Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #238752 > unrolled thread

what's wrong with my "/etc/apt/sources.list"? Updating from such a repository can't be done securely, and is therefore disabled by default

Started byEvelyn Pereira Souza <ContainerPi@disroot.org>
First post2021-08-15 18:10 +0200
Last post2021-08-15 18:50 +0200
Articles 7 — 7 participants

Back to article view | Back to linux.debian.user

Contents

  what's wrong with my "/etc/apt/sources.list"? Updating from such a  repository can't be done securely, and is therefore disabled by default Evelyn Pereira Souza <ContainerPi@disroot.org> - 2021-08-15 18:10 +0200
    Re: what's wrong with my "/etc/apt/sources.list"? Updating from such  a repository can't be done securely, and is therefore disabled by default The Wanderer <wanderer@fastmail.fm> - 2021-08-15 18:10 +0200
      Re: what's wrong with my "/etc/apt/sources.list"? Updating from such  a repository can't be done securely, and is therefore disabled by default <tomas@tuxteam.de> - 2021-08-15 18:20 +0200
      Re: what's wrong with my "/etc/apt/sources.list"? Updating from such  a repository can't be done securely, and is therefore disabled by default Brian <ad44@cityscape.co.uk> - 2021-08-15 18:20 +0200
    Re: what's wrong with my "/etc/apt/sources.list"? Updating from such  a repository can't be done securely, and is therefore disabled by default Michael Grant <mgrant@grant.org> - 2021-08-15 18:20 +0200
    Re: what's wrong with my "/etc/apt/sources.list"? Updating from such a repository can't be done securely, and is therefore disabled by default Hans <hans.ullrich@loop.de> - 2021-08-15 18:20 +0200
    Re: what's wrong with my "/etc/apt/sources.list"? Updating from such  a repository can't be done securely, and is therefore disabled by default Andy Smith <andy@strugglers.net> - 2021-08-15 18:50 +0200

#238752 — what's wrong with my "/etc/apt/sources.list"? Updating from such a repository can't be done securely, and is therefore disabled by default

FromEvelyn Pereira Souza <ContainerPi@disroot.org>
Date2021-08-15 18:10 +0200
Subjectwhat's wrong with my "/etc/apt/sources.list"? Updating from such a repository can't be done securely, and is therefore disabled by default
Message-ID<CMqRY-3PM-5@gated-at.bofh.it>

[Multipart message — attachments visible in raw view] — view raw

Hi

apt-get update
Ign:1 http://security.debian.org/debian-security bullseye/updates InRelease
Err:2 http://security.debian.org/debian-security bullseye/updates Release
   404  Not Found [IP: 199.232.138.132 80]
Hit:3 http://mirror.init7.net/debian bullseye InRelease
Hit:4 http://mirror.init7.net/debian bullseye-updates InRelease
Reading package lists... Done
E: The repository 'http://security.debian.org/debian-security 
bullseye/updates Release' does not have a Release file.
N: Updating from such a repository can't be done securely, and is 
therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user 
configuration details.


cat /etc/apt/sources.list
#

# deb cdrom:[Debian GNU/Linux 10.10.0 _Buster_ - Official amd64 xfce-CD 
Binary-1 20210619-16:12]/ bullseye main

#deb cdrom:[Debian GNU/Linux 10.10.0 _Buster_ - Official amd64 xfce-CD 
Binary-1 20210619-16:12]/ bullseye main

deb http://mirror.init7.net/debian/ bullseye main contrib non-free
deb-src http://mirror.init7.net/debian/ bullseye main contrib non-free

deb http://security.debian.org/debian-security bullseye/updates main 
contrib non-free
deb-src http://security.debian.org/debian-security bullseye/updates main 
contrib non-free

# bullseye-updates, previously known as 'volatile'
deb http://mirror.init7.net/debian/ bullseye-updates main contrib non-free
deb-src http://mirror.init7.net/debian/ bullseye-updates main contrib 
non-free

# This system was installed using small removable media
# (e.g. netinst, live or single CD). The matching "deb cdrom"
# entries were disabled at the end of the installation process.
# For information about how to configure apt package sources,
# see the sources.list(5) manual.

kind regards
Evelyn

[toc] | [next] | [standalone]

#238754 — Re: what's wrong with my "/etc/apt/sources.list"? Updating from such a repository can't be done securely, and is therefore disabled by default

FromThe Wanderer <wanderer@fastmail.fm>
Date2021-08-15 18:10 +0200
SubjectRe: what's wrong with my "/etc/apt/sources.list"? Updating from such a repository can't be done securely, and is therefore disabled by default
Message-ID<CMqRZ-3PM-27@gated-at.bofh.it>
In reply to#238752

[Multipart message — attachments visible in raw view] — view raw

On 2021-08-15 at 12:00, Evelyn Pereira Souza wrote:

> Hi
> 
> apt-get update
> Ign:1 http://security.debian.org/debian-security bullseye/updates InRelease
> Err:2 http://security.debian.org/debian-security bullseye/updates Release
>    404  Not Found [IP: 199.232.138.132 80]

> deb http://security.debian.org/debian-security bullseye/updates main contrib non-free

This 'suite/updates' syntax is apparently no longer correct for
security.debian.org.

