Unable to update Ubuntu on compute instance

[User01]

A new bare metal instance of "Intel® Max Series GPU (PVC) on 4th Gen Intel® Xeon® processors – 1550 series (8x)" was provisioned with machine image "ubuntu-22.04-pvc-1550-metal-cloudimg-amd64-v20240129." On the initial connection, an attempt to update the packages fails with the following:

$ sudo apt update
Hit:1 https://download.docker.com/linux/ubuntu jammy InRelease
Get:2 https://repositories.intel.com/gpu/ubuntu jammy InRelease [15.4 kB]
Ign:3 https://repo.anaconda.com/pkgs/misc/debrepo/conda stable InRelease
Err:2 https://repositories.intel.com/gpu/ubuntu jammy InRelease
The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 28DA432DAAC8BAEA
Hit:4 http://archive.ubuntu.com/ubuntu jammy InRelease
Hit:5 https://apt.repos.intel.com/oneapi all InRelease
Hit:6 http://archive.ubuntu.com/ubuntu jammy-updates InRelease
Hit:7 http://archive.ubuntu.com/ubuntu jammy-backports InRelease
Hit:8 http://security.ubuntu.com/ubuntu jammy-security InRelease
Ign:3 https://repo.anaconda.com/pkgs/misc/debrepo/conda stable InRelease
Ign:3 https://repo.anaconda.com/pkgs/misc/debrepo/conda stable InRelease
Err:3 https://repo.anaconda.com/pkgs/misc/debrepo/conda stable InRelease
429 Too Many Requests [IP: 104.16.32.241 443]
Fetched 15.4 kB in 7s (2144 B/s)
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
290 packages can be upgraded. Run 'apt list --upgradable' to see them.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://repositories.intel.com/gpu/ubuntu jammy InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 28DA432DAAC8BAEA
W: Failed to fetch https://repo.anaconda.com/pkgs/misc/debrepo/conda/dists/stable/InRelease 429 Too Many Requests [IP: 104.16.32.241 443]
W: Failed to fetch https://repositories.intel.com/gpu/ubuntu/dists/jammy/InRelease The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 28DA432DAAC8BAEA
W: Some index files failed to download. They have been ignored, or old ones used instead.

Is there a way to setup the Intel GPU repository so that the signatures can be verified and updates can be retrieved?

[Wan_Intel]

Hi User01,

Thanks for reaching out to us.

To update and upgrade your OS, please enter the following command:

sudo apt-get update -y
sudo apt-get upgrade -y

On the other hand, please provide the following information to us:

• Severity: Low: General guidance/Medium: System impaired/High: System down/Critical: Business-critical system down
• Important data stored: Yes/No
• IDC Support team can access the instance?: Yes/No

Regards,

Wan

[User01]

This is not an answer to the question that was asked.

[Wan_Intel · Accepted solution]

Hi User01

Thanks for the information.

Could you please try the installation method from the following page and see if the issue can be resolved?

https://dgpu-docs.intel.com/driver/installation.html#ubuntu

Please get back to us if the issue persists.

Regards,

Wan

[User01]

@Wan_Intel - the documentation you referenced had exactly what I needed. Thanks! Per the documentation I added the key materials:

$ wget -qO - https://repositories.intel.com/gpu/intel-graphics.key |
sudo gpg --yes --dearmor --output /usr/share/keyrings/intel-graphics.gpg

With that change, the signatures for that Intel repository are now being used:

$ sudo apt update
Hit:1 https://download.docker.com/linux/ubuntu jammy InRelease
Get:2 https://repositories.intel.com/gpu/ubuntu jammy InRelease [15.4 kB]
Ign:3 https://repo.anaconda.com/pkgs/misc/debrepo/conda stable InRelease
Get:4 https://repositories.intel.com/gpu/ubuntu jammy/unified amd64 Packages [182 kB]
Hit:5 http://archive.ubuntu.com/ubuntu jammy InRelease
Hit:6 https://apt.repos.intel.com/oneapi all InRelease
Hit:7 http://archive.ubuntu.com/ubuntu jammy-updates InRelease
Hit:8 http://archive.ubuntu.com/ubuntu jammy-backports InRelease
Hit:9 http://security.ubuntu.com/ubuntu jammy-security InRelease
Ign:3 https://repo.anaconda.com/pkgs/misc/debrepo/conda stable InRelease
Ign:3 https://repo.anaconda.com/pkgs/misc/debrepo/conda stable InRelease
Err:3 https://repo.anaconda.com/pkgs/misc/debrepo/conda stable InRelease
429 Too Many Requests [IP: 104.16.191.158 443]
Fetched 197 kB in 7s (27.4 kB/s)
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
104 packages can be upgraded. Run 'apt list --upgradable' to see them.
W: Failed to fetch https://repo.anaconda.com/pkgs/misc/debrepo/conda/dists/stable/InRelease 429 Too Many Requests [IP: 104.16.191.158 443]
W: Some index files failed to download. They have been ignored, or old ones used instead.

Candidate enhancement for Intel - GPG Keys

It may be useful to inform the "Intel Tiber AI Cloud" team to include the Intel repository keys in the images used to build new Instances. That would eliminate this step for end users.

Candidate enhancement for Intel - Anaconda Mirror

The complaint "429 Too Many Request" from the Anaconda repositories makes sense if all the "Intel Tiber AI Cloud" network traffic is being routed out of a single network point and many Instances are doing updates with some frequency. It might make sense for Intel to provide a mirror of the Anaconda repositories within the Intel Tiber AI Cloud environment and encourage users to make use of that mirror instead.