Adventures in Linux Land

gaekwad · 2025-06-23 17:04:48

gaekwad wrote #339892:

How do I enable password auth for the postgres user when I do psql -U postgres? I suspect it’s something to do with pg_hba.conf and likely answered here

Done (in much less than two hours, thankfully):

Use passwd to set user account password for user postgres.
Use sudo -u postgres psql to open PostgreSQL console.
Use \password postgres to set the postgres user password for the console.
Tell pg_bha.conf to use scram-sha-256 for local user(s):

local all         all              scram-sha-256

Bounce postgresql service.
Subsequent psql connections now need a password, even from a local connection.

Algaris · Today 12:15:06

I’m currently updating one of my Ubuntu servers. After running sudo apt update, I encountered the following errors. This is a new issue for me, so I’m searching online for a solution. In the meantime if anyone has any advice it would be helpful.

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://repo.mysql.com/apt/ubuntu noble InRelease: The following signatures were invalid: EXPKEYSIG B7B3B788A8D3785C MySQL Release Engineering <mysql-build@oss.oracle.com>

W: Failed to fetch http://repo.mysql.com/apt/ubuntu/dists/noble/InRelease  The following signatures were invalid: EXPKEYSIG B7B3B788A8D3785C MySQL Release Engineering <mysql-build@oss.oracle.com>

W: Some index files failed to download. They have been ignored, or old ones used instead.

gaekwad · Today 12:20:03

bugs.mysql.com/bug.php?id=119212

Translation: pop the kettle on and wait for the Oracle rabble to catch up and sort themselves out.

You could chuck deb [allow-insecure=yes] into the mix if you absolutely need to get it updated today, but this is not a good idea.

Algaris · Today 12:24:27

So, I can effectively ignore the error and continue upgrading my server without any issues?

gaekwad · Today 12:26:04

Algaris wrote #341048:

So, I can effectively ignore the error and continue upgrading my server without any issues?

Yes. It’s essentially saying the MySQL signing key has expired at the Oracle end. This has happened before, they will resolve it their side, and the warning (W: means warning, and E: means error) will go away.

ETA: I realise the warning includes the word ‘error’, but the W: prefix means it’s a warning.

Last edited by gaekwad (Today 12:27:00)

Algaris · Today 12:29:02

That’s a relief all the search results were telling me to update the mysql keyring by running commands like:

curl -fsSL https://repo.mysql.com/RPM-GPG-KEY-mysql-2022 | gpg --dearmor | sudo tee /usr/share/keyrings/mysql.gpg > /dev/null

and then update the mysql sources list manually.

I got nervous at that point as I don’t like doing something unless I understand the reasoning behind it.

Last edited by Algaris (Today 12:29:47)

gaekwad · Today 12:50:02

There is reportedly a new key with a 2027 expiry, and an updated mysql-apt-config with it baked in. You could push this through with the following:

curl -Lo \
"$HOME"/mysql-apt-config.deb \
https://dev.mysql.com/get/mysql-apt-config_0.8.35-1_all.deb \
&& sudo dpkg -i \
"$HOME"/mysql-apt-config.deb

What this does: downloads the updated mysql-apt-config with the fresh key embedded; installs it.

This sidesteps the manual update of your sources.list stuff, but achieves the same result.

Edited: correct local file this time.

Last edited by gaekwad (Today 14:30:04)

Algaris · Today 13:56:32

I tried running this and got the following error:

dpkg: error: cannot access archive '/home/user01/mysql-apt-config': No such file or directory

gaekwad · Today 14:31:18

Mea culpa – I missed the local file extension. Updated:

curl -Lo \
"$HOME"/mysql-apt-config.deb \
https://dev.mysql.com/get/mysql-apt-config_0.8.35-1_all.deb \
&& sudo dpkg -i \
"$HOME"/mysql-apt-config.deb

When this completes, you can remove "$HOME"/mysql-apt-config and "$HOME"/mysql-apt-config.deb:

rm -f "$HOME"/mysql-apt-config "$HOME"/mysql-apt-config.deb

Last edited by gaekwad (Today 14:31:30)

Algaris · Today 14:47:04

Thank you that worked.

gaekwad · Today 14:55:26

Algaris wrote #341050:

I got nervous at that point as I don’t like doing something unless I understand the reasoning behind it.

Do you understand what the | stuff does?

Textpattern CMS

Textpattern CMS support forum

#49 2025-06-23 17:04:48

Re: Adventures in Linux Land

gaekwad wrote #339892:

#50 Today 12:15:06

Re: Adventures in Linux Land

#51 Today 12:20:03

Re: Adventures in Linux Land

#52 Today 12:24:27

Re: Adventures in Linux Land

#53 Today 12:26:04

Re: Adventures in Linux Land

Algaris wrote #341048:

#54 Today 12:29:02

Re: Adventures in Linux Land

#55 Today 12:50:02

Re: Adventures in Linux Land

#56 Today 13:56:32

Re: Adventures in Linux Land

#57 Today 14:31:18

Re: Adventures in Linux Land

#58 Today 14:47:04

Re: Adventures in Linux Land

#59 Today 14:55:26

Re: Adventures in Linux Land

Algaris wrote #341050:

Board footer