Skip to content

AutoPenBench: kali_master Docker build fails on expired GPG keyring #115

@peaktwilight

Description

@peaktwilight

The kali_master image from AutoPenBench (lucagioacchini/kali-linux-headless:latest) ships with kali-archive-keyring 2024.1 which doesn't have key ED65462EC8D5E4C5. This causes apt-get update to fail even with --allow-insecure-repositories.

Approaches tried:

  1. Replace pinned .deb download with apt-get install kali-archive-keyring — fails because apt can't verify the repo
  2. --allow-insecure-repositories + --allow-unauthenticated — installs 2024.1 (same version, still missing key)

Next steps to try:

  • Fetch the key directly: apt-key adv --keyserver keyserver.ubuntu.com --recv-keys ED65462EC8D5E4C5
  • Or download the 2025.x keyring .deb from a known URL and install with dpkg
  • Or use a newer base image

This blocks all 32 AutoPenBench tasks since every task SSHes into kali_master.

none

Metadata

Metadata

Assignees

No one assigned

    Labels

    benchmarkScore improvement and benchmark work

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions