Docker build fails due to expired ROS 2 GPG key

[moavia90]

When trying to build the Docker image , the build fails during apt-get update because the ROS 2 repository key is expired.

[+] Building 18.5s (8/12)                                                            docker:default
 => [internal] load build definition from Dockerfile                                           0.0s
 => => transferring dockerfile: 1.50kB                                                         0.0s
 => WARN: UndefinedVar: Usage of undefined variable '$CMAKE_PREFIX_PATH' (line 32)             0.0s
 => WARN: UndefinedVar: Usage of undefined variable '$DISPLAY' (line 33)                       0.0s
 => [internal] load metadata for docker.io/library/ros:jazzy-ros-base                          0.0s
 => [internal] load .dockerignore                                                              0.0s
 => => transferring context: 2B                                                                0.0s
 => [1/8] FROM docker.io/library/ros:jazzy-ros-base                                            0.0s
 => [internal] load build context                                                              0.1s
 => => transferring context: 549.78kB                                                          0.1s
 => CACHED [2/8] RUN apt-get update && apt-get install -y --no-install-recommends     curl gn  0.0s
 => [3/8] COPY dependencies.txt /tmp/dependencies.txt                                          0.0s
 => ERROR [4/8] RUN apt-get update &&     envsubst < /tmp/dependencies.txt | xargs apt-get i  18.3s
------                                                                                              
 > [4/8] RUN apt-get update &&     envsubst < /tmp/dependencies.txt | xargs apt-get install -y --no-install-recommends &&     rm -rf /var/lib/apt/lists/*:                                              
0.559 Get:1 http://security.ubuntu.com/ubuntu noble-security InRelease [126 kB]                     
1.271 Get:2 http://security.ubuntu.com/ubuntu noble-security/multiverse amd64 Packages [23.0 kB]    
1.449 Get:3 http://security.ubuntu.com/ubuntu noble-security/universe amd64 Packages [1134 kB]      
1.905 Get:4 http://archive.ubuntu.com/ubuntu noble InRelease [256 kB]
2.043 Get:5 http://security.ubuntu.com/ubuntu noble-security/main amd64 Packages [1328 kB]
2.741 Get:6 http://security.ubuntu.com/ubuntu noble-security/restricted amd64 Packages [1982 kB]
4.160 Get:7 http://packages.ros.org/ros2/ubuntu noble InRelease [4676 B]
4.258 Get:8 http://archive.ubuntu.com/ubuntu noble-updates InRelease [126 kB]
4.268 Err:7 http://packages.ros.org/ros2/ubuntu noble InRelease
4.268   The following signatures were invalid: EXPKEYSIG F42ED6FBAB17C654 Open Robotics <info@osrfoundation.org>
5.003 Get:9 http://archive.ubuntu.com/ubuntu noble-backports InRelease [126 kB]
5.591 Get:10 http://archive.ubuntu.com/ubuntu noble/multiverse amd64 Packages [331 kB]
6.373 Get:11 http://archive.ubuntu.com/ubuntu noble/restricted amd64 Packages [117 kB]
6.555 Get:12 http://archive.ubuntu.com/ubuntu noble/universe amd64 Packages [19.3 MB]
14.90 Get:13 http://archive.ubuntu.com/ubuntu noble/main amd64 Packages [1808 kB]
15.56 Get:14 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 Packages [1666 kB]
16.19 Get:15 http://archive.ubuntu.com/ubuntu noble-updates/restricted amd64 Packages [2092 kB]
17.22 Get:16 http://archive.ubuntu.com/ubuntu noble-updates/multiverse amd64 Packages [45.2 kB]
17.22 Get:17 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 Packages [1454 kB]
17.55 Get:18 http://archive.ubuntu.com/ubuntu noble-backports/main amd64 Packages [48.8 kB]
17.57 Get:19 http://archive.ubuntu.com/ubuntu noble-backports/universe amd64 Packages [33.9 kB]
17.62 Reading package lists...
18.22 W: GPG error: http://packages.ros.org/ros2/ubuntu noble InRelease: The following signatures were invalid: EXPKEYSIG F42ED6FBAB17C654 Open Robotics <info@osrfoundation.org>
18.22 E: The repository 'http://packages.ros.org/ros2/ubuntu noble InRelease' is not signed.
------

 2 warnings found (use docker --debug to expand):
 - UndefinedVar: Usage of undefined variable '$CMAKE_PREFIX_PATH' (line 32)
 - UndefinedVar: Usage of undefined variable '$DISPLAY' (line 33)
Dockerfile:24
--------------------
  23 |     
  24 | >>> RUN apt-get update && \
  25 | >>>     envsubst < /tmp/dependencies.txt | xargs apt-get install -y --no-install-recommends && \
  26 | >>>     rm -rf /var/lib/apt/lists/*
  27 |     
--------------------
ERROR: failed to solve: process "/bin/sh -c apt-get update &&     envsubst < /tmp/dependencies.txt | xargs apt-get install -y --no-install-recommends &&     rm -rf /var/lib/apt/lists/*" did not complete successfully: exit code: 100

[manumerous]

Is this using your script? Or how do you build the docker image to get this error?

[moavia90]

Is this using your script? Or how do you build the docker image to get this error?

No @manumerous I am facing error in both cases with the bash script and without the script by running the docker build command from terminal i.e. docker build -f Dockerfile ..

[moavia90]

I tried a workaround. Instead of relying on prebuilt ros2 jazzy image I used ubuntu 24 image and installed ros2 jazzy in it.
i.e. using

FROM ubuntu:24.04 AS base

instead of

FROM ros:jazzy-ros-base AS base

[moavia90]

I accidentally removed all docker images using docker system prune -a . My intended action was to remove the dangling images i.e.docker image prune -a. So I build the docker image and this time I was not facing the error
E: The repository 'http://packages.ros.org/ros2/ubuntu noble InRelease' is not signed.
My old Docker image layers had cached the broken apt-get update state. On rebuild, Docker pulled fresh metadata and the error disappeared. A blessing in disguise :)