我正在使用simple-cdd软件包构建自定义 Debian 映像，一切正常。但是今天（2019 年 5 月 8 日）当我再次尝试使用它时，它总是给我：
$ build-simple-cdd --conf cdd.conf
key 6FB2A1C265FFB764:
3 signatures not checked due to missing keys
key 8B48AD6246925553:
6 signatures not checked due to missing keys
key CBF8D6FD518E17E1:
2 signatures not checked due to missing keys
key 7638D0442B90D010:
3 signatures not checked due to missing keys
key 9D6D8F6BC857C906:
3 signatures not checked due to missing keys
key EF0F382A1A7B6500:
2 signatures not checked due to missing keys
key E0B11894F66AEC98:
3 signatures not checked due to missing keys
key EDA0D2388AE22BA9:
3 signatures not checked due to missing keys
2019-05-08 16:14:03 ERROR reprepro: updating package lists exited with code 255
2019-05-08 16:14:03 ERROR Last 3 lines of standard error:
2019-05-08 16:14:03 ERROR reprepro: updating package lists: VerifyRelease condition '6FB2A1C265FFB764|8B48AD6246925553|CBF8D6FD518E17E1|7638D0442B90D010|9D6D8F6BC857C906|EF0F382A1A7B6500|E0B11894F66AEC98|04EE7237B7D453EC|EDA0D2388AE22BA9|AA8E81B4331F7F50' lists expired key '6FB2A1C265FFB764'.
2019-05-08 16:14:03 ERROR reprepro: updating package lists: (To use it anyway, append it with a '!' to force usage).
2019-05-08 16:14:03 ERROR reprepro: updating package lists: There have been errors!
2019-05-08 16:14:03 ERROR reprepro failed with exit code: 255
我尝试simple-cdd在另一台机器上安装（都使用 Debian 9），但仍然出现相同的错误。这是软件包的问题吗？完整的日志reprepro存储在哪里？
答案1
该问题是由于密钥 6FB2A1C265FFB764 于 2019-05-07 到期所致。
simple-cdd 使用的密钥环是 /usr/share/keyrings/debian-archive-keyring.gpg。解决方案是复制密钥环，从新副本中删除过期的密钥，然后告诉 simple-cdd 使用新的密钥环。
例如：
列出 Debian 密钥环中的密钥：
gpg --no-default-keyring --keyring=/usr/share/keyrings/debian-archive-keyring.gpg --list-keys
列出：
/usr/share/keyrings/debian-archive-keyring.gpg
----------------------------------------------
pub rsa4096 2012-05-08 [SC] [expired: 2019-05-07]
ED6D65271AACF0FF15D123036FB2A1C265FFB764
uid [ expired] Wheezy Stable Release Key <[email protected]>
pub rsa4096 2012-04-27 [SC] [expires: 2020-04-25]
A1BD8E9D78F7FE5C3E65D8AF8B48AD6246925553
uid [ unknown] Debian Archive Automatic Signing Key (7.0/wheezy) <[email protected]>
pub rsa4096 2013-08-17 [SC] [expires: 2021-08-15]
75DDC3C4A499F1A18CB5F3C8CBF8D6FD518E17E1
uid [ unknown] Jessie Stable Release Key <[email protected]>
pub rsa4096 2014-11-21 [SC] [expires: 2022-11-19]
126C0D24BD8A2942CC7DF8AC7638D0442B90D010
uid [ unknown] Debian Archive Automatic Signing Key (8/jessie) <[email protected]>
pub rsa4096 2014-11-21 [SC] [expires: 2022-11-19]
D21169141CECD440F2EB8DDA9D6D8F6BC857C906
uid [ unknown] Debian Security Archive Automatic Signing Key (8/jessie) <[email protected]>
pub rsa4096 2017-05-20 [SC] [expires: 2025-05-18]
067E3C456BAE240ACEE88F6FEF0F382A1A7B6500
uid [ unknown] Debian Stable Release Key (9/stretch) <[email protected]>
pub rsa4096 2017-05-22 [SC] [expires: 2025-05-20]
E1CF20DDFFE4B89E802658F1E0B11894F66AEC98
uid [ unknown] Debian Archive Automatic Signing Key (9/stretch) <[email protected]>
sub rsa4096 2017-05-22 [S] [expires: 2025-05-20]
pub rsa4096 2017-05-22 [SC] [expires: 2025-05-20]
6ED6F5CB5FA6FB2F460AE88EEDA0D2388AE22BA9
uid [ unknown] Debian Security Archive Automatic Signing Key (9/stretch) <[email protected]>
sub rsa4096 2017-05-22 [S] [expires: 2025-05-20]
复制密钥环：
cp -a /usr/share/keyrings/debian-archive-keyring.gpg /home/clean-disk/new-debian-archive-keyring.gpg
从新的密钥环中删除过期的密钥：
gpg --no-default-keyring --keyring=/home/clean-disk/new-debian-archive-keyring.gpg --delete-key "6FB2A1C265FFB764" --yes
告诉 simple-cdd 使用新的密钥环：
cp -a /usr/share/simple-cdd/profiles /home/clean-disk
cd /home/clean-disk
simple-cdd --conf profiles/test.conf --profiles test --keyring /home/clean-disk/new-debian-archive-keyring.gpg