Can not use APT-repo for Debian 12 from packages.matrix.org

[tisteagle]

Description

When following https://matrix-org.github.io/synapse/latest/setup/installation.html install guide for Debian 12 (bookworm), the apt-program can't vailidate the matrix-packages signing key.

Steps to reproduce

• Trying to use these steps when installing APT-repo (all commands is executed by root):
  • "apt install -y lsb-release wget apt-transport-https", runs successfully.
  • "wget -O /usr/share/keyrings/matrix-org-archive-keyring.gpg https://packages.matrix.org/debian/matrix-org-archive-keyring.gpg", the signing key is successfully downloaded.
  • "echo "deb [signed-by=/usr/share/keyrings/matrix-org-archive-keyring.gpg] https://packages.matrix.org/debian/ $(lsb_release -cs) main" > /etc/apt/sources.list.d/matrix-org.list", the file is successfully created.
  • "apt update", this command fails, in short reporting: "NO_PUBKEY F473DD4473365DE1"

Homeserver

N/A

Synapse Version

N/A

Installation Method

Debian packages from packages.matrix.org

Database

N/A

Workers

Single process

Platform

Proxmox hypvervisor with a virtual machine running Debian 12. Specs: 2 vCPU, 4GiB RAM, 40GiB Disk.

Configuration

N/A

Relevant log output

root@matrix:~# lsb_release -a
No LSB modules are available.
Distributor ID:	Debian
Description:	Debian GNU/Linux 12 (bookworm)
Release:	12
Codename:	bookworm
root@matrix:~# dpkg -l | grep -E "lsb-release|wget|apt-transport-https"
ii  apt-transport-https            2.6.1                   all          transitional package for https support
ii  lsb-release                    12.0-1                  all          Linux Standard Base version reporting utility (minimal implementation)
ii  wget                           1.21.3-1+b2             amd64        retrieves files from the web
root@matrix:~# wget -O /usr/share/keyrings/matrix-org-archive-keyring.gpg https://packages.matrix.org/debian/matrix-org-archive-keyring.gpg
--2023-08-04 18:48:03--  https://packages.matrix.org/debian/matrix-org-archive-keyring.gpg
Resolving packages.matrix.org (packages.matrix.org)... 2606:4700:10::ac43:135a, 2606:4700:10::6814:c925, 2606:4700:10::6814:c825, ...
Connecting to packages.matrix.org (packages.matrix.org)|2606:4700:10::ac43:135a|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2583 (2.5K) [application/octet-stream]
Saving to: ‘/usr/share/keyrings/matrix-org-archive-keyring.gpg’

/usr/share/keyrings/matrix-org-archi 100%[====================================================================>]   2.52K  --.-KB/s    in 0s      

2023-08-04 18:48:04 (25.0 MB/s) - ‘/usr/share/keyrings/matrix-org-archive-keyring.gpg’ saved [2583/2583]

root@matrix:~# echo "deb [signed-by=/usr/share/keyrings/matrix-org-archive-keyring.gpg] https://packages.matrix.org/debian/ $(lsb_release -cs) main" > /etc/apt/sources.list.d/matrix-org.list
root@matrix:~# cat /etc/apt/sources.list.d/matrix-org.list 
deb [signed-by=/usr/share/keyrings/matrix-org-archive-keyring.gpg] https://packages.matrix.org/debian/ bookworm main
root@matrix:~# apt update
Hit:1 http://security.debian.org/debian-security bookworm-security InRelease
Hit:2 http://ftp.se.debian.org/debian bookworm InRelease
Hit:3 http://ftp.se.debian.org/debian bookworm-updates InRelease
Get:4 https://packages.matrix.org/debian bookworm InRelease [5,142 B]
Err:4 https://packages.matrix.org/debian bookworm InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY F473DD4473365DE1
Reading package lists... Done
W: GPG error: https://packages.matrix.org/debian bookworm InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY F473DD4473365DE1
E: The repository 'https://packages.matrix.org/debian bookworm InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Anything else that would be useful to know?

