New image will not update to latest version (21.2.1)

I asked MyCroft, Mark I, to start the update a week ago and she never updates. SSHing in and running “sudo apt upgrade” gives an error (below) finding the file for 21.2.0 (not the latest version). Going to the path, the file does not exist. Is there a known issue with the Mark I updating from a new SD image?

The following packages will be upgraded:
  mycroft-mark-1
1 upgraded, 0 newly installed, 0 to remove and 2 not upgraded.
Need to get 2,204 B of archives.
After this operation, 0 B of additional disk space will be used.
Do you want to continue? [Y/n] Y
WARNING: The following packages cannot be authenticated!
  mycroft-mark-1
Install these packages without verification? [y/N] y
Err http://repo.mycroft.ai/repos/apt/debian/ debian/main mycroft-mark-1 armhf 21.2.0
  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
E: Failed to fetch http://repo.mycroft.ai/repos/apt/debian/pool/main/m/mycroft-mark-1/mycroft-mark-1_21.2.0_armhf.deb  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none

Hmm - this might be related to the Let’s Encrypt root cert expiring very recently.

Can you try running update-ca-certificates first?

Still the same message. Running the cert update show 0 for updated, added and removed.

Try to update ca-certificates first.

$ sudo apt update
$ sudo apt install ca-certificates

Will run those tonight when I get home.

NOTE - the file it is trying to fetch is still going to fail even if the certificate issue is resolved. It is fetching mycroft-mark-1_21.2.0_armhf.deb.

If you go to that link being fetched, http://repo.mycroft.ai/repos/apt/debian/pool/main/m/mycroft-mark-1, the file is mycroft-mark-1_21.2.1_armhf.deb. 21.2.1 verses 21.2.0 that the fetch is trying to pull.

I suppose it’s due to Let’s Encrypt root certificate expiration.

1 Like

Running the cert update did not change anything. Still getting the same error with certs and file name/path being incorrect…

sudo apt install ca-certificates
Reading package lists... Done
Building dependency tree
Reading state information... Done
ca-certificates is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 3 not upgraded.


Err http://repo.mycroft.ai/repos/apt/debian/ debian/main mycroft-mark-1 armhf 21.2.0
  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
E: Failed to fetch http://repo.mycroft.ai/repos/apt/debian/pool/main/m/mycroft-mark-1/mycroft-mark-1_21.2.0_armhf.deb  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none

E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

I hope it would help.

Thanks for the link and the information. I will give that a try tonight and post an update.

NOTE (to devs) - I am only using the command line due to the system not updating when I have it do a version check and say ‘yes’ to it asking “Do you want me to update to the latest version?” prompt. May be something to look at for the voice/automatic updating as well.

Good news, this the above link does resolve the update issue. Bad news (another issue), the update does not resolve the issue with the weather skill for “will it rain today”.

Steps for certificate/update issue…

To manually remove the certificate, append a “!” in front of mozilla/DST_Root_CA_X3.crt, followed by running the update-ca-certificates command:

sudo vi /etc/ca-certificates.conf
sudo update-ca-certificates

This should show one certiicate removed and you can run the update.

sudo apt upgrade

3 Likes