Warning apt update Subscription Manager on Ubuntu 24

Support
1

Problem:
I have a problem on Ubuntu 24.04 and Foreman 3.11.2. After registering the Ubuntu client in Foreman, when I run the apt update command, I get the following warning:

To register the host on Foreman, I used subscription-manager provided by atix.de
Thank you for your help in removing this warning.

2

You have two options:

  1. Ignore those “Notification” level warnings.
  2. Set up APT repo signing on your Katello instance.

Unfortunately 2. is pretty involved and not well documented.

There is a really old thread describing APT repo signing setup here: Pulp_deb for pulp3 in Katello - #13 by quba42

There is also the pulp_deb component specific documentation here: Signing Service Creation - Pulp Project

This latter documentation is more up to date, but not Katello specific. For Katello to pick up on the signing service you create, it must be named katello_deb_sign.

I will also bring up internally if we can find some time to document this process properly.

3

Hello @quba42 ,

Thank you very much for your help and the solutions you provided! I will follow the documentation you shared.

Thanks again for your assistance.

4

Hi antony and @quba42
I saw this post when i had this issue aswell, it’s the top result when googling the information message, i found a more proper fix and want to post it here as it’s alot easier then is suggested here.

So in short, create a file with some content in: echo tux > /etc/apt/trusted.gpg.d/client.asc
unregister/clean your subscription-manager vm/host and then re-register it. Now your apt update/upgrade will work withoud those messages!

TLDR on why:
From here Subscription-manager for Ubuntu 24.04 i eventually digged into the source code and found:
subscription-manager/src/rhsm/repofile.py at 3e116be960d8eafc055749d58cd28704add785d6 · ATIX-AG/subscription-manager · GitHub
apt will give you a warning if you name your key .pub, not if you name it .asc.
Adding that file basically turns the check True and adds the missing Signed-By statements in each repo from Foreman on your client. This parameter also seems to go unused, as GPG checking is done differently.

Sorry for reviving an old topic, but i think it’s good to share this info online :slight_smile:

1 Like