Omnibus-gitlab packages gpg key expired

General
3

To help other people find this by search, here are the errors from apt update:

Err https://packages.gitlab.com/gitlab/gitlab-ee/ubuntu focal InRelease
  The following signatures were invalid: EXPKEYSIG 3F01618A51312F3F GitLab B.V. (package repository signing key) <packages@gitlab.com>
Fetched 336 kB in 1s (393 kB/s)
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://packages.gitlab.com/gitlab/gitlab-ee/ubuntu focal InRelease: The following signatures were invalid: EXPKEYSIG 3F01618A51312F3F GitLab B.V. (package repository signing key) <packages@gitlab.com>
W: Failed to fetch https://packages.gitlab.com/gitlab/gitlab-ee/ubuntu/dists/focal/InRelease: The following signatures were invalid: EXPKEYSIG 3F01618A51312F3F GitLab B.V. (package repository signing key) <packages@gitlab.com>
W: Some index files failed to download. They have been ignored, or old ones used instead.

Incidentally, I was lucky enough to trip over this less than 30 minutes after it expired (at 2022-03-02 15:16:59 UTC), so there weren’t any posts here yet :slight_smile:, and I had to track down the problem.

Edit: For those wishing to bypass the apt signature verification failure until GitLab fixes this (which will require importing a new GPG key to the apt keyring), you can try:

sudo apt -o Acquire::AllowInsecureRepositories=true update
sudo apt upgrade

(…or sudo apt install gitlab-ee in place of ‘upgrade’ if you’re installing for the first time. These apt commands explained/source)

6 Likes