No response

[tisteagle]

Moved the keyfile to /etc/apt/keyrings/ and now it is working. The "signed-by"-part in the repo-file is redirected to the new path as well. The installation guide should be updated. (https://wiki.debian.org/DebianRepository/UseThirdParty)

[DMRobertson]

I was not able to reproduce this myself in a docker container.

docker run -it debian:12
apt update
apt install -y lsb-release wget apt-transport-https
wget -O /usr/share/keyrings/matrix-org-archive-keyring.gpg https://packages.matrix.org/debian/matrix-org-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/matrix-org-archive-keyring.gpg] https://packages.matrix.org/debian/ $(lsb_release -cs) main" |
    tee /etc/apt/sources.list.d/matrix-org.list
apt update
apt install matrix-synapse-py3

2023-08-07 11:40:51 ✔  $ docker run -it debian:12
root@7d7a85896c7d:/# apt install -y lsb-release wget apt-transport-https
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Note, selecting 'apt' instead of 'apt-transport-https'
E: Unable to locate package lsb-release
E: Unable to locate package wget
root@7d7a85896c7d:/# apt update
Get:1 http://deb.debian.org/debian bookworm InRelease [151 kB]
Get:2 http://deb.debian.org/debian bookworm-updates InRelease [52.1 kB]
Get:3 http://deb.debian.org/debian-security bookworm-security InRelease [48.0 kB]
Get:4 http://deb.debian.org/debian bookworm/main amd64 Packages [8906 kB]
Get:5 http://deb.debian.org/debian bookworm-updates/main amd64 Packages [4732 B]
Get:6 http://deb.debian.org/debian-security bookworm-security/main amd64 Packages [50.6 kB]
Fetched 9213 kB in 2s (4418 kB/s)                        
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
root@7d7a85896c7d:/# apt install -y lsb-release wget apt-transport-https
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following additional packages will be installed:
  ca-certificates libpsl5 libssl3 openssl publicsuffix
The following NEW packages will be installed:
  apt-transport-https ca-certificates libpsl5 libssl3 lsb-release openssl publicsuffix wget
0 upgraded, 8 newly installed, 0 to remove and 0 not upgraded.
Need to get 4785 kB of archives.
After this operation, 13.1 MB of additional disk space will be used.
Get:1 http://deb.debian.org/debian bookworm/main amd64 libssl3 amd64 3.0.9-1 [2016 kB]
Get:2 http://deb.debian.org/debian bookworm/main amd64 openssl amd64 3.0.9-1 [1416 kB]
Get:3 http://deb.debian.org/debian bookworm/main amd64 ca-certificates all 20230311 [153 kB]
Get:4 http://deb.debian.org/debian bookworm/main amd64 libpsl5 amd64 0.21.2-1 [58.7 kB]
Get:5 http://deb.debian.org/debian bookworm/main amd64 wget amd64 1.21.3-1+b2 [984 kB]
Get:6 http://deb.debian.org/debian bookworm/main amd64 apt-transport-https all 2.6.1 [25.2 kB]
Get:7 http://deb.debian.org/debian bookworm/main amd64 lsb-release all 12.0-1 [6416 B]
Get:8 http://deb.debian.org/debian bookworm/main amd64 publicsuffix all 20230209.2326-1 [126 kB]
Fetched 4785 kB in 0s (13.6 MB/s)    
debconf: delaying package configuration, since apt-utils is not installed
Selecting previously unselected package libssl3:amd64.
(Reading database ... 6098 files and directories currently installed.)
Preparing to unpack .../0-libssl3_3.0.9-1_amd64.deb ...
Unpacking libssl3:amd64 (3.0.9-1) ...
Selecting previously unselected package openssl.
Preparing to unpack .../1-openssl_3.0.9-1_amd64.deb ...
Unpacking openssl (3.0.9-1) ...
Selecting previously unselected package ca-certificates.
Preparing to unpack .../2-ca-certificates_20230311_all.deb ...
Unpacking ca-certificates (20230311) ...
Selecting previously unselected package libpsl5:amd64.
Preparing to unpack .../3-libpsl5_0.21.2-1_amd64.deb ...
Unpacking libpsl5:amd64 (0.21.2-1) ...
Selecting previously unselected package wget.
Preparing to unpack .../4-wget_1.21.3-1+b2_amd64.deb ...
Unpacking wget (1.21.3-1+b2) ...
Selecting previously unselected package apt-transport-https.
Preparing to unpack .../5-apt-transport-https_2.6.1_all.deb ...
Unpacking apt-transport-https (2.6.1) ...
Selecting previously unselected package lsb-release.
Preparing to unpack .../6-lsb-release_12.0-1_all.deb ...
Unpacking lsb-release (12.0-1) ...
Selecting previously unselected package publicsuffix.
Preparing to unpack .../7-publicsuffix_20230209.2326-1_all.deb ...
Unpacking publicsuffix (20230209.2326-1) ...
Setting up libpsl5:amd64 (0.21.2-1) ...
Setting up wget (1.21.3-1+b2) ...
Setting up apt-transport-https (2.6.1) ...
Setting up libssl3:amd64 (3.0.9-1) ...
Setting up lsb-release (12.0-1) ...
Setting up openssl (3.0.9-1) ...
Setting up publicsuffix (20230209.2326-1) ...
Setting up ca-certificates (20230311) ...
debconf: unable to initialize frontend: Dialog
debconf: (No usable dialog-like program is installed, so the dialog based frontend cannot be used. at /usr/share/perl5/Debconf/FrontEnd/Dialog
.pm line 78.)
debconf: falling back to frontend: Readline
debconf: unable to initialize frontend: Readline
debconf: (Can't locate Term/ReadLine.pm in @INC (you may need to install the Term::ReadLine module) (@INC contains: /etc/perl /usr/local/lib/x
86_64-linux-gnu/perl/5.36.0 /usr/local/share/perl/5.36.0 /usr/lib/x86_64-linux-gnu/perl5/5.36 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl-
base /usr/lib/x86_64-linux-gnu/perl/5.36 /usr/share/perl/5.36 /usr/local/lib/site_perl) at /usr/share/perl5/Debconf/FrontEnd/Readline.pm line 
7.)
debconf: falling back to frontend: Teletype
Updating certificates in /etc/ssl/certs...
140 added, 0 removed; done.
Processing triggers for libc-bin (2.36-9+deb12u1) ...
Processing triggers for ca-certificates (20230311) ...
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
root@7d7a85896c7d:/# wget -O /usr/share/keyrings/matrix-org-archive-keyring.gpg https://packages.matrix.org/debian/matrix-org-archive-keyring.gpg
--2023-08-07 10:41:40--  https://packages.matrix.org/debian/matrix-org-archive-keyring.gpg
Resolving packages.matrix.org (packages.matrix.org)... 104.20.201.37, 172.67.19.90, 104.20.200.37, ...
Connecting to packages.matrix.org (packages.matrix.org)|104.20.201.37|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2583 (2.5K) [application/octet-stream]
Saving to: '/usr/share/keyrings/matrix-org-archive-keyring.gpg'

