Recurring issues during system updates these days, and how to fix them

Hi there!

We noticed many people have recurring (minor) issues these days while trying to upgrade their servers, for reasons external to the Yunohost project. Unfortunately, it’s not easy from our side to provide an automatic mecanism that magically solves this, and you may need to run these commands to fix the situation.

1. Downgrading libssl packages

For some reason, some libssl packages need to be downgraded (maybe related to some stories with sury).

During upgrade attempts, you will see messages such as:

The following packages will be DOWNGRADED:
E: Packages were downgraded and -y was used without --allow-downgrades.

You can solve this with:

sudo apt install libssl-doc --allow-downgrades

Depending on your setup and apps installed, you may need to do the same action for packages libssl-dev and/or libssl1.1

2. Updating Sury’s expired key

Sury is an external package repository that provides recent PHP versions. Sury’s signing key recently expired and during updates attempts you may see messages containing:

W: Failed to fetch The following signatures were invalid: EXPKEYSIG B188E2B695BD4743 DEB.SURY.ORG Automatic Signing Key
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: buster InRelease: The following signatures were invalid: EXPKEYSIG B188E2B695BD4743 DEB.SURY.ORG Automatic Signing Key
W: Some index files failed to download. They have been ignored, or old ones used instead.

You can solve this with:

sudo apt-key del 95BD4743;
wget -nv -O - | sudo apt-key add -

FYI I don’t know why, but yesterday I lost like 2 hours on this one, before understanding that for my system, the command to use were the one above, but with -key after apt :

Looks like the forum software removes the -key when typing apt - key (remove the spaces) so strange !


@Aleks I don’t know why but i wasted my 5 hours on this. After that i have done this after many struggles on this. :slightly_smiling_face:

1 Like

Bonjour @Aleks merci de ce partage (par anticipation).
Cela a fonctionné sur mon (stable)

Par contre, j’ai rencontré ce pb pour Nexcloud (qui n’est peut-être pas en lien)
52956 /!\ Packagers! You are probably using a lua regex.
You should use a PCRE regex instead.

Encore merci du message ci-dessus.
Amicalement, José


sudo apt-key adv --refresh-keys

Solved my GPG error.