Need simple minded method to verify signature during dist upgrade

[sofasurfer]

I'm upgrading from 20.04 to 22.04. I performed this on a test install and it went without a hitch. Now I am doing it on my daily system and I get the following result at the "$ sudo apt update && sudo apt dist-upgrade" stage...

Inspiron-660:~$ sudo apt update && sudo apt dist-upgrade
[sudo] password for daryl:
Hit:1 http://security.ubuntu.com/ubuntu focal-security InRelease
Get:2 http://dl.google.com/linux/earth/deb stable InRelease [1,821 B]         
Hit:3 http://ca.archive.ubuntu.com/ubuntu focal InRelease                     
Hit:4 http://ca.archive.ubuntu.com/ubuntu focal-updates InRelease             
Hit:5 http://ca.archive.ubuntu.com/ubuntu focal-backports InRelease           
Hit:6 http://ppa.launchpad.net/yannubuntu/boot-repair/ubuntu focal InRelease
Get:7 http://download.opensuse.org/repositories/home:/stevenpusser/xUbuntu_20.04  InRelease [1,560 B]
Err:2 http://dl.google.com/linux/earth/deb stable InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY E88979FB9B30ACF2
Err:7 http://download.opensuse.org/repositories/home:/stevenpusser/xUbuntu_20.04  InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 0FAD31CA8719FCE4
Reading package lists... Done
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://dl.google.com/linux/earth/deb stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY E88979FB9B30ACF2
W: GPG error: http://download.opensuse.org/repositories/home:/stevenpusser/xUbuntu_20.04  InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 0FAD31CA8719FCE4
E: The repository 'http://download.opensuse.org/repositories/home:/stevenpusser/xUbuntu_20.04  InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

I'm stumped as to how to handle this. Please give me step by step method.

 

[osprey]

I'm upgrading from 20.04 to 22.04. I performed this on a test install and it went without a hitch. Now I am doing it on my daily system and I get the following result at the "$ sudo apt update && sudo apt dist-upgrade" stage...

Inspiron-660:~$ sudo apt update && sudo apt dist-upgrade
[sudo] password for daryl:
Hit:1 http://security.ubuntu.com/ubuntu focal-security InRelease
Get:2 http://dl.google.com/linux/earth/deb stable InRelease [1,821 B]    
Hit:3 http://ca.archive.ubuntu.com/ubuntu focal InRelease                
Hit:4 http://ca.archive.ubuntu.com/ubuntu focal-updates InRelease        
Hit:5 http://ca.archive.ubuntu.com/ubuntu focal-backports InRelease      
Hit:6 http://ppa.launchpad.net/yannubuntu/boot-repair/ubuntu focal InRelease
Get:7 http://download.opensuse.org/repositories/home:/stevenpusser/xUbuntu_20.04  InRelease [1,560 B]
Err:2 http://dl.google.com/linux/earth/deb stable InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY E88979FB9B30ACF2
Err:7 http://download.opensuse.org/repositories/home:/stevenpusser/xUbuntu_20.04  InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 0FAD31CA8719FCE4
Reading package lists... Done
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://dl.google.com/linux/earth/deb stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY E88979FB9B30ACF2
W: GPG error: http://download.opensuse.org/repositories/home:/stevenpusser/xUbuntu_20.04  InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 0FAD31CA8719FCE4
E: The repository 'http://download.opensuse.org/repositories/home:/stevenpusser/xUbuntu_20.04  InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

I'm stumped as to how to handle this. Please give me step by step method.

Perhaps have a look at the manpage for apt-secure, as suggested in the apt output. It describes the configuration for downloading from insecure repositories if you wish to take that route.

Alternatively, comment out the two repos that are causing the errors and run the update and upgrade again, i.e. comment out the google and opensuse entries.

It's worth noting that running the command in post #1:

sudo apt update && sudo apt dist-upgrade

is ill-advised. The more conventional means of upgrading to a full-upgrade, is to run a normal upgrade before a full-upgrade, for example:

apt update
apt upgrade
apt full-upgrade

One reason for doing it that way is so that the system is as upgraded as possible before the full-upgrade. That helps apt with using the latest versions. The full-upgrade makes decisions about packages to remove, which a simple upgrade does not do, so it's best for apt to be dealing with the latest versions when making those decisions. If not upgraded before full-upgrade, the system will not necessarily have the latest versions.

See here for some directions on these commands if unclear:

DebianUpgrade - Debian Wiki

wiki.debian.org

After a successful full-upgrade, then you could look into the google and opensuse signatures, but with the system largely current if that's what you want.