[SERVER-28114] Installation Elicits Security Warning on Ubuntu 16.10 Created: 26/Feb/17  Updated: 27/Oct/23  Resolved: 27/Feb/17

Status: Closed
Project: Core Server
Component/s: Packaging
Affects Version/s: 3.4.2
Fix Version/s: None

Type: Bug Priority: Major - P3
Reporter: Kurt von Laven Assignee: Brian Samek
Resolution: Works as Designed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Operating System: ALL
Steps To Reproduce:

{{sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv 0C49F3730359A14518585931BC711F9BA15703C6
echo "deb [ arch=amd64,arm64 ] http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4 multiverse" | sudo tee /etc/apt/sources.list.d/mongodb-org-3.4.list
sudo apt-get update
sudo apt-get install mongodb-org
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
mongodb-org-mongos mongodb-org-server mongodb-org-shell mongodb-org-tools
The following NEW packages will be installed:
mongodb-org mongodb-org-mongos mongodb-org-server mongodb-org-shell mongodb-org-tools
0 upgraded, 5 newly installed, 0 to remove and 0 not upgraded.
Need to get 66.7 MB of archives.
After this operation, 269 MB of additional disk space will be used.
Do you want to continue? [Y/n] y
WARNING: The following packages cannot be authenticated!
mongodb-org-shell mongodb-org-server mongodb-org-mongos mongodb-org-tools mongodb-org
Install these packages without verification? [y/N] n
E: Some packages could not be authenticated}}

Participants:

 Description   

I followed the instructions for Ubuntu 16.04 from https://docs.mongodb.com/manual/tutorial/install-mongodb-on-ubuntu/ to install MongoDB 3.4 on Ubuntu 16.10. I stopped, because I got a warning stating that the mongodb-org package and its dependencies couldn't be authenticated.



 Comments   
Comment by Brian Samek [ 27/Feb/17 ]

You're welcome!

Comment by Kurt von Laven [ 27/Feb/17 ]

Bingo! That fixed the issue for me. Thank you for the help, Brian.

Comment by Brian Samek [ 27/Feb/17 ]

I'm able to reproduce your problem by running the installation steps out of order:

echo "deb [ arch=amd64,arm64 ] http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4 multiverse" | sudo tee /etc/apt/sources.list.d/mongodb-org-3.4.list
sudo apt-get update
sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv 0C49F3730359A14518585931BC711F9BA15703C6

I can fix this by removing and re-adding the repository:

sudo rm /etc/apt/sources.list.d/mongodb-org-3.4.list
sudo apt-get update
echo "deb [ arch=amd64,arm64 ] http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4 multiverse" | sudo tee /etc/apt/sources.list.d/mongodb-org-3.4.list
sudo apt-get update
sudo apt-get install mongodb-org

Could you try this, please?

Comment by Kurt von Laven [ 27/Feb/17 ]

Hello Brian,

Here is the full output you requested. I am still reproducing the issue and have been since I first tried to install Mongo 3.4 a month or two ago if I recall correctly. Please let me know what additional details would be helpful for investigating this issue.

Be well,
Kurt

sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv 0C49F3730359A14518585931BC711F9BA15703C6
Executing: /tmp/tmp.KwlotVdtw5/gpg.1.sh --keyserver
hkp://keyserver.ubuntu.com:80
--recv
0C49F3730359A14518585931BC711F9BA15703C6
gpg: key BC711F9BA15703C6: "MongoDB 3.4 Release Signing Key <packaging@mongodb.com>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
kurt@rogue:~/triggr/triggr_misc/Ansible$ echo "deb [ arch=amd64,arm64 ] http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4 multiverse" | sudo tee /etc/apt/sources.list.d/mongodb-org-3.4.list
deb [ arch=amd64,arm64 ] http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4 multiverse
kurt@rogue:~/triggr/triggr_misc/Ansible$ sudo apt-get update
Hit:1 http://us.archive.ubuntu.com/ubuntu yakkety InRelease
Ign:2 http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4 InRelease   
Get:3 http://us.archive.ubuntu.com/ubuntu yakkety-updates InRelease [102 kB]                                                
Hit:4 http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4 Release                                                     
Get:5 http://security.ubuntu.com/ubuntu yakkety-security InRelease [102 kB]    
Get:6 http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4 Release.gpg [801 B]                      
Hit:7 https://deb.nodesource.com/node_6.x yakkety InRelease                                                         
Get:8 http://us.archive.ubuntu.com/ubuntu yakkety-backports InRelease [102 kB]     
Fetched 307 kB in 0s (391 kB/s)                                                              
Reading package lists... Done
kurt@rogue:~/triggr/triggr_misc/Ansible$ sudo apt-get install mongodb-org
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following additional packages will be installed:
  mongodb-org-mongos mongodb-org-server mongodb-org-shell mongodb-org-tools
The following NEW packages will be installed:
  mongodb-org mongodb-org-mongos mongodb-org-server mongodb-org-shell mongodb-org-tools
0 upgraded, 5 newly installed, 0 to remove and 0 not upgraded.
Need to get 66.7 MB of archives.
After this operation, 269 MB of additional disk space will be used.
Do you want to continue? [Y/n] y
WARNING: The following packages cannot be authenticated!
  mongodb-org-shell mongodb-org-server mongodb-org-mongos mongodb-org-tools mongodb-org
Install these packages without verification? [y/N] n
E: Some packages could not be authenticated

