The following signatures were invalid: BADSIG F60F4B3D7FA2AF80 cudatools <cudatools@nvidia.com>

During execution of sudo apt-get update I receive following error:

W: GPG error: http://developer.download.nvidia.com/compute/cuda/repos/ubuntu1804/x86_64  Release: The following signatures were invalid: BADSIG F60F4B3D7FA2AF80 cudatools <cudatools@nvidia.com>
E: The repository 'http://developer.download.nvidia.com/compute/cuda/repos/ubuntu1804/x86_64  Release' is not signed.
root@foo:~# cat /etc/apt/sources.list.d/cuda.list
deb http://developer.download.nvidia.com/compute/cuda/repos/ubuntu1804/x86_64 /

I suppose issue related to CDN consistency

extra info:

root@foo:~# curl -l http://developer.download.nvidia.com/compute/cuda/repos/ubuntu1804/x86_64/Release
Origin: NVIDIA
Label: NVIDIA CUDA
Architecture: x86_64
Date: Thu, 21 Oct 2021 15:01:23 +0000
MD5Sum:
 55a7cebd88e0d34d97ca6f2b1f395867                                          3249822 Packages
 1a1f09006e6041303ed91cddff9918e7                                           753371 Packages.gz
SHA1:
 6f580386133aa6a7d964536e3014220b14d110f1                                  3249822 Packages
 3788c763cc3df7ba3886c52efa7e4f9458a1e77b                                   753371 Packages.gz
SHA256:
 29fff784864108aae1620abd75f340ca5ac4f0395ed6336b087aa3133c8e5281          3249822 Packages
 29e860c22ba8613fe57c0053f0f7ce58e2f344788687b1ad57dc24753ad83519           753371 Packages.gz
Acquire-By-Hash: no
root@foo:~# curl -l http://developer.download.nvidia.com/compute/cuda/repos/ubuntu1804/x86_64/Release.gpg
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=U4cg
-----END PGP SIGNATURE-----
root@foo:~# sudo apt-key list
/etc/apt/trusted.gpg
--------------------
pub   rsa4096 2016-06-24 [SC]
      AE09 FE4B BD22 3A84 B2CC  FCE3 F60F 4B3D 7FA2 AF80
uid           [ unknown] cudatools <cudatools@nvidia.com>
root@foo:~# gpg --verify Release.gpg Release
gpg: Signature made Wed Oct 27 23:01:37 2021 UTC
gpg:                using RSA key F60F4B3D7FA2AF80
gpg: BAD signature from "cudatools <cudatools@nvidia.com>" [unknown]

related: Invalid signature `BADSIG F60F4B3D7FA2AF80` on Ubuntu 16.04 · Issue #613 · NVIDIA/nvidia-docker · GitHub

1 Like

I encountered same issue. I’m using nvidia/cudagl ubuntu 18 docker images and I can’t build my image because of not signed repo. Changing base image version didn’t solve problem.

Same problem

Hi @user25935 it appears you are using HTTP for this repository. We’ve been experiencing some issues with stale files when accessing over HTTP (port 80).

For the Ubuntu 18.04 CUDA repo, HTTPS is strongly recommended: https://developer.download.nvidia.com/compute/cuda/repos/ubuntu1804/x86_64/

Something else to try is purging old intermediate files

sudo rm -v /var/lib/apt/lists/*cuda*
sudo apt-get update

Hi @michal.kielak, and @dborisoglebskiy
Can I please get some more information from each of you

$ dig https://developer.download.nvidia.com/compute/cuda/repos/ubuntu1804/x86_64/Release
SERVER: 10.126.136.6
  • When was the file last modified? For example:
$ curl -I https://developer.download.nvidia.com/compute/cuda/repos/ubuntu1804/x86_64/Release
accept-ranges: bytes
age: 59779
cache-control: max-age=604800
content-type: application/octet-stream
date: Wed, 03 Nov 2021 16:52:34 GMT
etag: "3808326861"
expires: Wed, 10 Nov 2021 16:52:34 GMT
last-modified: Tue, 02 Nov 2021 23:03:53 GMT
server: ECAcc (sac/257D)
x-cache: HIT
x-vdms-version: 2.5
content-length: 696

Anything else you can provide about the environment would be helpful.

Hi @kmittman,
I repeated building process today and it’s working fine.

  1. HTTPS repos were used.
  2. Index of /compute/cuda/repos/ubuntu1804/x86_64
  3. Machine is located in Poland
  4. dig gives me in response 127.0.0.53 which I suppose is not correct
curl -I https://developer.download.nvidia.com/compute/cuda/repos/ubuntu1804/x86_64/Release
HTTP/2 200 
accept-ranges: bytes
age: 52193
cache-control: max-age=604800
content-type: application/octet-stream
date: Thu, 04 Nov 2021 11:44:19 GMT
etag: "901639449"
expires: Thu, 11 Nov 2021 11:44:19 GMT
last-modified: Wed, 03 Nov 2021 19:02:58 GMT
server: ECAcc (wmi/FEE3)
x-cache: HIT
x-vdms-version: 2.5
content-length: 696