[QGIS-Developer] mirroring qgis.org repos

[Richard Duivenvoorde]

On 05-06-18 09:31, Jürgen E. Fischer wrote:
> Hi Bernhard,
> 
> On Tue, 05. Jun 2018 at 08:29:09 +0200, Bernhard Ströbl wrote:
>> has anything changed recently? We have -again- since several days problems
>> mirroring ubuntugis locally:
>>
>> debmirror --dist=xenial --section=main --arch=i386,amd64 --cleanup
>> --host=qgis.org --root=ubuntugis-ltr --method=https --rsync-extra=none
>> /mirrorpath
>> fails with 403 both via http and https
> 
> Odd.  With wget and a browser I can get
> https://qgis.org/ubuntugis-ltr/dists/xenial/Release.
> 
> But I can reproduce with debmirror.   I works when when I use nocache.qgis.org
> instead of qgis.org.
> 
> Looks like a cloudflare issue.

Using myself here (adding -v -debug).
Using nocache.qgis.org (which is NOT going through cloudflare), I get
another problem, but that is maybe because nocache.qgis.org is not known
in keys/certificates or so?

# debmirror -v -debug --dist=xenial --section=main --arch=i386,amd64
--cleanup --host=nocache.qgis.org --root=ubuntugis-ltr --method=https
--rsync-extra=none /mirrorpath
Warning: --rsync-extra is not configured to mirror the trace files.
         This configuration is not recommended.
Mirroring to /mirrorpath from
https://anonymous@nocache.qgis.org/ubuntugis-ltr/
Arches: i386,amd64
Dists: xenial
Sections: main
Including source.
Pdiff mode: use
Will clean up before mirroring.
Attempting to get lock ...
Getting meta files ...
https://nocache.qgis.org/ubuntugis-ltr/dists/xenial/Release => [  0%]
Getting: dists/xenial/Release... 200 OK
ok
https://nocache.qgis.org/ubuntugis-ltr/dists/xenial/InRelease => [  0%]
Getting: dists/xenial/InRelease... 200 OK
ok
https://nocache.qgis.org/ubuntugis-ltr/dists/xenial/Release.gpg => [
0%] Getting: dists/xenial/Release.gpg... 200 OK
ok
[GNUPG:] ERROR add_keyblock_resource 33554433
[GNUPG:] NEWSIG
[GNUPG:] ERROR keydb_search 33554445
[GNUPG:] ERRSIG CAEB3DC3BDF7FB45 1 10 00 1526737603 9 -
[GNUPG:] NO_PUBKEY CAEB3DC3BDF7FB45
gpgv: unknown type of key resource 'trustedkeys.kbx'
gpgv: keyblock resource '/root/.gnupg/trustedkeys.kbx': General error
gpgv: Signature made Sat 19 May 2018 03:46:43 PM CEST
gpgv:                using RSA key CAEB3DC3BDF7FB45
gpgv: Can't check signature: No public key
.temp/.tmp/dists/xenial/Release.gpg signature does not verify.
[GNUPG:] ERROR add_keyblock_resource 33554433
[GNUPG:] NEWSIG
[GNUPG:] ERROR keydb_search 33554445
[GNUPG:] ERRSIG CAEB3DC3BDF7FB45 1 10 01 1526737603 9 -
[GNUPG:] NO_PUBKEY CAEB3DC3BDF7FB45
gpgv: unknown type of key resource 'trustedkeys.kbx'
gpgv: keyblock resource '/root/.gnupg/trustedkeys.kbx': General error
gpgv: Signature made Sat 19 May 2018 03:46:43 PM CEST
gpgv:                using RSA key CAEB3DC3BDF7FB45
gpgv: Can't check signature: No public key
.temp/.tmp/dists/xenial/InRelease signature does not verify.
/usr/bin/debmirror: Created directory: dists/
/usr/bin/debmirror: Created directory: dists/xenial/
/usr/bin/debmirror: Created directory: .temp/dists/
/usr/bin/debmirror: Created directory: .temp/dists/xenial/
Errors:
 .temp/.tmp/dists/xenial/Release.gpg signature does not verify
 .temp/.tmp/dists/xenial/InRelease signature does not verify
Failed to download some Release, Release.gpg or InRelease files!
WARNING: releasing 1 pending lock...