Project

General

Profile

Bug #5264

Repository feedback (was Broken repository)

Added by Anonymous 5 months ago. Updated 3 months ago.

Status:
Need feedback
Priority:
Low
Assignee:
-
Category:
Infrastructure
Target version:
-
Start date:
2018-10-16
Due date:
% Done:

0%

Estimated time:
Found in version:
ubuntu stable Release
Affected Versions:

Description

There are problem with the official repository for installation since weeks and it seems that the problems are not fixed yet.

$ sudo apt-get update
Hit:1 http://ubuntu.inode.at/ubuntu bionic InRelease
Hit:2 http://ubuntu.inode.at/ubuntu bionic-updates InRelease                                                                                     
Hit:3 http://ppa.launchpad.net/team-xbmc/ppa/ubuntu bionic InRelease                                                                             
Hit:4 http://archive.canonical.com/ubuntu bionic InRelease                                                                                       
Hit:5 http://ubuntu.inode.at/ubuntu bionic-backports InRelease                                                                                   
Ign:6 http://mirror.inode.at/linuxmint/packages tara InRelease                                                                                   
Hit:7 http://mirror.inode.at/linuxmint/packages tara Release             
Ign:8 https://dl.bintray.com/tvheadend/ubuntu stable InRelease           
Get:9 http://security.ubuntu.com/ubuntu bionic-security InRelease [83,2 kB]
Err:10 https://dl.bintray.com/tvheadend/ubuntu stable Release                       
  403  Forbidden [IP: 159.122.18.156 443]
Reading package lists... Done                                                       
E: The repository 'https://dl.bintray.com/tvheadend/ubuntu stable Release' no longer has a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

See also: https://tvheadend.org/boards/5/topics/34306

History

#1 Updated by Jaroslav Kysela 5 months ago

Yes, I give up to use bintray.

#2 Updated by Jaroslav Kysela 5 months ago

We need to find another way to create repositories. The bintray just does not work for the 'nightly' builds.

#3 Updated by Mark Clarkstone 5 months ago

The good news, for deb users at least - sorry rpm folks :(, is that apt.tvheadend.org now carries the same packages as Bintray did! It also now has stable 4.2 for Raspbian Jessie and Stretch, making my own bintray repo redundant too (Yep, I'm happy about this - although I'll keep that going until it gets rate-limited too :( ).


I've rewritten the AptRepository page as well - look at the draft here. Before the current page gets updated would it be possible to get some feedback, please? Any at all, good, bad or ugly. :) I've tested the instructions for debian on my own box and it seems to work okay.

Cheers.

#4 Updated by Mark Clarkstone 5 months ago

  • Status changed from New to Need feedback

#5 Updated by Mark Clarkstone 5 months ago

  • Priority changed from Normal to High

Bumping this up so more people can see it :)

#6 Updated by Njuskalo Njusko 5 months ago

Just updated sources.list on Ubuntu 14.04 Trusty as follows

deb https://apt.tvheadend.org/stable/ trusty main

and got the following error:

W: Failed to fetch http://apt.tvheadend.org/stable/dists/trusty/main/binary-amd64/Packages  gnutls_handshake() failed: Handshake failed

#7 Updated by Mark Clarkstone 5 months ago

Njuskalo Njusko wrote:

Just updated sources.list on Ubuntu 14.04 Trusty as follows

[...]

and got the following error:

[...]

Hmm that is strange.. Can you try changing the deb line to http?

#8 Updated by Njuskalo Njusko 5 months ago

Mark Clarkstone wrote:

Hmm that is strange.. Can you try changing the deb line to http?

Already tried that and getting the same error.

#9 Updated by Jaroslav Kysela 5 months ago

Try to update CA certificates.

#10 Updated by Anonymous 5 months ago

Jaroslav Kysela wrote:

The bintray just does not work for the 'nightly' builds.

I don't understand, how nightly builds affects a stable release?
In my understanding nightly builds should be used on trunk (the main developing path), on development branches etc., but not for stable releases. IMHO there should be no new builds for officially releases versions.

Currently I use "Build: 4.2.6-42~g406ba887c (2018-09-20T15:36:53+0000)" (http://localhost:9981/extjs.html), which seems to be proper as per my installation and update.

