Menu

#5641 webmin 2.104 and 2.105 upgrading and version reporting not correct on raspbian 9

2.104
open
nobody
5
2023-11-14
2023-11-13
No

The last couple of webmin versions don't install correctly on Raspbian linux 9. I am reporting the latest problems only. Upgrading from 2.104 to 2.105.
Raspbian version: Linux ras1 4.19.66+ #1253 Thu Aug 15 11:37:30 BST 2019 armv6l GNU/Linux
Webmin 2.104 upon start shows this: "Webmin version 2.105 is now available, but you are running version 2.104." When one selects the "Upgrade webmin now" button is goes to the expected next page. However, it reports something weird on Update Packages page:
Package Current version New version Description
webmin None 2.105
Notice the "None" for the current version. this is wrong.

Next select the "Install now" button. The installation fails:
Now updating webmin ..

Installing package(s) with command apt-get -y install webmin ..

Reading package lists...
Building dependency tree...
Reading state information...
Recommended packages:
  libdatetime-perl libdatetime-timezone-perl libdatetime-locale-perl
  libencode-detect-perl lynx
The following packages will be upgraded:
  webmin
1 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 33.7 MB of archives.
After this operation, 119 kB of additional disk space will be used.
WARNING: The following packages cannot be authenticated!
  webmin
E: There were unauthenticated packages and -y was used without --allow-unauthenticated

.. install failed!

Next, I went to the command line of raspbian linux with root privs and ran "apt update" which produced this error output:

Ign:1 http://raspbian.raspberrypi.org/raspbian stretch InRelease
Hit:2 http://archive.raspberrypi.org/debian stretch InRelease
Err:3 http://raspbian.raspberrypi.org/raspbian stretch Release
404 Not Found
Ign:4 https://download.webmin.com/download/newkey/repository stable InRelease
Hit:5 https://download.webmin.com/download/newkey/repository stable Release
Get:6 https://download.webmin.com/download/newkey/repository stable Release.gpg [819 B]
Ign:6 https://download.webmin.com/download/newkey/repository stable Release.gpg
Reading package lists... Done
E: The repository 'http://raspbian.raspberrypi.org/raspbian stretch Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://download.webmin.com/download/newkey/repository stable Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 2D223B918916F2A2
E: The repository 'https://download.webmin.com/download/newkey/repository stable Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

If I ignore this and do this: apt install webmin -y --allow-unauthenticated
it will install:
Reading package lists... Done
Building dependency tree
Reading state information... Done
Recommended packages:
libdatetime-perl libdatetime-timezone-perl libdatetime-locale-perl
libencode-detect-perl lynx
The following packages will be upgraded:
webmin
1 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 33.7 MB of archives.
After this operation, 119 kB of additional disk space will be used.
WARNING: The following packages cannot be authenticated!
webmin
Authentication warning overridden.
Get:1 https://download.webmin.com/download/newkey/repository stable/contrib armhf webmin all 2.105 [33.7 MB]
Fetched 33.7 MB in 27s (1,239 kB/s)
apt-listchanges: Reading changelogs...
(Reading database ... 64158 files and directories currently installed.)
Preparing to unpack .../archives/webmin_2.105_all.deb ...
Unpacking webmin (2.105) over (2.104) ...
Setting up webmin (2.105) ...

Then running webmin reports version 2.105 correctly BUT it also reports 1 package updates available and that package is webmin 2.105:

    Package     Description     Status      Source   
webmin  web-based administration interface for Unix systems     New version 2.105   Unknown
1 Attachments

Related

Bugs: #5641

Discussion

  • Ilia Ross

    Ilia Ross - 2023-11-13

    Hello,

    W: GPG error: https://download.webmin.com/download/newkey/repository stable Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 2D223B918916F2A2
    E: The repository 'https://download.webmin.com/download/newkey/repository stable Release' is not signed.