/usr/share/keyrings/matrix-org-arch 100%[=================================================================>]   2.52K  --.-KB/s    in 0s      

2023-08-07 10:41:41 (15.7 MB/s) - '/usr/share/keyrings/matrix-org-archive-keyring.gpg' saved [2583/2583]

root@7d7a85896c7d:/# echo "deb [signed-by=/usr/share/keyrings/matrix-org-archive-keyring.gpg] https://packages.matrix.org/debian/ $(lsb_release -cs) main" |
    tee /etc/apt/sources.list.d/matrix-org.list
deb [signed-by=/usr/share/keyrings/matrix-org-archive-keyring.gpg] https://packages.matrix.org/debian/ bookworm main
root@7d7a85896c7d:/# apt update
Hit:1 http://deb.debian.org/debian bookworm InRelease
Hit:2 http://deb.debian.org/debian bookworm-updates InRelease
Hit:3 http://deb.debian.org/debian-security bookworm-security InRelease
Get:4 https://packages.matrix.org/debian bookworm InRelease [5142 B]
Get:5 https://packages.matrix.org/debian bookworm/main amd64 Packages [972 B]
Fetched 6114 B in 0s (21.7 kB/s) 
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
root@7d7a85896c7d:/# apt install matrix-synapse-py3
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following additional packages will be installed:
  krb5-locales libexpat1 libgpm2 libgssapi-krb5-2 libicu72 libk5crypto3 libkeyutils1 libkrb5-3 libkrb5support0 libldap-2.5-0 libldap-common
  libncursesw6 libnsl2 libpq5 libpython3.11-minimal libpython3.11-stdlib libreadline8 libsasl2-2 libsasl2-modules libsasl2-modules-db
  libsqlite3-0 libtirpc-common libtirpc3 matrix-org-archive-keyring media-types python3.11 python3.11-minimal readline-common
Suggested packages:
  gpm krb5-doc krb5-user libsasl2-modules-gssapi-mit | libsasl2-modules-gssapi-heimdal libsasl2-modules-ldap libsasl2-modules-otp
  libsasl2-modules-sql sqlite3 perl:any python3.11-venv python3.11-doc binutils binfmt-support readline-doc
The following NEW packages will be installed:
  krb5-locales libexpat1 libgpm2 libgssapi-krb5-2 libicu72 libk5crypto3 libkeyutils1 libkrb5-3 libkrb5support0 libldap-2.5-0 libldap-common
  libncursesw6 libnsl2 libpq5 libpython3.11-minimal libpython3.11-stdlib libreadline8 libsasl2-2 libsasl2-modules libsasl2-modules-db
  libsqlite3-0 libtirpc-common libtirpc3 matrix-org-archive-keyring matrix-synapse-py3 media-types python3.11 python3.11-minimal
  readline-common
0 upgraded, 29 newly installed, 0 to remove and 0 not upgraded.
Need to get 65.3 MB of archives.
After this operation, 332 MB of additional disk space will be used.
Do you want to continue? [Y/n] y
Get:1 http://deb.debian.org/debian bookworm/main amd64 libpython3.11-minimal amd64 3.11.2-6 [813 kB]
Get:2 http://deb.debian.org/debian bookworm/main amd64 libexpat1 amd64 2.5.0-1 [99.3 kB]         
Get:3 http://deb.debian.org/debian bookworm/main amd64 python3.11-minimal amd64 3.11.2-6 [2064 kB]
Get:4 https://packages.matrix.org/debian bookworm/main amd64 matrix-synapse-py3 amd64 1.89.0+bookworm1 [48.0 MB]
Get:5 http://deb.debian.org/debian bookworm/main amd64 libicu72 amd64 72.1-3 [9376 kB]
Get:6 http://deb.debian.org/debian bookworm/main amd64 media-types all 10.0.0 [26.1 kB]
Get:7 http://deb.debian.org/debian bookworm/main amd64 libncursesw6 amd64 6.4-4 [134 kB]