I'm not familiar with the use of this 'debian-security' affix on the
repository URL, but for comparison, my own sources.list now has:

deb http://security.debian.org/ testing-security main contrib non-free

and I'm not getting this 404 anymore.

You might try something analogous (probably with 'bullseye-security') in
place of 'bullseye/updates', and see whether it helps.

-- 
   The Wanderer

The reasonable man adapts himself to the world; the unreasonable one
persists in trying to adapt the world to himself. Therefore all
progress depends on the unreasonable man.         -- George Bernard Shaw

[toc] | [prev] | [next] | [standalone]

#238757 — Re: what's wrong with my "/etc/apt/sources.list"? Updating from such a repository can't be done securely, and is therefore disabled by default

From<tomas@tuxteam.de>
Date2021-08-15 18:20 +0200
SubjectRe: what's wrong with my "/etc/apt/sources.list"? Updating from such a repository can't be done securely, and is therefore disabled by default
Message-ID<CMr1E-3Tb-13@gated-at.bofh.it>
In reply to#238754

[Multipart message — attachments visible in raw view] — view raw

On Sun, Aug 15, 2021 at 12:06:18PM -0400, The Wanderer wrote:
> On 2021-08-15 at 12:00, Evelyn Pereira Souza wrote:
> 
> > Hi
> > 
> > apt-get update
> > Ign:1 http://security.debian.org/debian-security bullseye/updates InRelease
> > Err:2 http://security.debian.org/debian-security bullseye/updates Release
> >    404  Not Found [IP: 199.232.138.132 80]
> 
> > deb http://security.debian.org/debian-security bullseye/updates main contrib non-free
> 
> This 'suite/updates' syntax is apparently no longer correct for
> security.debian.org.
> 
> I'm not familiar with the use of this 'debian-security' affix on the
> repository URL, but for comparison, my own sources.list now has:
> 
> deb http://security.debian.org/ testing-security main contrib non-free

Someone helpfully posted that in this list, not long ago:

  "NOTE Layout of security repositories

   Starting with Debian 11 Bullseye, the codename of the repository
   providing security updates has been renamed from codename/updates
   into codename-security to avoid the confusion with codename-updates
   (see Section 6.1.2.2, 'Stable Updates')." [1]

So at least, the 'bullseye/updates' to the right of the URL should, at least,
be 'bullseye-security, as you noted, Wanderer.

> and I'm not getting this 404 anymore.
> 
> You might try something analogous (probably with 'bullseye-security') in
> place of 'bullseye/updates', and see whether it helps.

So it seems to be intentional.

Cheers
[1] https://debian-handbook.info/browse/en-US/stable/apt.html#sect.apt-sources.list.testing
 - t

[toc] | [prev] | [next] | [standalone]

#238759 — Re: what's wrong with my "/etc/apt/sources.list"? Updating from such a repository can't be done securely, and is therefore disabled by default

FromBrian <ad44@cityscape.co.uk>
Date2021-08-15 18:20 +0200
SubjectRe: what's wrong with my "/etc/apt/sources.list"? Updating from such a repository can't be done securely, and is therefore disabled by default
Message-ID<CMr1E-3Tb-17@gated-at.bofh.it>
In reply to#238754
On Sun 15 Aug 2021 at 12:06:18 -0400, The Wanderer wrote:

> On 2021-08-15 at 12:00, Evelyn Pereira Souza wrote:
> 
> > Hi
> > 
> > apt-get update
> > Ign:1 http://security.debian.org/debian-security bullseye/updates InRelease
> > Err:2 http://security.debian.org/debian-security bullseye/updates Release
> >    404  Not Found [IP: 199.232.138.132 80]
> 
> > deb http://security.debian.org/debian-security bullseye/updates main contrib non-free
> 
> This 'suite/updates' syntax is apparently no longer correct for
> security.debian.org.
> 
> I'm not familiar with the use of this 'debian-security' affix on the
> repository URL, but for comparison, my own sources.list now has:
> 
> deb http://security.debian.org/ testing-security main contrib non-free
> 
> and I'm not getting this 404 anymore.
> 
> You might try something analogous (probably with 'bullseye-security') in
> place of 'bullseye/updates', and see whether it helps.

I have

 deb http://security.debian.org/debian-security bullseye-security main

-- 
Brian.

