How do I update Debian Jessie repository sources?

[Sandshark]

OK, I've seen other posts about issues with installing apps.  What I've seen hasn't helped me.  Here is what I see when I do an apt update:

root@Pro2A:~# apt update
Hit:1 http://security.debian.org jessie/updates InRelease
Ign:2 http://mirrors.edge.kernel.org/debian jessie InRelease
Hit:3 http://mirrors.edge.kernel.org/debian jessie Release
Hit:4 https://download.docker.com/linux/debian jessie InRelease
Err:5 http://mirrors.kernel.org/debian jessie Release.gpg
  The following signatures were invalid: KEYEXPIRED 1668891673
Hit:6 https://apt.readynas.com/packages/readynasos 6.10.8 InRelease
Reading package lists... Done
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://mirrors.edge.kernel.org/debian jessie Release: The following signatures were invalid: KEYEXPIRED 1668891673

etc/apt/sources.list contains this:

deb https://apt.readynas.com/packages/readynasos 6.10.8 updates apps main 

deb http://mirrors.kernel.org/debian jessie main
deb http://security.debian.org/ jessie/updates main

6.10.8 is replaced with 6.9.6 on units running the long-term stable release.  I also get some stuff about ZeroTier on units with it installed, but it's not on this NAS and isn't common to all.

Based on something I read elsewhere in the forum with regard to Docker, I tried  apt-key adv --keyserver apt.readynas.com --recv-keys, and that seemed to do something:

Executing: /tmp/tmp.OCrjYmplqk/gpg.1.sh --keyserver
apt.readynas.com

But in the end, I get the same error when doing an apt update.

[StephenB]

Just wondering if it is possible to make a local copy of the Jessie repository, and point to that instead???

[HuwSy]

Hi

Because Jessie is oldoldstable now Debian won’t renew the expired signing keys. It is possible to ignore signing keys but that’s a different risk that I wouldn’t attempt personally. The other option is to try Jessie updates here

deb http://security.debian.org/debian/ jessie/updates main non-free contrib

Which will only have some of the packages needed where deemed required for security or use stretch here

deb http://deb.debian.org/debian/ stretch main non-free contrib

To get the needed packages but then remove again to make sure you don’t upgrade via stretch which will likely brick the device and need a factory reset.

[Sandshark]

Another user has written a post on creating a local repository: Here-is-how-I-created-a-local-repository-easily.  The image files he talks about are available here:  https://cdimage.debian.org/cdimage/archive/8.11.1/ .  Make sure you get the image for your NAS architecture (amd64 or armel).  I've not done it yet, myself.

[HuwSy]

Has anyone managed anything newer than Jessie on the x86 hardware? Or another os entirely as long as it still gets ssh, docker and raid 5?

[Sandshark]

Google will find you some who have, though the articles are a bit old.  Doing it on a unit with a video port is certainly much easier than one that does not.  The console output (5 or 3.3V level RS-232 protocol) can be used, but takes extra effort and hardware.

[tigerten]

I would still prefer readyNAS os over bothers. Old but fine.