[R-sig-Debian] Ubuntu Impish (21.10) repository complains about weak security information

Lennart C. Karssen |enn@rt @end|ng |rom k@r@@en@org
Mon May 16 22:24:10 CEST 2022


On 16-05-2022 17:27, Dirk Eddelbuettel wrote:
> 
> On 16 May 2022 at 16:54, Lennart C. Karssen wrote:
> | As a result, I can't upgrade the packages any more (I was about to
> | upgrade from R 4.1.3 to 4.2.0).
> 
> A brute-force (and 'insecure') fix is to add
> 
>   [trusted=yes]
> 
> between deb and the url.  Obviously, using properly signed repos with keys is
> better but that is not something you have control over.

Thanks Dirk, that gets me one step further. However, there is still a
hurdle. It seems that (at least at the time of writing) the
impish-cran40/ repo is broken. Apt complains that cannot find the
Packages file:

Ign:13 https://cloud.r-project.org/bin/linux/ubuntu impish-cran40/
Translation-en_US

Fetched 538 B in 14s (38 B/s)


Reading package lists... Done

W: Conflicting distribution:
https://cloud.r-project.org/bin/linux/ubuntu impish-cran40/ InRelease
(expected impish-cran40/ but got )

E: Failed to fetch
https://cloud.r-project.org/bin/linux/ubuntu/impish-cran40/Packages  404
 Not Found [IP: 2600:9000:238d:3600:6:c2d3:f940:93a1 443]


I also tried forcing IPv4, just to be sure, but with the same result. In
fact, browsing to
https://cloud.r-project.org/bin/linux/ubuntu/impish-cran40/Packages
shows that the file doesn't exist. For e.g. focal-cran40 it does exist.


> 
> For what it is worth I too have that in my impish-cran40 line on this 21.10
> machine that I reply from.

Could you please try and see if you get the same error?


Best,

Lennart.


> 
> Dirk
> 
> 

-- 
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
L.C. Karssen
's-Hertogenbosch
The Netherlands

lennart using karssen.org
http://blog.karssen.org
GPG key ID: A88F554A



More information about the R-SIG-Debian mailing list