Get:8 http://deb.debian.org/debian bookworm/main amd64 libkrb5support0 amd64 1.20.1-2 [32.3 kB]
Get:9 http://deb.debian.org/debian bookworm/main amd64 libk5crypto3 amd64 1.20.1-2 [79.0 kB]
Get:10 http://deb.debian.org/debian bookworm/main amd64 libkeyutils1 amd64 1.6.3-2 [8808 B]
Get:11 http://deb.debian.org/debian bookworm/main amd64 libkrb5-3 amd64 1.20.1-2 [331 kB]
Get:12 http://deb.debian.org/debian bookworm/main amd64 libgssapi-krb5-2 amd64 1.20.1-2 [134 kB]
Get:13 http://deb.debian.org/debian bookworm/main amd64 libtirpc-common all 1.3.3+ds-1 [14.0 kB]
Get:14 http://deb.debian.org/debian bookworm/main amd64 libtirpc3 amd64 1.3.3+ds-1 [85.2 kB]
Get:15 http://deb.debian.org/debian bookworm/main amd64 libnsl2 amd64 1.3.0-2 [39.5 kB]
Get:16 http://deb.debian.org/debian bookworm/main amd64 readline-common all 8.2-1.3 [69.0 kB]
Get:17 http://deb.debian.org/debian bookworm/main amd64 libreadline8 amd64 8.2-1.3 [166 kB]
Get:18 http://deb.debian.org/debian bookworm/main amd64 libsqlite3-0 amd64 3.40.1-2 [837 kB]
Get:19 http://deb.debian.org/debian bookworm/main amd64 libpython3.11-stdlib amd64 3.11.2-6 [1796 kB]
Get:20 http://deb.debian.org/debian bookworm/main amd64 python3.11 amd64 3.11.2-6 [572 kB]
Get:21 http://deb.debian.org/debian bookworm/main amd64 krb5-locales all 1.20.1-2 [62.6 kB]
Get:22 http://deb.debian.org/debian bookworm/main amd64 libgpm2 amd64 1.20.7-10+b1 [14.2 kB]
Get:23 http://deb.debian.org/debian bookworm/main amd64 libsasl2-modules-db amd64 2.1.28+dfsg-10 [20.3 kB]
Get:24 http://deb.debian.org/debian bookworm/main amd64 libsasl2-2 amd64 2.1.28+dfsg-10 [59.7 kB]
Get:25 http://deb.debian.org/debian bookworm/main amd64 libldap-2.5-0 amd64 2.5.13+dfsg-5 [183 kB]
Get:26 http://deb.debian.org/debian bookworm/main amd64 libldap-common all 2.5.13+dfsg-5 [29.3 kB]
Get:27 http://deb.debian.org/debian bookworm/main amd64 libpq5 amd64 15.3-0+deb12u1 [185 kB]
Get:28 http://deb.debian.org/debian bookworm/main amd64 libsasl2-modules amd64 2.1.28+dfsg-10 [66.6 kB]
Get:29 https://packages.matrix.org/debian bookworm/main amd64 matrix-org-archive-keyring all 1.3 [3380 B]
Fetched 65.3 MB in 5s (12.9 MB/s)                     
debconf: delaying package configuration, since apt-utils is not installed
Selecting previously unselected package libpython3.11-minimal:amd64.
(Reading database ... 6707 files and directories currently installed.)
Preparing to unpack .../00-libpython3.11-minimal_3.11.2-6_amd64.deb ...
Unpacking libpython3.11-minimal:amd64 (3.11.2-6) ...
Selecting previously unselected package libexpat1:amd64.
Preparing to unpack .../01-libexpat1_2.5.0-1_amd64.deb ...
Unpacking libexpat1:amd64 (2.5.0-1) ...
Selecting previously unselected package python3.11-minimal.
Preparing to unpack .../02-python3.11-minimal_3.11.2-6_amd64.deb ...
Unpacking python3.11-minimal (3.11.2-6) ...
Selecting previously unselected package libicu72:amd64.
Preparing to unpack .../03-libicu72_72.1-3_amd64.deb ...
Unpacking libicu72:amd64 (72.1-3) ...
Selecting previously unselected package media-types.
Preparing to unpack .../04-media-types_10.0.0_all.deb ...
