Ubuntu 18.04 LTS apt update fails with NO_PUBKEY errors

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Apt update returns signature trust errors and blocks package operations.

Environment & Reproduction

Ubuntu 18.04 host with third-party repository configured.

Root Cause Analysis

Missing or rotated GPG repository key causes apt signature validation failure.

Quick Triage

Confirm failing repository URLs and identify missing key IDs from output.

Step-by-Step Diagnosis

Run apt update with verbose output and inspect trusted keyring state.

Solution – Primary Fix

Import correct signing key and migrate to signed-by keyring config.

Solution – Alternative Approaches

Disable stale repos temporarily or replace mirror with active endpoint.

Verification & Acceptance Criteria

Apt update completes cleanly and apt policy shows trusted repositories.

Rollback Plan

Remove newly added key file and restore previous source list backups.

Prevention & Hardening

Track repo key expirations and avoid deprecated apt-key workflow.

Related Errors & Cross-Refs

Compare with TLS repository failures and hash sum mismatch incidents.

Related tutorial: View the step-by-step tutorial for Ubuntu 18.04 LTS.

View all Ubuntu 18.04 LTS tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Ubuntu apt security guidance and repository maintainer documentation.