Upgrade issue on linux like os (kali, proxmox)

Elastic Stack Elastic Agent
1

i am currently updating my agents to 8.13.1 via fleet.
The upgrade is failing on linux machines while my windows were updated like expected.
The error is

elastic-agent upgrade 8.13.1
Error: Failed trigger upgrade of daemon: failed verification of agent binary: 2 errors occurred:
        * could not get .asc file: fetching asc file from '/opt/Elastic/Agent/data/elastic-agent-de80b0/downloads/elastic-agent-8.13.1-linux-x86_64.tar.gz.asc': open /opt/Elastic/Agent/data/elastic-agent-de80b0/downloads/elastic-agent-8.13.1-linux-x86_64.tar.gz.asc: no such file or directory
        * fetching asc file from https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.13.1-linux-x86_64.tar.gz.asc: failed loading public key: Get "https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.13.1-linux-x86_64.tar.gz.asc": context deadline exceeded

I can download both files directly with wget so guess this is not a download problem.

In the debug log i can see hints about PGP / certificate issues?

[elastic_agent][warn] Skipped remote PGP located at "https://artifacts.elastic.co/GPG-KEY-elastic-agent" because it's unavailable: 2 errors occurred:
	* Get "https://artifacts.elastic.co/GPG-KEY-elastic-agent": context deadline exceeded
	* Remote PGP download failed

15:55:46.555
elastic_agent
[elastic_agent][info] Using 1 PGP keys
15:55:46.555
elastic_agent
[elastic_agent][warn] Verifier failed!

i also tested wget https://artifacts.elastic.co/GPG-KEY-elastic-agent
worked without a problem also if i launch by hand...

any help with this issue?

2

I wonder why this triggered no reactions.
Just updated to agent 8.14.0 or "wanted to update" my fleet server first.
Still the same issues:

14:34:09.506
elastic_agent
[elastic_agent][error] failed to get start time for scheduled upgrade action [id = 4bd7453e-3cc2-4513-9197-d1f13040e1c1]
14:34:09.579
elastic_agent
[elastic_agent][warn] Skipping addition to action-queue, issue gathering start time from action id 4bd7453e-3cc2-4513-9197-d1f13040e1c1: action has no start time
14:34:09.680
elastic_agent
[elastic_agent][info] starting upgrade to version 8.14.0 in background
14:34:09.762
elastic_agent
[elastic_agent][info] updated upgrade details
14:34:09.763
elastic_agent
[elastic_agent][info] Upgrading agent
14:34:09.797
elastic_agent
[elastic_agent][info] Cleaning up non-matching downloaded versions
14:34:09.798
elastic_agent
[elastic_agent][info] updated upgrade details
14:34:09.813
elastic_agent
[elastic_agent][info] Downloading upgrade artifact
14:34:09.844
elastic_agent
[elastic_agent][info] updated upgrade details
14:34:09.860
elastic_agent
[elastic_agent][info] download attempt 1
14:36:25.850
elastic_agent
[elastic_agent][info] updated upgrade details
14:42:25.850
elastic_agent
[elastic_agent][info] download progress from https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.14.0-linux-x86_64.tar.gz is 330.7MB/338.2MB (97.77% complete) @ 918.7kBps
14:42:25.876
elastic_agent
[elastic_agent][info] updated upgrade details
14:42:30.398
elastic_agent
[elastic_agent][info] download from https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.14.0-linux-x86_64.tar.gz completed in 6 minutes @ 929.2kBps
14:42:30.399
elastic_agent
[elastic_agent][info] updated upgrade details
14:42:30.813
elastic_agent
[elastic_agent][info] updated upgrade details
14:42:30.813
elastic_agent
[elastic_agent][info] download from https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.14.0-linux-x86_64.tar.gz.sha512 completed in Less than a second @ +InfYBps
14:42:30.813
elastic_agent
[elastic_agent][info] updated upgrade details
14:42:30.814
elastic_agent
[elastic_agent][info] updated upgrade details
14:42:30.814
elastic_agent
[elastic_agent][info] updated upgrade details
14:42:36.509
elastic_agent
[elastic_agent][info] Default PGP appended
14:43:06.547
elastic_agent
[elastic_agent][warn] Skipped remote PGP located at "https://artifacts.elastic.co/GPG-KEY-elastic-agent" because it's unavailable: 2 errors occurred:
	* Get "https://artifacts.elastic.co/GPG-KEY-elastic-agent": context deadline exceeded
	* Remote PGP download failed

14:43:06.739
elastic_agent
[elastic_agent][warn] Skipped remote PGP located at "https://localhost:8221/api/agents/upgrades/8.14.0/pgp-public-key" because it's unavailable: 2 errors occurred:
	* Get "https://localhost:8221/api/agents/upgrades/8.14.0/pgp-public-key": x509: certificate signed by unknown authority
	* Remote PGP download failed

14:43:06.739
elastic_agent
[elastic_agent][info] Using 1 PGP keys
14:43:06.760
elastic_agent
[elastic_agent][warn] Verifier failed!
14:43:41.523
elastic_agent
[elastic_agent][warn] Verifier failed!
14:43:41.543
elastic_agent
[elastic_agent][info] Cleaning up non-matching downloaded versions
14:43:41.916
elastic_agent
[elastic_agent][info] updated upgrade details
14:43:41.917
elastic_agent
[elastic_agent][error] upgrade to version 8.14.0 failed: failed verification of agent binary: 2 errors occurred:
	* could not get .asc file: fetching asc file from '/opt/Elastic/Agent/data/elastic-agent-8.13.4-a2e31a/downloads/elastic-agent-8.14.0-linux-x86_64.tar.gz.asc': open /opt/Elastic/Agent/data/elastic-agent-8.13.4-a2e31a/downloads/elastic-agent-8.14.0-linux-x86_64.tar.gz.asc: no such file or directory
	* fetching asc file from https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.14.0-linux-x86_64.tar.gz.asc: failed loading public key: Get "https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.14.0-linux-x86_64.tar.gz.asc": context deadline exceeded
3

so here's the latest info.

I found a way to avoid this problem by login in to the linux vm, starting the upgrade with fleet and using wget to download the missing ".asc" file.
This is working fine and now the update is running.
Sill no idea what causes the problem but maybe others with the same issue might think the solution helpfull.