R SIG Debian - May 2022 - Ubuntu Impish (21.10) repository complains about weak security information

On 16 May 2022 at 16:54, Lennart C. Karssen wrote:
| As a result, I can't upgrade the packages any more (I was about to
| upgrade from R 4.1.3 to 4.2.0).

A brute-force (and 'insecure') fix is to add

  [trusted=yes]

between deb and the url.  Obviously, using properly signed repos with keys is
better but that is not something you have control over.

For what it is worth I too have that in my impish-cran40 line on this 21.10
machine that I reply from.

Dirk


-- 
dirk.eddelbuettel.com | @eddelbuettel | edd at debian.org

On 16-05-2022 17:27, Dirk Eddelbuettel wrote:
> 
> On 16 May 2022 at 16:54, Lennart C. Karssen wrote:
> | As a result, I can't upgrade the packages any more (I was about to
> | upgrade from R 4.1.3 to 4.2.0).
> 
> A brute-force (and 'insecure') fix is to add
> 
>   [trusted=yes]
> 
> between deb and the url.  Obviously, using properly signed repos with keys
is
> better but that is not something you have control over.
Thanks Dirk, that gets me one step further. However, there is still a
hurdle. It seems that (at least at the time of writing) the
impish-cran40/ repo is broken. Apt complains that cannot find the
Packages file:

Ign:13 https://cloud.r-project.org/bin/linux/ubuntu impish-cran40/
Translation-en_US

Fetched 538 B in 14s (38 B/s)


Reading package lists... Done

W: Conflicting distribution:
https://cloud.r-project.org/bin/linux/ubuntu impish-cran40/ InRelease
(expected impish-cran40/ but got )

E: Failed to fetch
https://cloud.r-project.org/bin/linux/ubuntu/impish-cran40/Packages  404
 Not Found [IP: 2600:9000:238d:3600:6:c2d3:f940:93a1 443]


I also tried forcing IPv4, just to be sure, but with the same result. In
fact, browsing to
https://cloud.r-project.org/bin/linux/ubuntu/impish-cran40/Packages
shows that the file doesn't exist. For e.g. focal-cran40 it does exist.

> 
> For what it is worth I too have that in my impish-cran40 line on this 21.10
> machine that I reply from.
Could you please try and see if you get the same error?


Best,

Lennart.

> 
> Dirk
> 
> 
-- 
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
L.C. Karssen
's-Hertogenbosch
The Netherlands

lennart at karssen.org
http://blog.karssen.org
GPG key ID: A88F554A