$ grep -i tvheadend:amd64 /var/log/dpkg.log.1 | egrep ' install | upgrade '
2018-09-16 16:58:20 install tvheadend:amd64 <none> 4.2.6-30~ga50be2bcb~bionic
2018-09-22 22:13:44 upgrade tvheadend:amd64 4.2.6-30~ga50be2bcb~bionic 4.2.6-42~g406ba887c~bionic

#11 Updated by Mark Clarkstone 5 months ago

Nero Rome wrote:

Jaroslav Kysela wrote:

The bintray just does not work for the 'nightly' builds.

I don't understand, how nightly builds affects a stable release?
In my understanding nightly builds should be used on trunk (the main developing path), on development branches etc., but not for stable releases. IMHO there should be no new builds for officially releases versions.

Currently I use "Build: 4.2.6-42~g406ba887c (2018-09-20T15:36:53+0000)" (http://localhost:9981/extjs.html), which seems to be proper as per my installation and update.

[...]

We need people to test and report bugs on development code, but people don't want to keep having to build tvh all the time, more so if there's a fix been pushed to master. Bintray don't like uploads of these development builds/misc libs as they are not classed as releases, originally we assumed these dev builds wouldn't be a problem, sadly they were.

I thought the problem files were the staticlibs as the first response from them was a bit vague and didn't tell me exactly what files were causing the rate-limiting/blocking.. Not until the second (or third - I forget) blocking of the repo did we get the actual reason... the dev builds.

Unfortunately rather than blocking access to just the dev builds the full repo was (without warning). More than likely done automatically. :(

#12 Updated by Anonymous 5 months ago

Now, back to repo apt.tvheadend.org (Doozer), it seems to be okay for me.

$ cat /etc/apt/sources.list
#deb cdrom:[Linux Mint 19 _Tara_ - Release amd64 20180717]/ bionic contrib main non-free
# deb https://dl.bintray.com/tvheadend/ubuntu stable main
#
$
$ ll /etc/apt/sources.list.d/
total 20
drwxr-xr-x 2 root root 4096 Oct 20 01:34 ./
drwxr-xr-x 6 root root 4096 Oct 20 01:36 ../
-rw-r--r-- 1 root root  480 Sep 12 02:12 official-package-repositories.list
-rw-r--r-- 1 root root  128 Sep 26 05:58 team-xbmc-ppa-bionic.list
-rw-r--r-- 1 root root  106 Oct 20 01:34 tvheadend.list
$
$ cat /etc/apt/sources.list.d/tvheadend.list
# deb https://dl.bintray.com/tvheadend/deb bionic release
deb http://apt.tvheadend.org/stable bionic main

Update and upgrade:

$ sudo apt-get update
Ign:1 http://mirror.inode.at/linuxmint/packages tara InRelease
Hit:2 http://ubuntu.inode.at/ubuntu bionic InRelease
Hit:3 http://mirror.inode.at/linuxmint/packages tara Release
Hit:4 http://security.ubuntu.com/ubuntu bionic-security InRelease
Hit:5 http://ubuntu.inode.at/ubuntu bionic-updates InRelease
Hit:6 http://ppa.launchpad.net/team-xbmc/ppa/ubuntu bionic InRelease
Hit:7 http://ubuntu.inode.at/ubuntu bionic-backports InRelease
Hit:8 http://archive.canonical.com/ubuntu bionic InRelease
Ign:9 https://apt.tvheadend.org/stable bionic InRelease
Get:11 https://apt.tvheadend.org/stable bionic Release [799 B]
Get:12 https://apt.tvheadend.org/stable bionic Release.gpg [455 B]
Get:13 https://apt.tvheadend.org/stable bionic/main amd64 Packages [1.523 B]
Get:14 https://apt.tvheadend.org/stable bionic/main i386 Packages [1.536 B]
Fetched 4.313 B in 1s (3.546 B/s)
Reading package lists... Done
$
$ sudo apt-get upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
The following packages will be upgraded:
  tvheadend
1 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
After this operation, 2.738 kB of additional disk space will be used.
Do you want to continue? [Y/n] Y
Get:1 https://apt.tvheadend.org/stable bionic/main amd64 tvheadend amd64 4.2.6-87~gb5f1f4049~bionic [13,0 MB]
Fetched 13,0 MB in 7s (1.903 kB/s)
Preconfiguring packages ...
(Reading database ... 249164 files and directories currently installed.)
Preparing to unpack .../tvheadend_4.2.6-87~gb5f1f4049~bionic_amd64.deb ...
Unpacking tvheadend (4.2.6-87~gb5f1f4049~bionic) over (4.2.6-42~g406ba887c~bionic) ...
Processing triggers for ureadahead (0.100.0-20) ...
Setting up tvheadend (4.2.6-87~gb5f1f4049~bionic) ...
Processing triggers for systemd (237-3ubuntu10.3) ...
Processing triggers for man-db (2.8.3-2) ...

