Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I created the local mirror to upgrade all lucid workstations in my network to precise. The problem is that the upgrade tool (link below) - precise.tar.gz always download packages from archive.ubuntu.com (19% [Waiting for headers] [Connecting to archive.ubuntu.com (]). I edited the precise.tar.gz file by modifying some files of it, putting it to my local mirror, modified the meta-release URL to my local mirror. Running do-release-upgrade I have the error below. My question is how to sign the precise.tar.gz package myself?

Checking for a new ubuntu release

Done Upgrade tool signature

Done Upgrade tool

Done downloading

authenticate 'precise.tar.gz' against 'precise.tar.gz.gpg'

exception from gpg: GnuPG exited non-zero, with code 1

Debug information:

gpg: Signature made Mon 04 Jun 2012 08:40:31 PM ICT using DSA key ID 437D05B5

gpg: /tmp/tmpMaz62f/trustdb.gpg: trustdb created

gpg: BAD signature from "Ubuntu Archive Automatic Signing Key "

Authentication failed

Authenticating the upgrade failed. There may be a problem with the network or with the server.

Dist: precise
Name: Precise Pangolin
Version: 12.04 LTS
Date: Thu, 26 Apr 2012 12:04:00 UTC
Supported: 1
Description: This is the 12.04 LTS release
Release-File: http://archive.ubuntu.com/ubuntu/dists/precise/Release
ReleaseNotes: http://archive.ubuntu.com/ubuntu/dists/precise-security/main/dist-upgrader-all/current/ReleaseAnnouncement
ReleaseNotesHtml: http://archive.ubuntu.com/ubuntu/dists/precise-security/main/dist-upgrader-all/current/ReleaseAnnouncement.html
UpgradeTool: http://archive.ubuntu.com/ubuntu/dists/precise-security/main/dist-upgrader-all/current/precise.tar.gz
UpgradeToolSignature: http://archive.ubuntu.com/ubuntu/dists/precise-security/main/dist-upgrader-all/current/precise.tar.gz.gpg
share|improve this question
Do you need to just update /etc/apt/sources.list to point at your local mirror? –  Ed Harcourt Aug 26 '12 at 3:05
Actually, I added/edited my /etc/apt/sources.list. I can download precise.tar.gz as I posted from my local mirror. But inside the precise.tart.gz which is from ubuntu contain hard link from ubuntu.com. So I need to edit precise.tar.gz to fix my local mirror. ---> facing the Authentication failed issue of Signing key. –  Diamond Aug 31 '12 at 7:01
add comment

migrated from stackoverflow.com Aug 9 '12 at 15:26

This question came from our site for professional and enthusiast programmers.

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.