@juliank: This is still a problem, at least with some repos: 1. `apt-get update` returns a non-zero exit code and so automated scripts that do `apt-get update && apt-get install ...` will fail to install the required packages. 2. Even if we ignore the error, the index files are not being accepted and packages described in the index cannot be installed.
Here is an example of a trying to install the CUDA driver inside an Ubuntu 16.04 docker container: Step 4 : RUN dpkg -i cuda-repo-ubuntu1504_7.5-18_amd64.deb && apt-get update ; apt-get install -y --no-install-recommends cuda ---> Running in 3034cbd1c6e2 Selecting previously unselected package cuda-repo-ubuntu1504. (Reading database ... 10067 files and directories currently installed.) Preparing to unpack cuda-repo-ubuntu1504_7.5-18_amd64.deb ... Unpacking cuda-repo-ubuntu1504 (7.5-18) ... Setting up cuda-repo-ubuntu1504 (7.5-18) ... OK Get:1 http://archive.ubuntu.com/ubuntu xenial InRelease [116 kB] Hit:2 http://archive.ubuntu.com/ubuntu xenial-updates InRelease Hit:3 http://archive.ubuntu.com/ubuntu xenial-security InRelease Ign:4 http://developer.download.nvidia.com/compute/cuda/repos/ubuntu1504/x86_64 InRelease Get:5 http://developer.download.nvidia.com/compute/cuda/repos/ubuntu1504/x86_64 Release [186 B] Get:6 http://developer.download.nvidia.com/compute/cuda/repos/ubuntu1504/x86_64 Release.gpg [181 B] Fetched 116 kB in 1s (82.1 kB/s) Reading package lists... W: http://developer.download.nvidia.com/compute/cuda/repos/ubuntu1504/x86_64/Release.gpg: Signature by key 889BEE522DA690103C4B085ED88C3D385C37D3BE uses weak digest algorithm (SHA1) E: Failed to fetch http://developer.download.nvidia.com/compute/cuda/repos/ubuntu1504/x86_64/Release No Hash entry in Release file /var/lib/apt/lists/partial/developer.download.nvidia.com_compute_cuda_repos_ubuntu1504_x86%5f64_Release, which is considered strong enough for security purposes E: Some index files failed to download. They have been ignored, or old ones used instead. Reading package lists... Building dependency tree... Reading state information... E: Unable to locate package cuda As you can see the package is not being installed. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apt in Ubuntu. https://bugs.launchpad.net/bugs/1558331 Title: message "The repository is insufficiently signed by key (weak digest)" is poorly worded Status in apt package in Ubuntu: Fix Released Bug description: The title pretty much says it all. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1558331/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
