etcher: repo error `402 Payment Required` from `https://dl.cloudsmith.io/public/balena/etcher/deb/debian bullseye InRelease`

Thanks @ABCMoNa for the kind words, and everyone for reporting the issue. As you may found out from similar issues, cloudsmith has a monthly limit of downloads what etcher reached in the current period. We contacted them and they added 20% to our limit for now, we will work with them together to make your experience smoother in the future.

Hey @thundron and @aethernet , its happening again, same issue on Ubuntu 22.04 LTS:

E: Falhou ao buscar https://dl.cloudsmith.io/public/balena/etcher/deb/ubuntu/dists/jammy/InRelease  402  Payment Required [IP: 108.139.134.25 443]
E: O repositório 'https://dl.cloudsmith.io/public/balena/etcher/deb/ubuntu jammy InRelease' já não está assinado.
N: Atualizações a partir de tal repositório não podem ser feitas de forma segura e estão, portanto, desativadas por definição.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: https://packagecloud.io/slacktechnologies/slack/debian/dists/jessie/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.

Same thing with Ubuntu 20.04 Focal (amd64)

20220109T122432Z: crystamped@mab:~$ lsb_release -a
No LSB modules are available.
Distributor ID:	Ubuntu
Description:	Ubuntu 20.04.3 LTS
Release:	20.04
Codename:	focal
20220109T122439Z: crystamped@mab:~$ sudo apt update | egrep ^E

WARNING: apt does not have a stable CLI interface. Use with caution in scripts.

Err:11 https://dl.cloudsmith.io/public/balena/etcher/deb/ubuntu focal InRelease
E: Failed to fetch https://dl.cloudsmith.io/public/balena/etcher/deb/ubuntu/dists/focal/InRelease  402  Payment Required [IP: 65.8.249.91 443]
E: The repository 'https://dl.cloudsmith.io/public/balena/etcher/deb/ubuntu focal InRelease' is no longer signed.
20220109T122528Z: crystamped@mab:~$ 

@mcraa Please provide a status update on this. Thanks.

Why not just use Launchpad, like nearly every other software project uses for its PPA…? Still getting this error.

Thanks for developing Balena Etcher and providing it to the general public free of charge, and for also hosting an apt repository.

This said, please consider your options to stabilize this (apt repository) service - it would be much appreciated to see a repository which works for more than ~ six months. Thank you.

The download limit got doubled for now, hopefully it is enough at least for another 3 days.

Those 20% – https://github.com/balena-io/etcher/issues/3672#issuecomment-1005482209 – didn’t last long, or so it would seem 😉 Looks like the interest in Balena Etcher’s .deb packages keeps increasing 😃

(In addition to the suggestions for alternatives to Cloudsmith perhaps just the remark that a .deb repository can also – without exactly requiring rocket science – be hosted as a static website on any webspace, as I think it is the case for .rpm repositories, too; but of course something like that might already have been considered…)

so, whats the solution?sudo apt update [sudo] password for me: Get:1 https://download.docker.com/linux/debian bullseye InRelease [43.3 kB] Hit:2 http://deb.debian.org/debian bullseye InRelease
Get:3 http://security.debian.org/debian-security bullseye-security InRelease [44.1 kB] Get:4 http://deb.debian.org/debian bullseye-updates InRelease [39.4 kB]
Err:5 https://dl.cloudsmith.io/public/balena/etcher/deb/debian bullseye InRelease
402 Payment Required [IP: 13.226.97.127 443] Reading package lists… Done E: Failed to fetch https://dl.cloudsmith.io/public/balena/etcher/deb/debian/dists/bullseye/InRelease 402 Payment Required [IP: 13.226.97.127 443] E: The repository ‘https://dl.cloudsmith.io/public/balena/etcher/deb/debian bullseye InRelease’ is no longer signed. N: Updating from such a repository can’t be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details.

That’s great news @mcraa 👍 You can probably close #3511 and #3665 too?

Happy to say the repo didn’t throw any errors for me today. 👍

Also me I have the same problem, I tried on Debian and on Fedora but it seems related to the signature of repository because yesterday it worked without problems. Maybe the signature is expired with the start of new year?

thanks for the ping, but I don’t have the power any more to act on this cc @aethernet

@mcraa the same problem is back again.

just a kind suggestion… why don’t you do a similar thing to https://pmateusz.github.io/linux/2017/06/30/linux-secure-apt-repository.html or just use launchpad and its alternatives

Still an issue for me.

The total downloads size of the last 3 days is close to the average of the past months.

Exactly 3 days ago, there was a new Linux Mint point release (20.3 “Una”). And the interest in that new version was so massive that the project’s servers went to their knees with data rates dropping to two-digit kbit-per-second figures or even connection refusals. Something I’ve never seen before with a new Mint release.

Coincidence?

Usually people would have simply upgraded which is an exceptionally smooth procedure for a point release, but maybe a lot of downloaders did fresh installs and still a large part of them immediately installed etcher, too?

Maybe lots of people got a new SBC for Christmas? 🤣

Perhaps, but I think fundaementally speaking a sudden increase in downloads should never be an issue for a repo.

Maybe lots of people got a new SBC for Christmas? 🤣

@GlenCooper , @rschr figured it right.

Thanks for all the recommendations, we considered and still considering multiple solutions.

The downloads in this period now more than 2.5x of the last months. The total downloads size of the last 3 days is close to the average of the past months. However we are happy that etcher is getting more popular, but this sudden growth - even taking into account the new release -, is kind of suspicious.

Continue getting HTTP 402 Payment Required. With regards to #3501, is Cloudsmith a good option? Alternatives that might be a better option: Bytesafe - free for public open source projects, Open Build Service, Launchpad PPA and Fedora Copr, Pulp - OSS and self hosted.

The same here too… Ubuntu 21.10 (AMD64)

E: Failed to fetch https://dl.cloudsmith.io/public/balena/etcher/deb/ubuntu/dists/impish/InRelease  402  Payment Required [IP: 54.230.114.10 443]
E: The repository 'https://dl.cloudsmith.io/public/balena/etcher/deb/ubuntu impish InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

same issue in Linux Mint 20.02 package Repository doesn’t work

Duplicate of #3665

Same thing with Debian 11 - amd64

Same thing with opensuse repo

Also similar to #3665

Also have this problem. Might be similar to https://github.com/balena-io/etcher/issues/3511?