[toc] | [prev] | [next] | [standalone]

#238756 — Re: what's wrong with my "/etc/apt/sources.list"? Updating from such a repository can't be done securely, and is therefore disabled by default

FromMichael Grant <mgrant@grant.org>
Date2021-08-15 18:20 +0200
SubjectRe: what's wrong with my "/etc/apt/sources.list"? Updating from such a repository can't be done securely, and is therefore disabled by default
Message-ID<CMr1E-3Tb-5@gated-at.bofh.it>
In reply to#238752

[Multipart message — attachments visible in raw view] — view raw

> deb http://security.debian.org/debian-security bullseye/updates main contrib
> non-free
> deb-src http://security.debian.org/debian-security bullseye/updates main
> contrib non-free

I think you are missing bullseye-security.  I have this:

deb     http://mirrors.linode.com/debian-security/ bullseye-security main contrib non-free
deb-src http://mirrors.linode.com/debian-security/ bullseye-security main contrib non-free

I'm not so sure I need the 'contrib non-free' at the end of the line
but it's not giving me any errors.

[toc] | [prev] | [next] | [standalone]

#238758 — Re: what's wrong with my "/etc/apt/sources.list"? Updating from such a repository can't be done securely, and is therefore disabled by default

FromHans <hans.ullrich@loop.de>
Date2021-08-15 18:20 +0200
SubjectRe: what's wrong with my "/etc/apt/sources.list"? Updating from such a repository can't be done securely, and is therefore disabled by default
Message-ID<CMr1E-3Tb-9@gated-at.bofh.it>
In reply to#238752

[Multipart message — attachments visible in raw view] — view raw

Am Sonntag, 15. August 2021, 18:00:08 CEST schrieb Evelyn Pereira Souza:
Hi Evelyn, 

the entry in sources.list has changed, it is now:

deb http://deb.debian.org/debian-security bullseye-security main contrib non-free 
deb-src http://deb.debian.org/debian-security bullseye-security main contrib non-free

Hope this helps.

Best regards

Hans

> Hi
> 
> apt-get update
> Ign:1 http://security.debian.org/debian-security bullseye/updates InRelease
> Err:2 http://security.debian.org/debian-security bullseye/updates Release
>    404  Not Found [IP: 199.232.138.132 80]
> Hit:3 http://mirror.init7.net/debian bullseye InRelease
> Hit:4 http://mirror.init7.net/debian bullseye-updates InRelease
> Reading package lists... Done
> E: The repository 'http://security.debian.org/debian-security
> bullseye/updates Release' does not have a Release file.
> N: Updating from such a repository can't be done securely, and is
> therefore disabled by default.
> N: See apt-secure(8) manpage for repository creation and user
> configuration details.
> 
> 
> cat /etc/apt/sources.list
> #
> 
> # deb cdrom:[Debian GNU/Linux 10.10.0 _Buster_ - Official amd64 xfce-CD
> Binary-1 20210619-16:12]/ bullseye main
> 
> #deb cdrom:[Debian GNU/Linux 10.10.0 _Buster_ - Official amd64 xfce-CD
> Binary-1 20210619-16:12]/ bullseye main
> 
> deb http://mirror.init7.net/debian/ bullseye main contrib non-free
> deb-src http://mirror.init7.net/debian/ bullseye main contrib non-free
> 
> deb http://security.debian.org/debian-security bullseye/updates main
> contrib non-free
> deb-src http://security.debian.org/debian-security bullseye/updates main
> contrib non-free
> 
> # bullseye-updates, previously known as 'volatile'
> deb http://mirror.init7.net/debian/ bullseye-updates main contrib non-free
> deb-src http://mirror.init7.net/debian/ bullseye-updates main contrib
> non-free
> 
> # This system was installed using small removable media
> # (e.g. netinst, live or single CD). The matching "deb cdrom"
> # entries were disabled at the end of the installation process.
> # For information about how to configure apt package sources,
> # see the sources.list(5) manual.
> 
> kind regards
> Evelyn

[toc] | [prev] | [next] | [standalone]

#238761 — Re: what's wrong with my "/etc/apt/sources.list"? Updating from such a repository can't be done securely, and is therefore disabled by default

FromAndy Smith <andy@strugglers.net>
Date2021-08-15 18:50 +0200
SubjectRe: what's wrong with my "/etc/apt/sources.list"? Updating from such a repository can't be done securely, and is therefore disabled by default
Message-ID<CMruF-42Y-3@gated-at.bofh.it>
In reply to#238752

[Multipart message — attachments visible in raw view] — view raw

Hi Evelyn,

On Sun, Aug 15, 2021 at 06:00:08PM +0200, Evelyn Pereira Souza wrote:
> E: The repository 'http://security.debian.org/debian-security
> bullseye/updates Release' does not have a Release file.

A few people have by now pointed out the specific cause of your
problem, but the root cause is that you've done an update to the
next version of Debian without reading the release notes. You always
need to read the release notes, every time, not just for bullseye.

    https://www.debian.org/releases/bullseye/amd64/release-notes/ch-information.en.html

As you can see there are a number of other issues there. There
usually are. So save yourself some frustration by reading the
release notes every time.

Cheers,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web