Unpacking media-types (10.0.0) ...
Selecting previously unselected package libncursesw6:amd64.
Preparing to unpack .../05-libncursesw6_6.4-4_amd64.deb ...
Unpacking libncursesw6:amd64 (6.4-4) ...
Selecting previously unselected package libkrb5support0:amd64.
Preparing to unpack .../06-libkrb5support0_1.20.1-2_amd64.deb ...
Unpacking libkrb5support0:amd64 (1.20.1-2) ...
Selecting previously unselected package libk5crypto3:amd64.
Preparing to unpack .../07-libk5crypto3_1.20.1-2_amd64.deb ...
Unpacking libk5crypto3:amd64 (1.20.1-2) ...
Selecting previously unselected package libkeyutils1:amd64.
Preparing to unpack .../08-libkeyutils1_1.6.3-2_amd64.deb ...
Unpacking libkeyutils1:amd64 (1.6.3-2) ...
Selecting previously unselected package libkrb5-3:amd64.
Preparing to unpack .../09-libkrb5-3_1.20.1-2_amd64.deb ...
Unpacking libkrb5-3:amd64 (1.20.1-2) ...
Selecting previously unselected package libgssapi-krb5-2:amd64.
Preparing to unpack .../10-libgssapi-krb5-2_1.20.1-2_amd64.deb ...
Unpacking libgssapi-krb5-2:amd64 (1.20.1-2) ...
Selecting previously unselected package libtirpc-common.
Preparing to unpack .../11-libtirpc-common_1.3.3+ds-1_all.deb ...
Unpacking libtirpc-common (1.3.3+ds-1) ...
Selecting previously unselected package libtirpc3:amd64.
Preparing to unpack .../12-libtirpc3_1.3.3+ds-1_amd64.deb ...
Unpacking libtirpc3:amd64 (1.3.3+ds-1) ...
Selecting previously unselected package libnsl2:amd64.
Preparing to unpack .../13-libnsl2_1.3.0-2_amd64.deb ...
Unpacking libnsl2:amd64 (1.3.0-2) ...
Selecting previously unselected package readline-common.
Preparing to unpack .../14-readline-common_8.2-1.3_all.deb ...
Unpacking readline-common (8.2-1.3) ...
Selecting previously unselected package libreadline8:amd64.
Preparing to unpack .../15-libreadline8_8.2-1.3_amd64.deb ...
Unpacking libreadline8:amd64 (8.2-1.3) ...
Selecting previously unselected package libsqlite3-0:amd64.
Preparing to unpack .../16-libsqlite3-0_3.40.1-2_amd64.deb ...
Unpacking libsqlite3-0:amd64 (3.40.1-2) ...
Selecting previously unselected package libpython3.11-stdlib:amd64.
Preparing to unpack .../17-libpython3.11-stdlib_3.11.2-6_amd64.deb ...
Unpacking libpython3.11-stdlib:amd64 (3.11.2-6) ...
Selecting previously unselected package python3.11.
Preparing to unpack .../18-python3.11_3.11.2-6_amd64.deb ...
Unpacking python3.11 (3.11.2-6) ...
Selecting previously unselected package matrix-synapse-py3.
Preparing to unpack .../19-matrix-synapse-py3_1.89.0+bookworm1_amd64.deb ...
Unpacking matrix-synapse-py3 (1.89.0+bookworm1) ...
Selecting previously unselected package krb5-locales.
Preparing to unpack .../20-krb5-locales_1.20.1-2_all.deb ...
Unpacking krb5-locales (1.20.1-2) ...
Selecting previously unselected package libgpm2:amd64.
Preparing to unpack .../21-libgpm2_1.20.7-10+b1_amd64.deb ...
Unpacking libgpm2:amd64 (1.20.7-10+b1) ...
Selecting previously unselected package libsasl2-modules-db:amd64.
Preparing to unpack .../22-libsasl2-modules-db_2.1.28+dfsg-10_amd64.deb ...
Unpacking libsasl2-modules-db:amd64 (2.1.28+dfsg-10) ...
Selecting previously unselected package libsasl2-2:amd64.