Comment by Brian Samek [ 27/Feb/17 ]

Hi Kurt,

I'm unable to reproduce this problem on a bento/ubuntu-16.10 Vagrant box. Could you try the install again, and paste the full output you receive?

vagrant@vagrant:~$ sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv 0C49F3730359A14518585931BC711F9BA15703C6
Executing: /tmp/tmp.Q2mANfnXWc/gpg.1.sh --keyserver
hkp://keyserver.ubuntu.com:80
--recv
0C49F3730359A14518585931BC711F9BA15703C6
gpg: key BC711F9BA15703C6: public key "MongoDB 3.4 Release Signing Key <packaging@mongodb.com>" imported
gpg: Total number processed: 1
gpg:               imported: 1
vagrant@vagrant:~$ echo "deb [ arch=amd64,arm64 ] http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4 multiverse" | sudo tee /etc/apt/sources.list.d/mongodb-org-3.4.list
deb [ arch=amd64,arm64 ] http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4 multiverse
vagrant@vagrant:~$ sudo apt-get update
Get:1 http://security.ubuntu.com/ubuntu yakkety-security InRelease [102 kB]
Hit:2 http://us.archive.ubuntu.com/ubuntu yakkety InRelease
Get:3 http://us.archive.ubuntu.com/ubuntu yakkety-updates InRelease [102 kB]
Get:4 http://us.archive.ubuntu.com/ubuntu yakkety-backports InRelease [102 kB]
Ign:5 http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4 InRelease
Get:6 http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4 Release [3,457 B]
Get:7 http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4 Release.gpg [801 B]
Get:8 http://security.ubuntu.com/ubuntu yakkety-security/main i386 Packages [98.9 kB]
Get:9 http://security.ubuntu.com/ubuntu yakkety-security/main amd64 Packages [101 kB]
Get:10 http://security.ubuntu.com/ubuntu yakkety-security/main Translation-en [45.0 kB]
Get:11 http://security.ubuntu.com/ubuntu yakkety-security/restricted i386 Packages [5,196 B]
Get:12 http://security.ubuntu.com/ubuntu yakkety-security/restricted amd64 Packages [5,180 B]
Get:13 http://security.ubuntu.com/ubuntu yakkety-security/restricted Translation-en [1,880 B]
Get:14 http://security.ubuntu.com/ubuntu yakkety-security/universe i386 Packages [39.9 kB]
Get:15 http://security.ubuntu.com/ubuntu yakkety-security/universe amd64 Packages [42.1 kB]
Get:16 http://security.ubuntu.com/ubuntu yakkety-security/universe Translation-en [26.4 kB]
Get:17 http://security.ubuntu.com/ubuntu yakkety-security/multiverse i386 Packages [3,008 B]
Get:18 http://security.ubuntu.com/ubuntu yakkety-security/multiverse amd64 Packages [2,844 B]
Get:19 http://security.ubuntu.com/ubuntu yakkety-security/multiverse Translation-en [1,268 B]
Get:20 http://us.archive.ubuntu.com/ubuntu yakkety-updates/main i386 Packages [189 kB]
Get:21 http://us.archive.ubuntu.com/ubuntu yakkety-updates/main amd64 Packages [192 kB]
Get:22 http://us.archive.ubuntu.com/ubuntu yakkety-updates/main Translation-en [84.7 kB]
Get:23 http://us.archive.ubuntu.com/ubuntu yakkety-updates/restricted amd64 Packages [5,180 B]
Get:24 http://us.archive.ubuntu.com/ubuntu yakkety-updates/restricted i386 Packages [5,196 B]
Get:25 http://us.archive.ubuntu.com/ubuntu yakkety-updates/restricted Translation-en [1,880 B]
Get:26 http://us.archive.ubuntu.com/ubuntu yakkety-updates/universe i386 Packages [107 kB]
Get:27 http://us.archive.ubuntu.com/ubuntu yakkety-updates/universe amd64 Packages [110 kB]
Get:28 http://us.archive.ubuntu.com/ubuntu yakkety-updates/universe Translation-en [59.3 kB]
Get:29 http://us.archive.ubuntu.com/ubuntu yakkety-updates/multiverse amd64 Packages [4,332 B]
Get:30 http://us.archive.ubuntu.com/ubuntu yakkety-updates/multiverse i386 Packages [4,488 B]
