"CRON-APT completed" notification and suspicious URL

Hi guys,

Last night i received to OMV notifications with the subject "CRON-APT completed on **** [/etc/cron-apt/config]".

While I know my system is not fully updated I am concerned about what triggered this notifications (never got them before) and these particular lines in it:

Quote

W: GPG error: http://ppa.launchpad.net/kyle1117/ppa/ubuntu cosmic InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 3028C3C96AD57103

W: The repository 'http://ppa.launchpad.net/kyle1117/ppa/ubuntu cosmic InRelease' is not signed.

E: Failed to fetch https://minio.k-space.ee/armbi…ch/main/Contents-armhf.gz Hash Sum mismatch

Hashes of expected file:

- Filesize:17272546 [weak]

- SHA512:8bb1ce472a3600712a52a4deccb019fb0f810a020bc6ddcc58777930181053a8dd13294663fde6edf396a5313798f9bf9793af09526aa40f07e4989e49ece71a

- SHA256:6af5df0254f7f01ac91612f43f1326ebb1c063b4ed95daf3738b79681407ce08

- SHA1:7ef2759f5569d8bbfbc227bde9a3ed1c88700b2c [weak]

- MD5Sum:0d3fbb307f6a23026e337856d29df291 [weak]

Hashes of received file:

- SHA512:bf1cbbcb8d1efc1d59ae8ef668cbd4a3ccce4975ecf3850f6cf7c93a2a8a2d0eb83ec5f2be9840c563ebc009b8bfd408fb1db4cf424f03cb75cd2b9f1527ce50

- SHA256:06d6c65a420c6c7172779bc6b74497b7307229e7d169249e87bad27962de1cb2

- SHA1:c9ca196f087f29e9c605f437f163b5f7037d7d03 [weak]

- MD5Sum:d9ea610f00f03d5c6e4b221bcb1b8324 [weak]

- Filesize:15488321 [weak]

Last modification reported: Mon, 07 Dec 2020 09:30:43 +0000

Release file created at: Sat, 12 Dec 2020 14:41:34 +0000

Display More

Any insight you could share will be appreciated.

Thanks in advance.

HQ

Hi, thanks for the prompt feedback on this

Quote from gderf

You are using a GPG signed package repository but you do not have the public key for it on your keyring. Locate, download, and add the key to your keyring if it's a legitimate repository and you trust it.

Google search for instructions if you do not know how to do this.

Sorry, I should have elaborated a bit more. I understand the meaning of the missing GPG key what intrigues me is if there is normal that I get this notice out of the blue and that I have a ppa repo in my sources as I don recall adding it myself (although I might very well have forgotten about it)

Quote from macom

It is just a warning. The kyle1117 is not needed (unless you have a xu4 cloudshell). You can remove it

rm /etc/apt/sources.list.d/kyle1117-ubuntu-ppa-cosmic.list

and then

apt-get update

Display More

Not exactly an xu4-cloudshell but a cousing, an "HC2"

Do you know what packages does that PPA provide? What would you advice me?

I am not using the "cloudshell" case, just the basic stock device with an attached HDD.

Thanks.