# Logstash 2.4 container doesnt validate package repository

**URL:** <https://discuss.elastic.co/t/logstash-2-4-container-doesnt-validate-package-repository/119182>\
**Category:** Logstash\
**Created:** [February 9, 2018, 7:26am UTC](https://discuss.elastic.co/t/logstash-2-4-container-doesnt-validate-package-repository/119182 "2018-02-09T07:26:40Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![roflmao](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/roflmao/32/21606_2.png) [@roflmao](https://discuss.elastic.co/u/roflmao)\
**Post date:** [February 9, 2018, 7:26am UTC](https://discuss.elastic.co/t/logstash-2-4-container-doesnt-validate-package-repository/119182/1 "2018-02-09T07:26:40Z")

</div>

```auto
$ docker inspect -f '{{ .Config.Image}}' 48e
logstash:2.4

```

Inside container:

```auto

# apt-get update
Ign:1 http://deb.debian.org/debian stretch InRelease
Hit:2 http://security.debian.org stretch/updates InRelease
Hit:3 http://deb.debian.org/debian stretch-updates InRelease
Hit:4 http://deb.debian.org/debian stretch Release                       
Ign:5 http://packages.elastic.co/logstash/2.4/debian stable InRelease    
Get:6 http://packages.elastic.co/logstash/2.4/debian stable Release [3301 B]
Get:7 http://packages.elastic.co/logstash/2.4/debian stable Release.gpg [490 B]
Ign:7 http://packages.elastic.co/logstash/2.4/debian stable Release.gpg
Hit:9 http://packages.elastic.co/logstash/2.4/debian stable/main amd64 Packages
Err:9 http://packages.elastic.co/logstash/2.4/debian stable/main amd64 Packages
  Hash Sum mismatch
  Hashes of expected file:
   - Filesize:1384 [weak]
   - SHA512:044de26e7200eb790e9d7b5e3c3ff426112f039190fe16e52f5347908350093adbb57718257fbbe8c9be67d30ff420bf8498527357d7b5f06637d852d9111676
   - SHA256:858ecafdf706305d1820e8ea40d859f6f3ad24df5cc4eec09ef7bee92eaa554a
   - SHA1:bd40197fa6c07cd65918ef9c7a11285c220ed011 [weak]
   - MD5Sum:bd69220fab4e44d4f9101af2c6ca446f [weak]
  Hashes of received file:
   - SHA512:89eb2398ee6e0f0dd61d9d65cf71df4b8d175702edc95013434c462aff0d737eeeba6ebd9a5641349c4d41fb84e58cee9681e1dacbea001ee8adb54db65e8371
   - SHA256:22d3ddbf55044bd6898e703ee48d833e130b3814f648bf0a558b1c4ddb4ebbe1
   - SHA1:31810408cfe0b6b62ba1ce34803cc2f5df366c0d [weak]
   - MD5Sum:dc9472a2f996275a70a36804c6f7578e [weak]
   - Filesize:989 [weak]
  Release file created at: Tue, 15 Nov 2016 15:58:10 +0000
Fetched 3791 B in 0s (3846 B/s)
Reading package lists... Done
W: GPG error: http://packages.elastic.co/logstash/2.4/debian stable Release: The following signatures were invalid: 46095ACC8548582C1A2699A9D27D666CD88E42B4
W: The repository 'http://packages.elastic.co/logstash/2.4/debian stable Release' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Failed to fetch store:/var/lib/apt/lists/partial/packages.elastic.co_logstash_2.4_debian_dists_stable_main_binary-amd64_Packages.gz Hash Sum mismatch
   Hashes of expected file:
    - Filesize:1384 [weak]
    - SHA512:044de26e7200eb790e9d7b5e3c3ff426112f039190fe16e52f5347908350093adbb57718257fbbe8c9be67d30ff420bf8498527357d7b5f06637d852d9111676
    - SHA256:858ecafdf706305d1820e8ea40d859f6f3ad24df5cc4eec09ef7bee92eaa554a
    - SHA1:bd40197fa6c07cd65918ef9c7a11285c220ed011 [weak]
    - MD5Sum:bd69220fab4e44d4f9101af2c6ca446f [weak]
   Hashes of received file:
    - SHA512:89eb2398ee6e0f0dd61d9d65cf71df4b8d175702edc95013434c462aff0d737eeeba6ebd9a5641349c4d41fb84e58cee9681e1dacbea001ee8adb54db65e8371
    - SHA256:22d3ddbf55044bd6898e703ee48d833e130b3814f648bf0a558b1c4ddb4ebbe1
    - SHA1:31810408cfe0b6b62ba1ce34803cc2f5df366c0d [weak]
    - MD5Sum:dc9472a2f996275a70a36804c6f7578e [weak]
    - Filesize:989 [weak]
   Release file created at: Tue, 15 Nov 2016 15:58:10 +0000
E: Some index files failed to download. They have been ignored, or old ones used instead.

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 9, 2018, 7:26am UTC](https://discuss.elastic.co/t/logstash-2-4-container-doesnt-validate-package-repository/119182/2 "2018-03-09T07:26:47Z")

</div>

Closed on March 9, 2018, 7:26am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.