RPI Buster configuration error

Linux
1

Hello

I am getting the following error at trying to install tailscale soft on my RPI. Maybe someone already faced this problem.

pi@raspberrypi:~ $ curl -fsSL https://tailscale.com/install.sh | sh 
Installing Tailscale for raspbian buster, using method apt
+ sudo mkdir -p --mode=0755 /usr/share/keyrings
+ curl -fsSL https://pkgs.tailscale.com/stable/raspbian/buster.asc
+ sudo apt-key add -
OK
+ curl -fsSL https://pkgs.tailscale.com/stable/raspbian/buster.list+ 
sudo tee /etc/apt/sources.list.d/tailscale.list
# Tailscale packages for raspbian buster
deb https://pkgs.tailscale.com/stable/raspbian buster main
+ sudo apt-get update
Get:1 http://archive.raspberrypi.org/debian buster InRelease [32.6 kB]                                                                                                                   
Get:2 https://pkgs.tailscale.com/stable/raspbian buster InRelease                                                                                                                        
Get:3 http://raspbian.raspberrypi.org/raspbian buster InRelease [15.0 kB]                                                                                                                
Hit:4 https://download.docker.com/linux/raspbian buster InRelease                                                                                                                        
Err:5 https://packagecloud.io/headmelted/codebuilds/debian stretch InRelease                    
  401  Unauthorized [IP: 2600:1f1c:2e5:6900:c0c5:f0c7:eebe:bbe5 443]
Reading package lists... Done                                             
E: Failed to fetch https://packagecloud.io/headmelted/codebuilds/debian/dists/stretch/InRelease  401  Unauthorized [IP: 2600:1f1c:2e5:6900:c0c5:f0c7:eebe:bbe5 443]
E: The repository 'https://packagecloud.io/headmelted/codebuilds/debian stretch InRelease' is no longer signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Repository 'http://raspbian.raspberrypi.org/raspbian buster InRelease' changed its 'Suite' value from 'stable' to 'oldstable'
N: This must be accepted explicitly before updates for this repository can be applied. See apt-secure(8) manpage for details.
E: Repository 'http://archive.raspberrypi.org/debian buster InRelease' changed its 'Suite' value from 'testing' to 'oldstable'
N: This must be accepted explicitly before updates for this repository can be applied. See apt-secure(8) manpage for details.
2

I don’t know how to fix it, but you could give the manual installation a try and see if it works that way: https://tailscale.com/download/linux/rpi

3

Unfortunately fail on the first step

 
curl -fsSL https://pkgs.tailscale.com/stable/raspbian/buster.gpg | sudo apt-key add - 
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html
 
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
gpg: no valid OpenPGP data found.
4

Hmm, I executed that command for the RPI buster on an Ubuntu VM just now without any issues.
From the error message you posted it seems the RPI might be missing some CA certificates and thus isn’t able to verify the certificates of the Tailscale package site.

If you can use apt-get, then try to install current CA certificates with this command:

sudo apt-get install ca-certificates

(If it claims that it’s up-to-date, then remove it first via sudo apt-get purge ca-certificates and then install it again.)

Afterwards try to install Tailscale again (with the automatic method).

Edit: Just a stray thought, but also make sure the system time is set correctly, otherwise certificates might be seen as invalid (i.e. outside of their validity date).

5

@bluefish Thank you very much for your reply
I will try to today and share the results with you!

Have a good day!

6

Hello @bluefish. Unfortunately it didn’t help, still the same error

7

Hmm, that is odd indeed.
Could you try the following command and provide the output of it?
curl --cert-status https://pkgs.tailscale.com/stable/raspbian/buster.gpg

If might give more insight into whether or not there is something wrong with the certificates.

8

Hello @bluefish

Thank you very much for your support. I just updated the image on my RPI and now everything is working well!

thanks!

9

Gotcha, good to know. Glad you got it working!