OpenProject Script install fails #2438

Open
opened 2026-02-05 04:51:59 +03:00 by OVERLORD · 4 comments
Owner

Originally created by @MartinEngelbrecht on GitHub (Feb 3, 2026).

Have you read and understood the above guidelines?

Yes

🔎 Did you run the script with verbose mode enabled?

Yes, verbose mode was enabled and the output is included below

📜 What is the name of the script you are using?

OpenProject

📂 What was the exact command used to execute the script?

bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/openproject.sh)"

⚙️ What settings are you using?

  • Default Settings
  • Advanced Settings

🖥️ Which Linux distribution are you using?

No response

📈 Which Proxmox version are you on?

9.1.4

📝 Provide a clear and concise description of the issue.

  ✔️   Set up PostgreSQL Database
  ✖️   in line 28: exit code 100 (APT: Package manager error (broken packages / dependency problems))
 → apt update
--- Last 10 lines of silent log ---
Hit:1 http://deb.debian.org/debian trixie InRelease
Hit:2 http://security.debian.org trixie-security InRelease
Hit:3 http://deb.debian.org/debian trixie-updates InRelease
Hit:4 https://apt.postgresql.org/pub/repos/apt trixie-pgdg InRelease
Get:5 https://dl.packager.io/srv/deb/opf/openproject/stable/15/debian 12 InRelease [1,849 B]
Err:5 https://dl.packager.io/srv/deb/opf/openproject/stable/15/debian 12 InRelease
  Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 6257DF9972462F57A20FFB2AB6D583CCBD33EEB8 is not bound:            No binding signature at time 2026-02-03T10:32:22Z   because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance   because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
Reading package lists...
Warning: OpenPGP signature verification failed: https://dl.packager.io/srv/deb/opf/openproject/stable/15/debian 12 InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 6257DF9972462F57A20FFB2AB6D583CCBD33EEB8 is not bound:            No binding signature at time 2026-02-03T10:32:22Z   because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance   because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
Error: The repository 'https://dl.packager.io/srv/deb/opf/openproject/stable/15/debian 12 InRelease' is not signed.
-----------------------------------
 📋 View full log (454 lines): /root/.install-9443ad84.log
  ✖️   Installation failed in container 202 (exit code: 100)

✔ Installation log: /tmp/install-lxc-202-9443ad84.log

Remove broken container 202? (Y/n) [auto-remove in 60s]: 
No response - auto-removing container
   Removing container 202
  ✔️  Container 202 removed

🔄 Steps to reproduce the issue.

Run Bash script
Only thing I changed was the LXC Container ID to 202. Rest is default options.

Paste the full error output (if available).

✔️   Set up PostgreSQL Database
  ✖️   in line 28: exit code 100 (APT: Package manager error (broken packages / dependency problems))
 → apt update
--- Last 10 lines of silent log ---
Hit:1 http://deb.debian.org/debian trixie InRelease
Hit:2 http://security.debian.org trixie-security InRelease
Hit:3 http://deb.debian.org/debian trixie-updates InRelease
Hit:4 https://apt.postgresql.org/pub/repos/apt trixie-pgdg InRelease
Get:5 https://dl.packager.io/srv/deb/opf/openproject/stable/15/debian 12 InRelease [1,849 B]
Err:5 https://dl.packager.io/srv/deb/opf/openproject/stable/15/debian 12 InRelease
  Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 6257DF9972462F57A20FFB2AB6D583CCBD33EEB8 is not bound:            No binding signature at time 2026-02-03T10:32:22Z   because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance   because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
Reading package lists...
Warning: OpenPGP signature verification failed: https://dl.packager.io/srv/deb/opf/openproject/stable/15/debian 12 InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 6257DF9972462F57A20FFB2AB6D583CCBD33EEB8 is not bound:            No binding signature at time 2026-02-03T10:32:22Z   because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance   because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
Error: The repository 'https://dl.packager.io/srv/deb/opf/openproject/stable/15/debian 12 InRelease' is not signed.
-----------------------------------
 📋 View full log (454 lines): /root/.install-9443ad84.log
  ✖️   Installation failed in container 202 (exit code: 100)

✔ Installation log: /tmp/install-lxc-202-9443ad84.log

Remove broken container 202? (Y/n) [auto-remove in 60s]: 
No response - auto-removing container
   Removing container 202
  ✔️  Container 202 removed

🖼️ Additional context (optional).

