Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can't use System update - invalid signature when validating ASN.1 encoded signature #1316

Closed
k9janer opened this issue Jul 2, 2024 · 2 comments
Labels
bug Something isn't working

Comments

@k9janer
Copy link

k9janer commented Jul 2, 2024

Describe the bug

Hello,

I installed the nvidia KDE version of bazzite just 2 days ago. Today I wanted to update to the most recent release, but unfortunately, I keep getting the following error:

Pulling manifest: ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-nvidia:stable
error: Creating importer: Failed to invoke skopeo proxy method OpenImage: remote error: cryptographic signature verification failed: invalid signature when validating ASN.1 encoded signature
System update failed:
0: Command failed: /usr/bin/rpm-ostree upgrade
1: /usr/bin/rpm-ostree failed: exit status: 1

What did you expect to happen?

I expected the System updater to work fine, just like 2 days ago.

Output of rpm-ostree status

State: idle
Deployments:
● ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-nvidia:stable
                   Digest: sha256:43a94e8b18644ac34a9c5e6f1611915c576bfe08f70504e4f602d58f2bd11312
                  Version: 40.20240625.0 (2024-06-27T02:08:13Z)
          LayeredPackages: dnf-plugins-core

  ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-nvidia:stable
                   Digest: sha256:43a94e8b18644ac34a9c5e6f1611915c576bfe08f70504e4f602d58f2bd11312
                  Version: 40.20240625.0 (2024-06-27T02:08:13Z)

Hardware

AMD Ryzen 5 7600
Nvidia GeForce RTX 4070 Super
32 GB Ram
AsRock B650M-HDV/M.2 with latest firmware

Extra information or context

No response

@dosubot dosubot bot added the bug Something isn't working label Jul 2, 2024
@castrojo
Copy link
Member

castrojo commented Jul 2, 2024

We're aware of the issue and are working on a fix, will post as soon as we have more information, thanks!

@castrojo castrojo pinned this issue Jul 2, 2024
@p5
Copy link
Member

p5 commented Jul 3, 2024

We made some mistakes yesterday which caused OS updates to break.

Please can you follow the instructions in this Discourse post to remediate the issues.

TL;DR
We lost access to our signing keys so had to rotate them.
Users need to run the following command or manually perform the actions in this script

$ curl -sL https://fix.universal-blue.org/ | sudo bash 

Apologies for the inconvenience caused by this! We are making changes to processes so that it doesn't happen again.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

4 participants