Preparing to unpack .../23-libsasl2-2_2.1.28+dfsg-10_amd64.deb ...
Unpacking libsasl2-2:amd64 (2.1.28+dfsg-10) ...
Selecting previously unselected package libldap-2.5-0:amd64.
Preparing to unpack .../24-libldap-2.5-0_2.5.13+dfsg-5_amd64.deb ...
Unpacking libldap-2.5-0:amd64 (2.5.13+dfsg-5) ...
Selecting previously unselected package libldap-common.
Preparing to unpack .../25-libldap-common_2.5.13+dfsg-5_all.deb ...
Unpacking libldap-common (2.5.13+dfsg-5) ...
Selecting previously unselected package libpq5:amd64.
Preparing to unpack .../26-libpq5_15.3-0+deb12u1_amd64.deb ...
Unpacking libpq5:amd64 (15.3-0+deb12u1) ...
Selecting previously unselected package libsasl2-modules:amd64.
Preparing to unpack .../27-libsasl2-modules_2.1.28+dfsg-10_amd64.deb ...
Unpacking libsasl2-modules:amd64 (2.1.28+dfsg-10) ...
Selecting previously unselected package matrix-org-archive-keyring.
Preparing to unpack .../28-matrix-org-archive-keyring_1.3_all.deb ...
Unpacking matrix-org-archive-keyring (1.3) ...
Setting up matrix-org-archive-keyring (1.3) ...
Setting up libexpat1:amd64 (2.5.0-1) ...
Setting up media-types (10.0.0) ...
Setting up libkeyutils1:amd64 (1.6.3-2) ...
Setting up libgpm2:amd64 (1.20.7-10+b1) ...
Setting up libicu72:amd64 (72.1-3) ...
Setting up libtirpc-common (1.3.3+ds-1) ...
Setting up libsqlite3-0:amd64 (3.40.1-2) ...
Setting up libsasl2-modules:amd64 (2.1.28+dfsg-10) ...
Setting up krb5-locales (1.20.1-2) ...
Setting up libldap-common (2.5.13+dfsg-5) ...
Setting up libkrb5support0:amd64 (1.20.1-2) ...
Setting up libsasl2-modules-db:amd64 (2.1.28+dfsg-10) ...
Setting up libncursesw6:amd64 (6.4-4) ...
Setting up libk5crypto3:amd64 (1.20.1-2) ...
Setting up libsasl2-2:amd64 (2.1.28+dfsg-10) ...
Setting up libkrb5-3:amd64 (1.20.1-2) ...
Setting up libpython3.11-minimal:amd64 (3.11.2-6) ...
Setting up readline-common (8.2-1.3) ...
Setting up python3.11-minimal (3.11.2-6) ...
Setting up libreadline8:amd64 (8.2-1.3) ...
Setting up libldap-2.5-0:amd64 (2.5.13+dfsg-5) ...
Setting up libgssapi-krb5-2:amd64 (1.20.1-2) ...
Setting up libtirpc3:amd64 (1.3.3+ds-1) ...
Setting up libpq5:amd64 (15.3-0+deb12u1) ...
Setting up libnsl2:amd64 (1.3.0-2) ...
Setting up libpython3.11-stdlib:amd64 (3.11.2-6) ...
Setting up python3.11 (3.11.2-6) ...
Setting up matrix-synapse-py3 (1.89.0+bookworm1) ...
debconf: unable to initialize frontend: Dialog
debconf: (No usable dialog-like program is installed, so the dialog based frontend cannot be used. at /usr/share/perl5/Debconf/FrontEnd/Dialog
.pm line 78.)
debconf: falling back to frontend: Readline
debconf: unable to initialize frontend: Readline
debconf: (Can't locate Term/ReadLine.pm in @INC (you may need to install the Term::ReadLine module) (@INC contains: /etc/perl /usr/local/lib/x
86_64-linux-gnu/perl/5.36.0 /usr/local/share/perl/5.36.0 /usr/lib/x86_64-linux-gnu/perl5/5.36 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl-
base /usr/lib/x86_64-linux-gnu/perl/5.36 /usr/share/perl/5.36 /usr/local/lib/site_perl) at /usr/share/perl5/Debconf/FrontEnd/Readline.pm line 
7.)
debconf: falling back to frontend: Teletype
Configuring matrix-synapse-py3
------------------------------

