Updating old repos on Debian 10

SYSTEM INFORMATION
OS type and version Debian Linux 10 EOL in 2 months
Webmin version 2.111
Usermin version 2.010
Virtualmin version 7.10.0
Theme version 21.10
Package updates All installed packages are up to date

Hello,

For a few days, old repos are not working on (old) Debian 10 systems where:

$  cat /etc/apt/sources.list.d/virtualmin.list
deb http://software.virtualmin.com/vm/6/gpl/apt virtualmin-buster main
deb http://software.virtualmin.com/vm/6/gpl/apt virtualmin-universal main

“apt-get update && apt-get upgrade” now resulting into this:

$ apt-get update && apt-get upgrade
Hit:1 http://deb.debian.org/debian buster InRelease
Hit:2 http://deb.debian.org/debian-security buster/updates InRelease
Hit:3 http://deb.debian.org/debian buster-updates InRelease
Hit:4 https://packages.sury.org/php buster InRelease
Hit:5 http://software.virtualmin.com/vm/6/gpl/apt virtualmin-buster InRelease
Hit:6 http://software.virtualmin.com/vm/6/gpl/apt virtualmin-universal InRelease
Err:5 http://software.virtualmin.com/vm/6/gpl/apt virtualmin-buster InRelease
  The following signatures were invalid: EXPKEYSIG D9F9010760D62A6B Virtualmin, Inc. (Package signing key for Virtualmin 6) <security@virtualmin.com>
Err:6 http://software.virtualmin.com/vm/6/gpl/apt virtualmin-universal InRelease
  The following signatures were invalid: EXPKEYSIG D9F9010760D62A6B Virtualmin, Inc. (Package signing key for Virtualmin 6) <security@virtualmin.com>
Reading package lists... Done
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://software.virtualmin.com/vm/6/gpl/apt virtualmin-buster InRelease: The following signatures were invalid: EXPKEYSIG D9F9010760D62A6B Virtualmin, Inc. (Package signing key for Virtualmin 6) <security@virtualmin.com>
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://software.virtualmin.com/vm/6/gpl/apt virtualmin-universal InRelease: The following signatures were invalid: EXPKEYSIG D9F9010760D62A6B Virtualmin, Inc. (Package signing key for Virtualmin 6) <security@virtualmin.com>
W: Failed to fetch http://software.virtualmin.com/vm/6/gpl/apt/dists/virtualmin-buster/InRelease  The following signatures were invalid: EXPKEYSIG D9F9010760D62A6B Virtualmin, Inc. (Package signing key for Virtualmin 6) <security@virtualmin.com>
W: Failed to fetch http://software.virtualmin.com/vm/6/gpl/apt/dists/virtualmin-universal/InRelease  The following signatures were invalid: EXPKEYSIG D9F9010760D62A6B Virtualmin, Inc. (Package signing key for Virtualmin 6) <security@virtualmin.com>
W: Some index files failed to download. They have been ignored, or old ones used instead.
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

This is what I tried:

echo deb [signed-by=/usr/share/keyrings/debian-virtualmin-7.gpg] https://software.virtualmin.com/vm/7/gpl/apt virtualmin main > /etc/apt/sources.list.d/virtualmin.list

wget https://software.virtualmin.com/lib/RPM-GPG-KEY-virtualmin-7

gpg --import RPM-GPG-KEY-virtualmin-7 && cat RPM-GPG-KEY-virtualmin-7 | gpg --dearmor > /usr/share/keyrings/debian-virtualmin-7.gpg

wget https://software.virtualmin.com/lib/RPM-GPG-KEY-webmin

gpg --import RPM-GPG-KEY-webmin && cat RPM-GPG-KEY-webmin | gpg --dearmor > /usr/share/keyrings/debian-webmin.gpg

As a result, “apt-get update && apt-get upgrade” is now showing this:

$ apt-get update && apt-get upgrade
Hit:1 http://deb.debian.org/debian buster InRelease
Hit:2 http://deb.debian.org/debian-security buster/updates InRelease
Hit:3 http://deb.debian.org/debian buster-updates InRelease
Hit:4 https://packages.sury.org/php buster InRelease
Hit:5 https://software.virtualmin.com/vm/7/gpl/apt virtualmin InRelease
Reading package lists... Done
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
The following packages were automatically installed and are no longer required:
  libgnutls-dane0 ttf-dejavu-core webmin-virtualmin-dav webmin-virtualmin-git webmin-virtualmin-init webmin-virtualmin-registrar
  webmin-virtualmin-slavedns webmin-virtualmin-sqlite
Use 'apt autoremove' to remove them.
The following packages have been kept back:
  virtualmin-lamp-stack
The following packages will be upgraded:
  virtualmin-config virtualmin-core webmin-virtualmin-dav webmin-virtualmin-init webmin-virtualmin-slavedns
5 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.
Need to get 243 kB of archives.
After this operation, 3â¯072 B of additional disk space will be used.
Do you want to continue? [Y/n]

Is it safe to update as such?

Thank you in advance for your advice :slight_smile:

Edit : Moreover, “apt-get update && apt-get dist-upgrade” is showing this:

$ apt-get update && apt-get dist-upgrade
Hit:1 http://deb.debian.org/debian buster InRelease
Hit:2 http://deb.debian.org/debian-security buster/updates InRelease
Hit:3 http://deb.debian.org/debian buster-updates InRelease
Hit:4 https://software.virtualmin.com/vm/7/gpl/apt virtualmin InRelease
Hit:5 https://packages.sury.org/php buster InRelease
Reading package lists... Done
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
The following packages were automatically installed and are no longer required:
  libgnutls-dane0 ntpdate ttf-dejavu-core unrar webalizer webmin-virtualmin-dav webmin-virtualmin-git webmin-virtualmin-init
  webmin-virtualmin-registrar webmin-virtualmin-slavedns webmin-virtualmin-sqlite
Use 'apt autoremove' to remove them.
The following NEW packages will be installed:
  awscli docutils-common etckeeper fcgiwrap libimagequant0 libparted2 libsensors-config libsensors5 libwebpdemux2 libxml-libxml-perl
  libxml-namespacesupport-perl libxml-parser-perl libxml-sax-base-perl libxml-sax-expat-perl libxml-sax-perl libxml-simple-perl
  lm-sensors parted perl-doc python3-botocore python3-colorama python3-dateutil python3-docutils python3-jmespath python3-olefile
  python3-pil python3-pyasn1 python3-pygments python3-roman python3-rsa python3-s3transfer sgml-base xml-core
The following packages will be upgraded:
  virtualmin-config virtualmin-core virtualmin-lamp-stack webmin-virtualmin-dav webmin-virtualmin-init webmin-virtualmin-slavedns
6 upgraded, 33 newly installed, 0 to remove and 0 not upgraded.
Need to get 14,4 MB of archives.
After this operation, 67,1 MB of additional disk space will be used.
Do you want to continue? [Y/n] 

Is dist-upgrade better?

Hello,

Run the following command to fix your repos:

virtualmin setup-repos

Oh dear … I forgot to check the API. Thank you @Ilia for your time and sorry for the noise.

You’re welcome! I’m glad it worked for you!

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.