No response

Originally created by @MartinEngelbrecht on GitHub (Feb 3, 2026). ### ✅ Have you read and understood the above guidelines? Yes ### 🔎 Did you run the script with verbose mode enabled? Yes, verbose mode was enabled and the output is included below ### 📜 What is the name of the script you are using? OpenProject ### 📂 What was the exact command used to execute the script? bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/openproject.sh)" ### ⚙️ What settings are you using? - [ ] Default Settings - [x] Advanced Settings ### 🖥️ Which Linux distribution are you using? _No response_ ### 📈 Which Proxmox version are you on? 9.1.4 ### 📝 Provide a clear and concise description of the issue. ``` ✔️ Set up PostgreSQL Database ✖️ in line 28: exit code 100 (APT: Package manager error (broken packages / dependency problems)) → apt update --- Last 10 lines of silent log --- Hit:1 http://deb.debian.org/debian trixie InRelease Hit:2 http://security.debian.org trixie-security InRelease Hit:3 http://deb.debian.org/debian trixie-updates InRelease Hit:4 https://apt.postgresql.org/pub/repos/apt trixie-pgdg InRelease Get:5 https://dl.packager.io/srv/deb/opf/openproject/stable/15/debian 12 InRelease [1,849 B] Err:5 https://dl.packager.io/srv/deb/opf/openproject/stable/15/debian 12 InRelease Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 6257DF9972462F57A20FFB2AB6D583CCBD33EEB8 is not bound: No binding signature at time 2026-02-03T10:32:22Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z Reading package lists... Warning: OpenPGP signature verification failed: https://dl.packager.io/srv/deb/opf/openproject/stable/15/debian 12 InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 6257DF9972462F57A20FFB2AB6D583CCBD33EEB8 is not bound: No binding signature at time 2026-02-03T10:32:22Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z Error: The repository 'https://dl.packager.io/srv/deb/opf/openproject/stable/15/debian 12 InRelease' is not signed. ----------------------------------- 📋 View full log (454 lines): /root/.install-9443ad84.log ✖️ Installation failed in container 202 (exit code: 100) ✔ Installation log: /tmp/install-lxc-202-9443ad84.log Remove broken container 202? (Y/n) [auto-remove in 60s]: No response - auto-removing container Removing container 202 ✔️ Container 202 removed ``` ### 🔄 Steps to reproduce the issue. Run Bash script Only thing I changed was the LXC Container ID to 202. Rest is default options. ### ❌ Paste the full error output (if available). ``` ✔️ Set up PostgreSQL Database ✖️ in line 28: exit code 100 (APT: Package manager error (broken packages / dependency problems)) → apt update --- Last 10 lines of silent log --- Hit:1 http://deb.debian.org/debian trixie InRelease Hit:2 http://security.debian.org trixie-security InRelease Hit:3 http://deb.debian.org/debian trixie-updates InRelease Hit:4 https://apt.postgresql.org/pub/repos/apt trixie-pgdg InRelease Get:5 https://dl.packager.io/srv/deb/opf/openproject/stable/15/debian 12 InRelease [1,849 B] Err:5 https://dl.packager.io/srv/deb/opf/openproject/stable/15/debian 12 InRelease Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 6257DF9972462F57A20FFB2AB6D583CCBD33EEB8 is not bound: No binding signature at time 2026-02-03T10:32:22Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z Reading package lists... Warning: OpenPGP signature verification failed: https://dl.packager.io/srv/deb/opf/openproject/stable/15/debian 12 InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 6257DF9972462F57A20FFB2AB6D583CCBD33EEB8 is not bound: No binding signature at time 2026-02-03T10:32:22Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z Error: The repository 'https://dl.packager.io/srv/deb/opf/openproject/stable/15/debian 12 InRelease' is not signed. ----------------------------------- 📋 View full log (454 lines): /root/.install-9443ad84.log ✖️ Installation failed in container 202 (exit code: 100) ✔ Installation log: /tmp/install-lxc-202-9443ad84.log Remove broken container 202? (Y/n) [auto-remove in 60s]: No response - auto-removing container Removing container 202 ✔️ Container 202 removed ``` ### 🖼️ Additional context (optional). _No response_
OVERLORD added the bug label 2026-02-05 04:51:59 +03:00
Author
Owner

@MickLesk commented on GitHub (Feb 3, 2026):

Thats external, they dont have refreshed the SHA1 Key. Like NodeJS (until last week) or OpenResty

can you try with var_version=12 before?

@MickLesk commented on GitHub (Feb 3, 2026): Thats external, they dont have refreshed the SHA1 Key. Like NodeJS (until last week) or OpenResty can you try with var_version=12 before?
Author
Owner

@MartinEngelbrecht commented on GitHub (Feb 3, 2026):

You are going to have to excuse my next comment. Im not a developer, etc. So can you please guide me as to where I will find var_version to set it to 12?

@MartinEngelbrecht commented on GitHub (Feb 3, 2026): You are going to have to excuse my next comment. Im not a developer, etc. So can you please guide me as to where I will find var_version to set it to 12?
Author
Owner

@MickLesk commented on GitHub (Feb 3, 2026):

var_version=12 bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/openproject.sh)"
@MickLesk commented on GitHub (Feb 3, 2026): ```bash var_version=12 bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/openproject.sh)" ```
Author
Owner

@palandri commented on GitHub (Feb 4, 2026):

var_version=12 bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/openproject.sh)"

Not OP, but this worked, thank you 👍

@palandri commented on GitHub (Feb 4, 2026): > var_version=12 bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/openproject.sh)" Not OP, but this worked, thank you 👍
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/ProxmoxVE#2438