The name that this homeserver will appear as, to clients and other servers via federation. This is normally the public hostname of the server
running synapse, but can be different if you set up delegation. Please refer to the delegation documentation in this case:
https://github.com/matrix-org/synapse/blob/master/docs/delegate.md.

Name of the server: test

Developers of Matrix and Synapse really appreciate helping the project out by reporting homeserver usage statistics from this homeserver.
Your homeserver's server name, along with very basic aggregate data (e.g. number of users) will be reported. But it helps track the growth of
the Matrix community, and helps in making Matrix a success, as well as to convince other networks that they should peer with Matrix.

Thank you.

Report homeserver usage statistics? [yes/no] no

Processing triggers for libc-bin (2.36-9+deb12u1) ...
root@7d7a85896c7d:/# 

Moved the keyfile to /etc/apt/keyrings/ and now it is working. The "signed-by"-part in the repo-file is redirected to the new path as well. The installation guide should be updated. (wiki.debian.org/DebianRepository/UseThirdParty)

I am very unfamiliar with Debian packaging, but I am not convinced this is correct. The wiki you link to says

If future updates to the certificate will be managed by an apt/dpkg package as recommended below, then it SHOULD be downloaded into /usr/share/keyrings using the same filename that will be provided by the package. If it will be managed locally , it SHOULD be downloaded into /etc/apt/keyrings instead.

and indeed we do provide a keyring package, see #10389, matrix-org/pkg-repo-configs#16 and #15110.

[tisteagle]

And now I can't reproduce this either. Sorry about the noise!

[DMRobertson]

No worries, thanks for confirming!