MYSQL fails to install due to incorrect GPG Key

[furquan39]

Apache Airflow version

Other Airflow 2 version (please specify below)

If "Other Airflow 2 version" selected, which one?

2.4.1

What happened?

When attempting to rebuild an apache airflow image, we are getting failures during our builds when trying to run apt-get update.

The error we see:

What you think should happen instead?

The airflow image should build successfully without any errors.

How to reproduce

Create a Dockerfile. Add the following lines to the Dockerfile:

`FROM apache/airflow:2.4.1-python3.8

ENV SSH_PASSWD "root:Docker!"

RUN pip3 install msal Authlib flask_oauthlib azure-storage-file-datalake apache-airflow-providers-databricks==3.1.0

USER root

RUN apt-get update
&& apt-get install -y --no-install-recommends
openssh-server
&& apt-get autoremove -yqq --purge
&& apt-get clean
&& rm -rf /var/lib/apt/lists/*`

Operating System

Debian 11

Versions of Apache Airflow Providers

No response

Deployment

Docker-Compose

Deployment details

No response

Anything else?

Seems like a similar issue to this: #20911

Are you willing to submit PR?

• Yes I am willing to submit a PR!

Code of Conduct

• I agree to follow this project's Code of Conduct

[boring-cyborg[bot]]

Thanks for opening your first issue here! Be sure to follow the issue template! If you are willing to raise PR to address this issue please do so, no need to wait for approval.

[potiuk]

I converted it to discussion thinking it was a new issue, but it seems Oracle did it again and changed the key as they did in the past - converted it back to the issue #36231

[potiuk]

Wuick workaround:

USER root
RUN sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys A8D3785C
RUN  apt-get update ....

[potiuk]

Please let me know if that fixes your issues - will make it easier to apply a permanent fix :)

[potiuk]

cc: @furquan39 @Robso-creator @jeremiahmai @ImpressionableRaccoon @andretayer @guru-pochineni

[ghost]

hi @potiuk.
First, thanks for the quickly response.

I'am getting the same error after added this line.
Both local and on GHA.

[potiuk]

Can you post full log please?

[furquan39]

[error]#7 0.874 Get:12 http://deb.debian.org/debian-security bullseye-security/main amd64 Packages [260 kB]
[error]#7 0.981 Get:13 http://deb.debian.org/debian bullseye-updates/main amd64 Packages [17.7 kB]
[error]#7 1.094 Get:14 https://apt.postgresql.org/pub/repos/apt bullseye-pgdg/main amd64 Packages [305 kB]
[error]#7 2.444 W: GPG error: http://repo.mysql.com/apt/debian bullseye InRelease: The following signatures were invalid: EXPKEYSIG 467B942D3A79BD29 MySQL Release Engineering [email protected]
[error]#7 2.444 E: The repository 'http://repo.mysql.com/apt/debian bullseye InRelease' is not signed.
[error]#7 ERROR: process "/bin/bash -o pipefail -o errexit -o nounset -o nolog -c apt-get update && apt-get install -y --no-install-recommends openssh-server && apt-get autoremove -yqq --purge && apt-get clean && rm -rf /var/lib/apt/lists/" did not complete successfully: exit code: 100
[error]------
[error] > [ 3/10] RUN apt-get update && apt-get install -y --no-install-recommends openssh-server && apt-get autoremove -yqq --purge && apt-get clean && rm -rf /var/lib/apt/lists/:
[error]0.765 Get:8 https://packages.microsoft.com/debian/11/prod bullseye/main all Packages [1214 B]
[error]0.785 Get:9 https://packages.microsoft.com/debian/11/prod bullseye/main arm64 Packages [27.5 kB]
[error]0.794 Get:10 https://packages.microsoft.com/debian/11/prod bullseye/main armhf Packages [24.9 kB]
[error]0.795 Get:11 https://packages.microsoft.com/debian/11/prod bullseye/main amd64 Packages [131 kB]
[error]0.874 Get:12 http://deb.debian.org/debian-security bullseye-security/main amd64 Packages [260 kB]
[error]0.981 Get:13 http://deb.debian.org/debian bullseye-updates/main amd64 Packages [17.7 kB]
[error]1.094 Get:14 https://apt.postgresql.org/pub/repos/apt bullseye-pgdg/main amd64 Packages [305 kB]
[error]2.444 W: GPG error: http://repo.mysql.com/apt/debian bullseye InRelease: The following signatures were invalid: EXPKEYSIG 467B942D3A79BD29 MySQL Release Engineering [email protected]
[error]2.444 E: The repository 'http://repo.mysql.com/apt/debian bullseye InRelease' is not signed.
[error]------
[error]Dockerfile:11
[error]--------------------
[error] 10 |
[error] 11 | >>> RUN apt-get update
[error] 12 | >>> && apt-get install -y --no-install-recommends
[error] 13 | >>> openssh-server
[error] 14 | >>> && apt-get autoremove -yqq --purge
[error] 15 | >>> && apt-get clean
[error] 16 | >>> && rm -rf /var/lib/apt/lists/*
[error] 17 |
[error]--------------------
[error]ERROR: failed to solve: process "/bin/bash -o pipefail -o errexit -o nounset -o nolog -c apt-get update && apt-get install -y --no-install-recommends openssh-server && apt-get autoremove -yqq --purge && apt-get clean && rm -rf /var/lib/apt/lists/*" did not complete successfully: exit code: 100

[potiuk]

Seems that we are hitting a cache problem - some people get old and some new key.

For now workaround is this:

RUN rm /etc/apt/sources.list.d/mysql.list