Now I'm on Build: 4.2.6-87~gb5f1f4049 (2018-10-18T18:46:16+0000).

The Update Manager has the green check mark and doesn't report an error.

Thx!

P.S.: As u can see, it's Linux Mint 19.

#13 Updated by Njuskalo Njusko 5 months ago

- dup

- edited by mpmc

#14 Updated by Njuskalo Njusko 5 months ago

Jaroslav Kysela wrote:

Try to update CA certificates.

I tried update-ca-certificates but it didn't help. Any ideas ?

#15 Updated by Marc Ominus 5 months ago

Njuskalo Njusko wrote:

Jaroslav Kysela wrote:

Try to update CA certificates.

I tried update-ca-certificates but it didn't help. Any ideas ?

wget qO https://doozer.io/keys/tvheadend/tvheadend/pgp | sudo apt-key add -

#16 Updated by Marc Ominus 5 months ago

wget -qO- https://doozer.io/keys/tvheadend/tvheadend/pgp | sudo apt-key add -

#17 Updated by Njuskalo Njusko 5 months ago

Marc Ominus wrote:

wget -qO- https://doozer.io/keys/tvheadend/tvheadend/pgp | sudo apt-key add -

Already done that, still getting the same error

#18 Updated by Mark Clarkstone 5 months ago

  • Subject changed from Broken repository to Repository feedback (was Broken repository)
  • Priority changed from High to Low

I've since updated AptRepositories - Hope no one minds if we use this issue for feedback :)

#19 Updated by Gabriel Devenyi 5 months ago

Running into the
W: Failed to fetch http://apt.tvheadend.org/stable/dists/trusty/main/binary-amd64/Packages gnutls_handshake() failed: Handshake failed

Error as well.

Based on googling elsewhere, tvheadend.org's host server has upgraded their TLS settings such that the older trusty gnutls library can no longer negotiate a connection. The fix is a change to the TLS settings to allow older versions of TLS.

#20 Updated by Marc Ominus 5 months ago

Gabriel Devenyi wrote:

Running into the
W: Failed to fetch http://apt.tvheadend.org/stable/dists/trusty/main/binary-amd64/Packages gnutls_handshake() failed: Handshake failed

Error as well.

Based on googling elsewhere, tvheadend.org's host server has upgraded their TLS settings such that the older trusty gnutls library can no longer negotiate a connection. The fix is a change to the TLS settings to allow older versions of TLS.

Can you post your etc/apt/sources.list or /etc/apt/sources.list.d/tvheadend

My is:
@
  1. TVHeadEnd - Bintray
  2. See https://dl.bintray.com/tvheadend/deb/dists/
    #deb https://dl.bintray.com/tvheadend/deb DISTRO REPO-COMPONENT
    #deb https://dl.bintray.com/tvheadend/deb xenial stable-4.2
    #deb https://dl.bintray.com/tvheadend/deb stretch unstable
    #deb https://dl.bintray.com/tvheadend/deb stretch stable-4.2 # Stretch NOT WORKING!
  3. TVHeadEnd - Doozer (apt.tvheadend.org)
  4. See https://tvheadend.org/projects/tvheadend/wiki/AptRepositories
    #deb http://apt.tvheadend.org/REPO-COMPONENT DISTRO main
    deb http://apt.tvheadend.org/stable stretch main
    @

#21 Updated by Mark Clarkstone 5 months ago

The apt repo is fronted by cloudflare. I'll let Andoma know, see if he can do something to help.

#22 Updated by José Cota 5 months ago

I am running into this error as well in Ubuntu Trusty (it's still supported until 2019!).

When searching about the issue, I found that it may be caused by SNI being unsupported on the gnutls library used in the distro, and Cloudflare enforces SNI unless a proper certificate is added to the domain on their side. Unfortunately, the account needs to be in either an expensive plan to upload one that is in control of the team, or buy a $5 certificate from them.

A course of action is to disable the https redirection, and let the repo be served via http. I am aware of the MITM risks that may arise from using that, but anyone who's using an older distro, is probably already aware of the problems that can arise from using a distro that is nearing EOL in a world that is always changing.

