cloudfoundry / cloudfoundry/cli

Fail to install CF CLI on Ubuntu 24.04 due to "The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 172B5989FCD21EF8"

Open
#3,373 0 comments 3 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
1.9k
Forks
990
Avg merge
1d 7h
Merged PRs (30d)
8

Description

Please fill out the issue checklist below and provide ALL the requested information.

  • I reviewed open and closed github issues that may be related to my problem.
  • I tried updating to the latest version of the CF CLI to see if it fixed my problem.
  • I attempted to run the command with CF_TRACE=1 to help debug the issue. --> not applicable
  • I am reporting a bug that others will be able to reproduce.

Describe the bug and the command you saw an issue with

https://github.com/cloudfoundry/cli/wiki/V8-CLI-Installation-Guide#windows states under "Debian and Ubuntu" that

(apt update && apt install --yes curl gnupg) > /dev/null 2>&1

# Add the Cloud Foundry GPG key
curl -fsSL https://packages.cloudfoundry.org/debian/cli.cloudfoundry.org.key | gpg --dearmor -o /usr/share/keyrings/cloudfoundry-keyring.gpg

# Add the Cloud Foundry repository
echo "deb [signed-by=/usr/share/keyrings/cloudfoundry-keyring.gpg] https://packages.cloudfoundry.org/debian stable main" | tee /etc/apt/sources.list.d/cloudfoundry.list

apt update > /dev/null 2>&1

shall be executed.

What happened
The command apt update fails on Ubuntu 24.04 with the error message

Get:4 https://cf-cli-debian-repo.s3.amazonaws.com stable InRelease [4,368 B]
Err:4 https://cf-cli-debian-repo.s3.amazonaws.com stable InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 172B5989FCD21EF8
Reading package lists... Done
W: GPG error: https://cf-cli-debian-repo.s3.amazonaws.com stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 172B5989FCD21EF8
E: The repository 'https://packages.cloudfoundry.org/debian stable InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Expected behavior
The installation is possible based on the descriptions provided.

Exact Steps To Reproduce
See above.

Provide more context
Performed 2025-01-24 with fresh installation of Ubuntu 24.04

$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 24.04.1 LTS
Release:        24.04
Codename:       noble

Suggested solution
It appears that simply

chmod 0644  /usr/share/keyrings/cloudfoundry-keyring.gpg

is missing in between.
As the file only contains the public key, it appears not to be security issue, relaxing the file modes.
Further details can also be found at https://stackoverflow.com/a/71384057.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the Debian and Ubuntu section of the V8 CLI Installation Guide linked in the issue and reproduce the commands on Ubuntu 24.04. Check the keyring command and the suggested file-mode step; done means the documented installation completes without the NO_PUBKEY error.

Written by the indexing model from the issue text.

Assessment

Tech stack
ubuntu
Domain
documentation
Issue type
Bug
Difficulty
1/5
Estimated time
Under an hour
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.