netbird: Install fails due to expired PGP key

Describe the problem Attempt to install via cli:

curl -fsSL https://pkgs.netbird.io/install.sh | sh

I am getting error about PGP key:

➜  ~ curl -fsSL https://pkgs.netbird.io/install.sh | sh
NetBird UI installation will be omitted as Linux does not run desktop environment
The installation will be performed using apt package manager
Hit:1 http://nova.clouds.archive.ubuntu.com/ubuntu jammy InRelease
Hit:2 http://nova.clouds.archive.ubuntu.com/ubuntu jammy-updates InRelease                                                               
Hit:3 http://nova.clouds.archive.ubuntu.com/ubuntu jammy-backports InRelease                                                                                     
Hit:4 https://swupdate.openvpn.net/community/openvpn3/repos jammy InRelease                                                                                      
Get:5 https://pkgs.tailscale.com/stable/ubuntu jammy InRelease                                                                                                   
Hit:6 http://security.ubuntu.com/ubuntu jammy-security InRelease                            
Get:7 https://pkgs.netbird.io/debian stable InRelease [5934 B]        
Err:7 https://pkgs.netbird.io/debian stable InRelease
  The following signatures were invalid: EXPKEYSIG 83F79AD029778355 Wiretrustee <dev@wiretrustee.com>
Reading package lists... Done
W: GPG error: https://pkgs.netbird.io/debian stable InRelease: The following signatures were invalid: EXPKEYSIG 83F79AD029778355 Wiretrustee <dev@wiretrustee.com>
E: The repository 'https://pkgs.netbird.io/debian stable InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

About this issue

Original URL
State: open
Created 9 months ago
Reactions: 3
Comments: 17 (3 by maintainers)

Most upvoted comments

Why is the server not deployed in the United States? The download speed is too slow.

Hiyajomaho-num9 on Nov 10, 2023

is it that complicated to replace a file???

lfarkas on Oct 13, 2023

@fluidum strange, maybe you have netbird added in some other repo source file? you can find that with sudo grep -riE 'netbird|wiretrustee' /etc/apt

shvchk on Oct 23, 2023

@fluidum Try to delete old keys and repo source files manually an then re-add: https://github.com/netbirdio/public-keys/issues/1#issuecomment-1736322449

shvchk on Oct 19, 2023

@lfarkas It might be a misunderstanding, the file has been replaced, and the output is correct.

Can you test in a clean environment by running a fedora docker container and running the install script as follows?

curl -fsSL https://pkgs.netbird.io/install.sh | sh

mlsmaycon on Oct 13, 2023

@gene1wood here’s a list of known possible (old) keys and repo source files locations on Debian / Ubuntu + proper manual fix: https://github.com/netbirdio/public-keys/issues/1#issuecomment-1736322449

install.sh has been updated, so at least on Debian it should now fix all problems with expired keys or wrong repo source file location. Looks like it will also fix problems on RPM distros, although I didn’t test that.

curl -fsSL https://pkgs.netbird.io/install.sh | sh

Remaining things to fix / check, imo:

Sync control panel Add peer guide with other docs (file locations)
Test if install.sh fixes problems with keys on RPM distros
Mention install.sh in the main Installation guide, now it seems to be only mentioned on the Add peer page

shvchk on Sep 28, 2023

@gene1wood @risasoft hello folks, our GPG public keys for deb and rpm based packages have expired. We updated them, and for you to be able to use the repository, you need to reimport the keys with the following commands:

deb based (Ubuntu, Debian, etc):

curl -sSL https://pkgs.netbird.io/debian/public.key | sudo gpg --dearmor --output /usr/share/keyrings/netbird-archive-keyring.gpg

rpm based (Centos, Fedora, Rocky, etc):

for pubring in /var/cache/dnf/NetBird-*/pubring /var/lib/yum/repos/*/*/NetBird/gpgdir /var/lib/yum/repos/*/*/NetBird/gpgdir-ro
do
  gpg --homedir $pubring --delete-key AA9C09AA9DEA2F58112B40DFDFFEAB2FD267A61F
done

mlsmaycon on Sep 26, 2023