Expired ROS GPG key & new RealSense APT repo

Announce
1

Hi all,

Recently, there have been two upstream changes to APT repositories that may affect how Stretch users update software on their robots:

  1. The ROS GPG key has expired. This key was used to ensure the security of ROS 1 and ROS 2 updates from their APT repositories. See the ROS Discourse post for more details.
  2. The RealSense APT repo URL was changed to use the secure version of the hypertext transfer protocol (HTTPS). See the RealSense issue tracker for more details.

What this means for Stretch Users

Our installation process has been updated, so new robots will not need to apply the fixes below. For everyone else, the next time you run sudo apt update, you may see one or both of the following errors.

Outdated RealSense Repo

If you see the following error

Err:XX http://realsense-hw-public.s3.amazonaws.com/Debian/apt-repo bionic InRelease                                   
  403  Forbidden [IP: 52.218.36.57 80]
[...]
E: Failed to fetch http://realsense-hw-public.s3.amazonaws.com/Debian/apt-repo/dists/bionic/InRelease  403  Forbidden [IP: 52.218.36.57 80]
E: The repository 'http://realsense-hw-public.s3.amazonaws.com/Debian/apt-repo bionic InRelease' is no longer signed.

Remove the offending APT repo and add the new secure repo with:

$ sudo add-apt-repository --remove "deb http://realsense-hw-public.s3.amazonaws.com/Debian/apt-repo bionic main" -u
$ sudo add-apt-repository "deb https://librealsense.intel.com/Debian/apt-repo bionic main" -u

Expired ROS GPG Key

If you see the following error

Err:XX http://packages.ros.org/ros/ubuntu bionic InRelease                             
  The following signatures were invalid: EXPKEYSIG F42ED6FBAB17C654 Open Robotics <info@osrfoundation.org>
[...]
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://packages.ros.org/ros/ubuntu bionic InRelease: The following signatures were invalid: EXPKEYSIG F42ED6FBAB17C654 Open Robotics <info@osrfoundation.org>
W: Failed to fetch http://packages.ros.org/ros/ubuntu/dists/bionic/InRelease  The following signatures were invalid: EXPKEYSIG F42ED6FBAB17C654 Open Robotics <info@osrfoundation.org>

Update the key for the ROS 1 APT repository with:

$ curl -s https://raw.githubusercontent.com/ros/rosdistro/master/ros.asc | sudo apt-key add -

For ROS2 users, see the ROS Discourse post for the command used to update the key for the ROS 2 APT repository.

1 Like