages-keymaster@google.com>
W: The repository 'http://dl.google.com/linux/chrome/deb stable Release' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Reading package lists... Done


Building dependency tree       


Reading state information... Done

The following additional packages will be installed:
  libappindicator3-1 libdbusmenu-gtk3-4 libindicator3-7
Recommended packages:
  libu2f-udev
The following NEW packages will be installed:
  dbus-x11 google-chrome-unstable libappindicator3-1 libdbusmenu-gtk3-4
  libindicator3-7
0 upgraded, 5 newly installed, 0 to remove and 48 not upgraded.
Need to get 60.4 MB of archives.
After this operation, 214 MB of additional disk space will be used.
WARNING: The following packages cannot be authenticated!
  google-chrome-unstable
E: There were unauthenticated packages and -y was used without --allow-unauthenticated
Exited with code 100
Run Code Online (Sandbox Code Playgroud)

我该如何解决?

Dam*_*zel 17

你不知道 您必须等待Google更新其密钥并进行更新。

重要信息是:

以下签名无效:EXPKEYSIG 1397BC53640DB551 Google Inc.(Linux软件包签名机构)

这意味着密码签名无效。造成这种情况的原因可能是攻击,配置错误或其他类型的技术问题。强制系统更新将导致运行未经验证的Web浏览器版本,从而使您面临很多安全问题。

  • @DamienClauzel,您可以在源列表中使用“trusted=yes”绕过检查。请参阅 https://manpages.debian.org/jessie/apt/sources.list.5.en.html 即 `deb [trusted=yes] http://dl.google...` (3认同)
  • 它到处都在破坏 CI 管道。你知道在运行 `apt update` 时有什么方法可以忽略存储库吗?我们的管道不需要此 repo 的更新版本。 (2认同)
  • 是的,但这不会跳过存储库:相反,它使它被视为始终安全,这根本不是一回事。这样,您将获得不受信任的更新(这很糟糕),而不是没有更新。 (2认同)

her*_*kil 7

与此问题相同(相差10分钟):https : //askubuntu.com/questions/1133199/the-following-signatures-were-invalid-expkeysig-1397bc53640db551

简短说明:Google端的GPG密钥已过期,因此您(我们)必须等待。

  • 这种情况下,@ YaguraStation GPG密钥迟早会过期。您可以在Google支持论坛上查找此问题(已解决,但供将来参考):https://support.google.com/chrome/thread/4032170?hl=zh-CN (2认同)