I have been having some persistant problems

User Support General
1

I would start with that none of these are unworkable I am writing this to help the devs improve qubes more than look for fixes but I didn’t think it was worthy of a bug report either. Any way hope this helps someone.

However I would like the command to get the mouse to be recognized. If I am using the wrong one.

  1. fails to boot at all, This varies from not even getting the graphics card running and displaying the drive decrypt. To failing to open the Hard drive. It’s not often but the janky fix is to cut power at the PSU for a few minutes. This works for the first one. The fix for the second is just to reboot.

  2. The sys-usb is not recognizing the mouse at all on some boots. This fixes with a reboot. Or, I have had a few times where I put the machine to sleep and then, on wake. It fails to pop up the window allowing me to connect the mouse. Poping a terminal and using the command sys-usb ls shows the mouse just fine. I probably just don’t know the command to to get it working. I have been trying qvm-usb attach dom0 BACKEND:DEVID. That simply did not work for me. It returns no error but fixes nothing.

  3. An, the final one is workstation and whonix-gate way have been failing to update this had happened once before for The workstation I think. It kinda self fixed after a week. I will post those reports under system specs.

Specs:
Mother board Is Asus Sabertooth 990FX R2.0
Processor is 9590 fx eight core
Ram 32gb crucial on 4/8 gb sticks

Updating whonix-gateway-17
Refreshing package info
Refreshing available packages.
Fail to refresh InRelease: tor+https://deb.whonix.org bookworm InRelease from gpgv:/var/lib/apt/lists/partial/deb.whonix.org_dists_bookworm_InRelease
Fail to refresh InRelease: tor+https://deb.kicksecure.com bookworm InRelease from gpgv:/var/lib/apt/lists/partial/deb.kicksecure.com_dists_bookworm_InRelease
Refreshed.
W:An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: tor+https://deb.whonix.org bookworm InRelease: The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com, W:An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: tor+https://deb.kicksecure.com bookworm InRelease: The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com, E:Failed to fetch tor+https://deb.kicksecure.com/dists/bookworm/InRelease The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com, E:Failed to fetch tor+https://deb.whonix.org/dists/bookworm/InRelease The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com, E:Some index files failed to download. They have been ignored, or old ones used instead.
Hit:1 tor+https://deb.debian.org/debian bookworm InRelease
Hit:2 tor+https://fasttrack.debian.net/debian-fasttrack bookworm-fasttrack InRelease
Get:3 tor+https://deb.kicksecure.com bookworm InRelease [62.0 kB]
Get:4 tor+https://deb.whonix.org bookworm InRelease [61.2 kB]
Hit:5 Index of /r4.2/vm/ bookworm InRelease
Err:3 tor+https://deb.kicksecure.com bookworm InRelease
The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
Hit:6 tor+https://deb.debian.org/debian bookworm-updates InRelease
Err:4 tor+https://deb.whonix.org bookworm InRelease
The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
Hit:7 tor+https://fasttrack.debian.net/debian-fasttrack bookworm-backports-staging InRelease
Hit:8 tor+https://deb.debian.org/debian-security bookworm-security InRelease
Hit:9 tor+https://deb.debian.org/debian bookworm-backports InRelease
Reading package lists…
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: tor+https://deb.kicksecure.com bookworm InRelease: The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: tor+https://deb.whonix.org bookworm InRelease: The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
E: Failed to fetch tor+https://deb.kicksecure.com/dists/bookworm/InRelease The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
E: Failed to fetch tor+https://deb.whonix.org/dists/bookworm/InRelease The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
E: Some index files failed to download. They have been ignored, or old ones used instead.

