Unable to run apt update. Get error NO_PUBKEY 9F9DDC083888C1CD

[ankurloriya]

Bug Report

Describe the bug
Unable to run apt update. Get error NO_PUBKEY 9F9DDC083888C1CD

Err:3 https://packages.fluentbit.io/ubuntu/focal focal InRelease
The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 9F9DDC083888C1CD

OS Details

DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=20.04
DISTRIB_CODENAME=focal

Trying to install fluentbit version 3.2

To Reproduce
Following this link https://docs.fluentbit.io/manual/installation/linux/ubuntu
to install

Additional context
I tried to import apt-key add but not work this extra effort.

[patrick-stephens]

Can you clarify exactly what you did?

Testing locally shows no issues - you have to import the apt-key in some fashion (that's mandatory for the package manager). We also have CI in place to verify post-release that installations succeed.

$ docker run --rm -it ubuntu:20.04 bash -c 'apt-get update && apt-get install -y sudo gpg curl && curl https://raw.githubusercontent.com/fluent/fluent-bit/master/install.sh | sh'
...
Setting up fluent-bit (4.0.0) ...
Processing triggers for libc-bin (2.31-0ubuntu9.16) ...

Installation completed. Happy Logging!

Using the one line install script will also import the key: curl https://raw.githubusercontent.com/fluent/fluent-bit/master/install.sh | sh

However if you are setting up the repo manually then you must import the key as defined in the docs.

[broale-dish]

I ran into the same problem on ubuntu 24.04, and the issue seems to be the permissions of the key file. The script downloads the file with owner read/write (600), and no permissions for group/other.
All other files in the keyrings directory are also readable for group/other (644). Updating the permissions on the file seems to fix above issue.
Perhaps this is something that can be added to the setup script.

[patrick-stephens]

Ah, good to know @broale-dish - feel free to submit a docs and/or an install script update PR too.

• https://github.com/fluent/fluent-bit/blob/master/install.sh
• https://github.com/fluent/fluent-bit-docs/tree/master/installation

I wonder if it is something recently changed in that version.

[AritraWork1997]

The fix suggested by @broale-dish worked for me as well. The permission on the key file for me was 640 initially but changing it to 644 resolved it. I am using ubuntu 24.04. This started recently, like I installed fluent bit two weeks ago without any issue but now its not working

[patrick-stephens]

The install script has not changed in that time frame as far as I'm aware.

[AritraWork1997]

might be an OS level issue. I use CIS hardened ubuntu pro 24.04 and faced the same issue when trying to install jenkins as well

[github-actions]

This issue is stale because it has been open 90 days with no activity. Remove stale label or comment or this will be closed in 5 days. Maintainers can add the exempt-stale label.

[github-actions]

This issue was closed because it has been stalled for 5 days with no activity.