#23 Updated by xraynorm - 5 months ago

Im seeing this in Ubuntu 16.04.5 LTS (Xenial Xerus)

W: The repository 'https://dl.bintray.com/tvheadend/deb xenial Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Failed to fetch https://dl.bintray.com/tvheadend/deb/dists/xenial/stable-4.2/binary-amd64/Packages 404 Not Found
E: Some index files failed to download. They have been ignored, or old ones used instead.

#24 Updated by Nicholas Oldroyd 5 months ago

I'm also on ubuntu 14.04 and getting the handshake issue.

If they can just enable plain http endpoint that would work for me.

#25 Updated by Mark Clarkstone 5 months ago

xraynorm - wrote:

Im seeing this in Ubuntu 16.04.5 LTS (Xenial Xerus)

W: The repository 'https://dl.bintray.com/tvheadend/deb xenial Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Failed to fetch https://dl.bintray.com/tvheadend/deb/dists/xenial/stable-4.2/binary-amd64/Packages 404 Not Found
E: Some index files failed to download. They have been ignored, or old ones used instead.

Please switch to the new "old" repository :)

Nicholas Oldroyd wrote:

I'm also on ubuntu 14.04 and getting the handshake issue.

If they can just enable plain http endpoint that would work for me.

You've just reminded me I need to setup the non-https proxy/mirror on tvheadend.de

#26 Updated by edison chan 4 months ago

Jaroslav Kysela wrote:

Yes, I give up to use bintray.

W: Failed to fetch http://apt.tvheadend.org/stable/dists/trusty/main/binary-amd64/Packages gnutls_handshake() failed: Handshake failed

W: Failed to fetch http://apt.tvheadend.org/stable/dists/trusty/main/binary-i386/Packages gnutls_handshake() failed: Handshake failed

E: Some index files failed to download. They have been ignored, or old ones used instead.
[email protected]:/etc/apt/sources.list.d$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 14.04.5 LTS
Release: 14.04
Codename: trusty
[email protected]:/etc/apt/sources.list.d$

#27 Updated by Christoph K. 3 months ago

Hi,

i have some Trouble with jessie:


Es wurden 317 kB in 8 s geholt (37,7 kB/s).
Paketlisten werden gelesen... Fertig                                                                                                        
[email protected]:~# sudo apt-get upgrade --fix-missing                                                                                   
Paketlisten werden gelesen... Fertig                                                                                                        
Abhängigkeitsbaum wird aufgebaut.                                                                                                           
Statusinformationen werden eingelesen.... Fertig                                                                                            
Paketaktualisierung (Upgrade) wird berechnet... Fertig                                                                                      
Die folgenden Pakete werden aktualisiert (Upgrade):                                                                                         
  tvheadend                                                                                                                                 
1 aktualisiert, 0 neu installiert, 0 zu entfernen und 0 nicht aktualisiert.                                                                 
Nach dieser Operation werden 26,6 kB Plattenplatz zusätzlich benutzt.                                                                       
Möchten Sie fortfahren? [J/n] j                                                                                                             
Holen: 1 http://apt.tvheadend.org/unstable/ jessie/main tvheadend amd64 4.3-1683~gdd37467~jessie [15,1 MB]
Es wurden 15,1 MB in 2 s geholt (5.148 kB/s).
E: Fehlschlag beim Holen von http://apt.tvheadend.org/unstable/artifacts/x3/ohb5dxte/tvheadend_4.3-1683~gdd37467~jessie_amd64.deb  Größe sti
mmt nicht überein 

Any Ideas ? My system means that the filesize should be 0kb ?

#28 Updated by Mark Clarkstone 3 months ago

Christoph K. wrote:

Hi,

i have some Trouble with jessie:

[...]

Any Ideas ? My system means that the filesize should be 0kb ?

The dreaded size mismatch, ugh, not sure what causes that but something related to cloudflare messes it up. Andoma is EXTREMELY busy and with it being Christmas and all, it may not get fixed this side of Dec.

As a temporary fix you can try pulling it directly from doozer

#29 Updated by Mark Clarkstone 3 months ago

Notice to all:

Andoma has turned off https auto-redirection and reduced caching on cloudflare, those who had issues with SSL and size mismatch issues could you please test & report?

Thanks!

Also available in: Atom PDF