Mender package repo broken for Debian 13 Trixie

General Discussions
1

Hi all,
I’m sure this will be fixed soon, but in the meantime, I hope this helps someone.

I’ve been pulling my hair out all day because my CI jobs to convert images to mender have been failing, when they worked fine yesterday.
Turns out, the repository key was renewed over night, and the new one is incompatible with Debian 13’s sqv validation. Ubuntu Noble works just fine, and so does Debian after switching back to gpgv.
Just drop a config snipped into /etc/apt/apt.conf.d/90gpgv containing this line:
APT::Key::gpgvcommand "/usr/bin/gpgv";

The error I'm getting: 
2026-09-15 15:56:33 [INFO] [mender-convert-modify] Installing Mender client and related files
2026-09-15 15:56:33 [INFO] [mender-convert-modify] Installing Mender Client version latest
2026-09-15 15:56:33 [INFO] [mender-convert-modify] Installing Mender Flash version latest
2026-09-15 15:56:33 [INFO] [mender-convert-modify] Installing Mender Setup version latest
2026-09-15 15:56:33 [INFO] [mender-convert-modify] Installing Mender Snapshot version latest
2026-09-15 15:56:33 [INFO] [mender-convert-modify] Installing Mender Connect addon
2026-09-15 15:56:33 [INFO] [mender-convert-modify] Installing docker-compose Update Module version latest
2026-09-15 15:56:33 [INFO] [mender-convert-modify] Installing mender-client-version-inventory-script version latest
mender-convert-modify has finished. Cleaning up...
2026-09-15 15:56:34 [ERROR] [mender-convert] mender-convert failed
2026-09-15 15:56:34 [DEBUG] [mender-convert-modify] When running: (modules/chroot.sh:165): run_and_log_cmd():  
	sudo chroot work/rootfs/  apt-get update
	Get:1 file:/etc/apt/mirrors/debian.list Mirrorlist [30 B]
Get:2 file:/etc/apt/mirrors/debian-security.list Mirrorlist [39 B]
Hit:3 https://deb.debian.org/debian trixie InRelease
Hit:4 https://deb.debian.org/debian trixie-updates InRelease
Hit:5 https://deb.debian.org/debian trixie-backports InRelease
Hit:6 https://deb.debian.org/debian-security trixie-security InRelease
Get:7 https://downloads.mender.io/repos/device-components debian/trixie/stable InRelease [5688 B]
Err:7 https://downloads.mender.io/repos/device-components debian/trixie/stable InRelease
  Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on E6C857345575F9218396566224072B80A1B29B00 is not bound:            No binding signature at time 2026-09-14T10:22:22Z   because: No binding signature at time 2026-09-14T10:22:22Z
Reading package lists...
W: OpenPGP signature verification failed: https://downloads.mender.io/repos/device-components debian/trixie/stable InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on E6C857345575F9218396566224072B80A1B29B00 is not bound:            No binding signature at time 2026-09-14T10:22:22Z   because: No binding signature at time 2026-09-14T10:22:22Z
E: The repository 'https://downloads.mender.io/repos/device-components debian/trixie/stable InRelease' is not signed.
2026-09-15 15:56:34 [ERROR] [mender-convert] mender-convert exit code: 100
2

Hi @adrian ,

thanks for your report; this is related to the recent incident: Hosted Mender Status - Mender Deb package repository broken

It should be solved now, could you please try it again?

3

Hi @robgio ,

thanks for the quick reply. Yes, it is indeed fixed!

I did not know that status page existed, I signed up for the notifications immediately, thanks :slight_smile:

Greetings
Martin