    You should try the following to re-setup Webmin repos and re-import the new signing key:

    wget https://raw.githubusercontent.com/webmin/webmin/master/setup-repos.sh
    sh setup-repos.sh
    
     
    • Rich Painter

      Rich Painter - 2023-11-14

      I did run that some time ago but it did not fix everything. I will do it
      again and report back. I have 5 more raspberry pis all configured the
      same and are still at 2.104 webmin and had this same problem when
      upgrading TO 2.104. To get to 2.104 I did it by command line yet
      afterward webmin shows the problems I just reported (when trying to get
      to 2.105).

      thanks

      rich

      On 11/13/23 10:01 AM, Ilia Ross wrote:

      Hello,

      W: GPG error:
      https://download.webmin.com/download/newkey/repository stable
      Release: The following signatures couldn't be verified because the
      public key is not available: NO_PUBKEY 2D223B918916F2A2
      E: The repository
      'https://download.webmin.com/download/newkey/repository stable
      Release' is not signed.
      

      You should try the following to re-setup Webmin repos and re-import
      the new signing key:

      |wget
      https://raw.githubusercontent.com/webmin/webmin/master/setup-repos.sh
      sh setup-repos.sh |


      [bugs:#5641] https://sourceforge.net/p/webadmin/bugs/5641/ webmin
      2.104 and 2.105 upgrading and version reporting not correct on raspbian 9

      Status: open
      Group: 2.104
      Labels: installing upgrade
      Created: Mon Nov 13, 2023 09:10 AM UTC by Rich Painter
      Last Updated: Mon Nov 13, 2023 09:10 AM UTC
      Owner: nobody
      Attachments:

      The last couple of webmin versions don't install correctly on Raspbian
      linux 9. I am reporting the latest problems only. Upgrading from 2.104
      to 2.105.
      Raspbian version: Linux ras1 4.19.66+ #1253 Thu Aug 15 11:37:30 BST
      2019 armv6l GNU/Linux
      Webmin 2.104 upon start shows this: "Webmin version 2.105 is now
      available, but you are running version 2.104." When one selects the
      "Upgrade webmin now" button is goes to the expected next page.
      However, it reports something weird on Update Packages page:
      Package Current version New version Description
      webmin None 2.105
      Notice the "None" for the current version. this is wrong.

      Next select the "Install now" button. The installation fails:
      Now updating webmin ..

      |Installingpackage(s)withcommandapt-get-yinstallwebmin..
      Readingpackagelists... Buildingdependencytree...
      Readingstateinformation... Recommendedpackages:
      libdatetime-perllibdatetime-timezone-perllibdatetime-locale-perl
      libencode-detect-perllynx Thefollowingpackageswillbeupgraded: webmin
      1upgraded,0newlyinstalled,0toremoveand0notupgraded.
      Needtoget33.7MBofarchives.
      Afterthisoperation,119kBofadditionaldiskspacewillbeused.
      WARNING:Thefollowingpackagescannotbeauthenticated! webmin
      E:Therewereunauthenticatedpackagesand-ywasusedwithout--allow-unauthenticated
      ..installfailed!
      Next,Iwenttothecommandlineofraspbianlinuxwithrootprivsandran"apt
      update"whichproducedthiserroroutput: |

      Ign:1 http://raspbian.raspberrypi.org/raspbian stretch InRelease
      Hit:2 http://archive.raspberrypi.org/debian stretch InRelease
      Err:3 http://raspbian.raspberrypi.org/raspbian stretch Release
      404 Not Found
      Ign:4 https://download.webmin.com/download/newkey/repository stable
      InRelease
      Hit:5 https://download.webmin.com/download/newkey/repository stable
      Release
      Get:6 https://download.webmin.com/download/newkey/repository stable
      Release.gpg [819 B]
      Ign:6 https://download.webmin.com/download/newkey/repository stable
      Release.gpg
      Reading package lists... Done
      E: The repository 'http://raspbian.raspberrypi.org/raspbian stretch
      Release' does no longer have a Release file.
      N: Updating from such a repository can't be done securely, and is
      therefore disabled by default.
      N: See apt-secure(8) manpage for repository creation and user
      configuration details.
      W: GPG error: https://download.webmin.com/download/newkey/repository
      stable Release: The following signatures couldn't be verified because
      the public key is not available: NO_PUBKEY 2D223B918916F2A2
      E: The repository
      'https://download.webmin.com/download/newkey/repository stable
      Release' is not signed.
      N: Updating from such a repository can't be done securely, and is
      therefore disabled by default.
      N: See apt-secure(8) manpage for repository creation and user
      configuration details.