Get:31 http://us.archive.ubuntu.com/ubuntu yakkety-updates/multiverse Translation-en [2,136 B]
Get:32 http://us.archive.ubuntu.com/ubuntu yakkety-backports/main amd64 Packages [2,484 B]
Get:33 http://us.archive.ubuntu.com/ubuntu yakkety-backports/main i386 Packages [2,484 B]
Get:34 http://us.archive.ubuntu.com/ubuntu yakkety-backports/main Translation-en [1,608 B]
Get:35 http://us.archive.ubuntu.com/ubuntu yakkety-backports/universe amd64 Packages [1,560 B]
Get:36 http://us.archive.ubuntu.com/ubuntu yakkety-backports/universe i386 Packages [1,564 B]
Get:37 http://us.archive.ubuntu.com/ubuntu yakkety-backports/universe Translation-en [632 B]
Get:38 http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4/multiverse amd64 Packages [3,419 B]
Get:39 http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4/multiverse arm64 Packages [3,423 B]
Fetched 1,465 kB in 2s (564 kB/s)
Reading package lists... Done
vagrant@vagrant:~$ sudo apt-get install -y mongodb-org
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
  mongodb-org-mongos mongodb-org-server mongodb-org-shell mongodb-org-tools
The following NEW packages will be installed:
  mongodb-org mongodb-org-mongos mongodb-org-server mongodb-org-shell mongodb-org-tools
0 upgraded, 5 newly installed, 0 to remove and 82 not upgraded.
Need to get 66.7 MB of archives.
After this operation, 269 MB of additional disk space will be used.
Get:1 http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4/multiverse amd64 mongodb-org-shell amd64 3.4.2 [7,960 kB]
Get:2 http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4/multiverse amd64 mongodb-org-server amd64 3.4.2 [14.2 MB]
Get:3 http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4/multiverse amd64 mongodb-org-mongos amd64 3.4.2 [8,097 kB]
Get:4 http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4/multiverse amd64 mongodb-org-tools amd64 3.4.2 [36.3 MB]
Get:5 http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.4/multiverse amd64 mongodb-org amd64 3.4.2 [3,554 B]
Fetched 66.7 MB in 6s (10.7 MB/s)
Selecting previously unselected package mongodb-org-shell.
(Reading database ... 38891 files and directories currently installed.)
Preparing to unpack .../0-mongodb-org-shell_3.4.2_amd64.deb ...
Unpacking mongodb-org-shell (3.4.2) ...
Selecting previously unselected package mongodb-org-server.
Preparing to unpack .../1-mongodb-org-server_3.4.2_amd64.deb ...
Unpacking mongodb-org-server (3.4.2) ...
Selecting previously unselected package mongodb-org-mongos.
Preparing to unpack .../2-mongodb-org-mongos_3.4.2_amd64.deb ...
Unpacking mongodb-org-mongos (3.4.2) ...
Selecting previously unselected package mongodb-org-tools.
Preparing to unpack .../3-mongodb-org-tools_3.4.2_amd64.deb ...
Unpacking mongodb-org-tools (3.4.2) ...
Selecting previously unselected package mongodb-org.
Preparing to unpack .../4-mongodb-org_3.4.2_amd64.deb ...
Unpacking mongodb-org (3.4.2) ...
Setting up mongodb-org-shell (3.4.2) ...
Setting up mongodb-org-mongos (3.4.2) ...
Processing triggers for man-db (2.7.5-1) ...
Setting up mongodb-org-tools (3.4.2) ...
Setting up mongodb-org-server (3.4.2) ...
Adding system user `mongodb' (UID 113) ...
Adding new user `mongodb' (UID 113) with group `nogroup' ...
Not creating home directory `/home/mongodb'.
Adding group `mongodb' (GID 117) ...
Done.
Adding user `mongodb' to group `mongodb' ...
Adding user mongodb to group mongodb
Done.
Setting up mongodb-org (3.4.2) ...
vagrant@vagrant:~$

Generated at Thu Feb 08 04:17:09 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.