Updating whonix-workstation-17
Refreshing package info
Refreshing available packages.
Fail to refresh InRelease: tor+https://deb.kicksecure.com bookworm InRelease from gpgv:/var/lib/apt/lists/partial/deb.kicksecure.com_dists_bookworm_InRelease
Fail to refresh InRelease: tor+https://deb.whonix.org bookworm InRelease from gpgv:/var/lib/apt/lists/partial/deb.whonix.org_dists_bookworm_InRelease
Refreshed.
W:An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: tor+https://deb.kicksecure.com bookworm InRelease: The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com, W:An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: tor+https://deb.whonix.org bookworm InRelease: The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com, E:Failed to fetch tor+https://deb.kicksecure.com/dists/bookworm/InRelease The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com, E:Failed to fetch tor+https://deb.whonix.org/dists/bookworm/InRelease The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com, E:Some index files failed to download. They have been ignored, or old ones used instead.
Hit:1 tor+https://deb.debian.org/debian bookworm InRelease
Hit:2 tor+https://fasttrack.debian.net/debian-fasttrack bookworm-fasttrack InRelease
Get:3 tor+https://deb.kicksecure.com bookworm InRelease [62.0 kB]
Hit:4 Index of /r4.2/vm/ bookworm InRelease
Get:5 tor+https://deb.whonix.org bookworm InRelease [61.2 kB]
Err:3 tor+https://deb.kicksecure.com bookworm InRelease
The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
Hit:6 tor+https://deb.debian.org/debian bookworm-updates InRelease
Hit:7 tor+https://fasttrack.debian.net/debian-fasttrack bookworm-backports-staging InRelease
Err:5 tor+https://deb.whonix.org bookworm InRelease
The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
Hit:8 tor+https://deb.debian.org/debian-security bookworm-security InRelease
Hit:9 tor+https://deb.debian.org/debian bookworm-backports InRelease
Reading package lists…
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: tor+https://deb.kicksecure.com bookworm InRelease: The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: tor+https://deb.whonix.org bookworm InRelease: The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
E: Failed to fetch tor+https://deb.kicksecure.com/dists/bookworm/InRelease The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
E: Failed to fetch tor+https://deb.whonix.org/dists/bookworm/InRelease The following signatures were invalid: EXPKEYSIG CB8D50BB77BB3C48 Patrick Schleizer adrelanos@kicksecure.com
E: Some index files failed to download. They have been ignored, or old ones used instead.

Any way hope this helps some-one makes qubes better. If I put it in the wrong place please let me know where I should send it thanks.

2

Just 3) will happen to more people in the coming days…!
Everyone have to do the following steps to fix this manually to get the Whonix updates working again:

  1. download the current certificate from these download mirrors (onion or com address from kicksecure):
  1. Verify it (fingerprint 916B 8D99 C38E AF5E 8ADC 7A2A 8D66 066A 2EEA CCDA)
  2. move/copy the downloaded cert to (both) whonix templates and
  3. place it in /usr/share/keyrings/ (it will ask you to override the old derivative.asc - accept with Yes)

After this is done, probably no restart of the templates are needed and the update(s) will work fine immediately.

2 Likes
3

Thanks for this, I was going to write more prominently in “user support” and tag with “EXPKEYSIG” to be more easily found by a simple search.
And now that you wrote this answer, maybe you should do the same. :smile:

4

Most of the viewers (with this problem) don’t understand this EXPKEYSIG message, thats why I wrote this dump answer, so also the unknowing user will solve the problem by himself…

5

wow why does it feel like that whole chat string and all three of you are AI. Certainly this will address it’s self as the key ring will update eventually I am always Leary of just downloading keys until there is a hyper official solve from devs.

An at that point they usually just push it automatically right so like I said that one usually self solves.

Any way, some one got a idea on that mouse issue?

6

Hmm… Mouse issue. All I just remember is: have you played around with the settings in Qubes Global Config (you can reach this via Qubes Manager > System > Global Config…):

Under USB Devices you can set, what it should do for USB Mouse/Keyboard. I think you currently have set it to “Enabled” - how does it feel, if you set it to “Always Ask”. Do you get a window (asking for allowing Mouse) every time you start sys-usb ? Or will Qubes refruse the window from time to time?

7

Exactly that, It asks most of the time but every once and a while it just dose not ask even though the USB mouse is there. It’s funny too I would think it would not ask if was coming from something like sleep mode. An then ask if I simply locked the screen right but it’s the other way around.

Actually it is set to Always as for mouse. An that is kind of the problem sometimes it wont.

8

Thanks for the quick reference. I ran into something with apt-update reporting an “unknown error” following this, which was resolved by setting 644 permissions on /usr/share/keyrings/derivative.asc (previously 640).