      If I ignore this and do this: apt install webmin -y
      --allow-unauthenticated
      it will install:
      Reading package lists... Done
      Building dependency tree
      Reading state information... Done
      Recommended packages:
      libdatetime-perl libdatetime-timezone-perl libdatetime-locale-perl
      libencode-detect-perl lynx
      The following packages will be upgraded:
      webmin
      1 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
      Need to get 33.7 MB of archives.
      After this operation, 119 kB of additional disk space will be used.
      WARNING: The following packages cannot be authenticated!
      webmin
      Authentication warning overridden.
      Get:1 https://download.webmin.com/download/newkey/repository
      stable/contrib armhf webmin all 2.105 [33.7 MB]
      Fetched 33.7 MB in 27s (1,239 kB/s)
      apt-listchanges: Reading changelogs...
      (Reading database ... 64158 files and directories currently installed.)
      Preparing to unpack .../archives/webmin_2.105_all.deb ...
      Unpacking webmin (2.105) over (2.104) ...
      Setting up webmin (2.105) ...

      Then running webmin reports version 2.105 correctly BUT it also
      reports 1 package updates available and that package is webmin 2.105:

      PackageDescriptionStatusSourcewebminweb-basedadministrationinterfaceforUnixsystemsNewversion2.105Unknown

      Sent from sourceforge.net because you indicated interest in
      https://sourceforge.net/p/webadmin/bugs/5641/

      To unsubscribe from further messages, please visit
      https://sourceforge.net/auth/subscriptions/

       

      Related

      Bugs: #5641

  • Rich Painter

    Rich Painter - 2023-11-14

    on all the stretch r pi the setup-repos.sh worked. However, as already reported, the webmin "Update Packages" "Building a complete list of packages..." STILL is not displaying correctly. It does not show the current version (listed as None).

    By the way, running the setup-repos.sh on my ubuntu 14.04.6 LTS, Trusty Tahr does not run and has a certificate error...
    Setup repository? (y/N) y
    Downloading Webmin key ..
    ..failed : ERROR: cannot verify download.webmin.com's certificate, issued by ‘/C=US/O=Let's Encrypt/CN=R3’: Issued certificate has expired. To connect to download.webmin.com insecurely, use `--no-check-certificate'.

    Should I create a separate bug report for this?
    thanks
    rich

     
    • Ilia Ross

      Ilia Ross - 2023-11-14

      ..failed : ERROR: cannot verify download.webmin.com's certificate, issued by ‘/C=US/O=Let's Encrypt/CN=R3’: Issued certificate has expired. To connect to download.webmin.com insecurely, use `--no-check-certificate'.

      I think Ubuntu 14.04 has reached EOL a long time ago and this error may be the result of not-updated ca-certificates package.

      You can just use --no-check-certificate flag as suggested in the error message.

      Should I create a separate bug report for this?

      This is not our bug.

       
  • Rich Painter

    Rich Painter - 2023-11-14

    Do I add the --no-check-certificate to the invocation of setup-repos.sh or do I have to edit it into that script? EOL or not it is not always able to be OS updated because of other software dependencies that the system is being used for. It turns out it is NOT a simple update to the CA packages because I have tried that long ago. Newer crypto components have a massive dependencies that I was not able to make work from a non-src basis. So those of us still using U14 are stuck. In the past before using the script I would always go to the webmin webste and it would have a section to do the PPA setup manually, which I have done many, many times. https://webmin.com/download/ doesnt have this anymore so I tried the script which may or may not work. Maybe your manual PPA setup instructions are elsewhere?

    None the less, the webmin page to update itself still doesnt have the correct information displayed.
    thanks,
    rich

     
  • Ilia Ross

    Ilia Ross - 2023-11-14

    Do I add the --no-check-certificate to the invocation of setup-repos.sh or do I have to edit it into that script?

    You would have to edit it manually, because I haven't added support for it in setup-repos.sh script (yet).

    It turns out it is NOT a simple update to the CA packages because I have tried that long ago. Newer crypto components have a massive dependencies that I was not able to make work from a non-src basis.

    Yeah, it would almost always be easier to migrate to Ubuntu 22.04.

    So those of us still using U14 are stuck.

    Not really. After you correctly import the new Webmin signing key, you don't really need to use https in your Webmin repo file., just switch to http.

     

Log in to post a comment.