gitlab-runner APT repository: non-binding GPG signature, Debian Trixie's sqv refuses fetching

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

• Label this issue

Dear all, I tried today to install a new Debian 13 Trixie runner machine with the key found at https://packages.gitlab.com/gpg.key as per instructions provided at https://docs.gitlab.com/runner/install/linux-repository/.

For future reference, here is a copy of the key from today:

-----BEGIN PGP PUBLIC KEY BLOCK-----

mQINBF5dI2sBEACyGx5isuXqEV2zJGIx8rlJFCGw6A9g5Zk/9Hj50UpXNuOXlvQl
7vq91m2CAh88Jad7OiMHIJJhX3ZJEOf/pUx/16QKumsaEyBk9CegxUG9jAQXsjL3
WLyP0/l27UzNrOAFB+IUGjsoP+32gsSPiF5P485mirIJNojIAFzDQl3Uo4FbvqYU
9AIRk5kV4nEYz1aKXAovIUsyqrztMtwlAG2xqdwVpGD2A4/w8I143qPGjjhEQmf4
/EeS4CP9ztyLAx+01t2Acwa7Bygsb5KQPuT25UlevuxdDy/Rd5Zn/Lzwr2GQqjUs

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=wbnt
-----END PGP PUBLIC KEY BLOCK-----

Attempting to run apt update will throw an error:

# apt update
Hit:1 http://deb.debian.org/debian trixie InRelease
Hit:2 http://deb.debian.org/debian trixie-updates InRelease
Hit:3 http://security.debian.org trixie-security InRelease
Hit:4 http://debug.mirrors.debian.org/debian-debug trixie-debug InRelease
Err:5 https://packages.gitlab.com/runner/gitlab-runner/debian trixie InRelease
  Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on F6403F6544A38863DAA0B6E03F01618A51312F3F is not bound:            No binding signature at time 2026-01-28T07:10:26Z   because: No binding signature at time 2026-01-28T07:10:26Z
All packages are up to date.
Warning: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. OpenPGP signature verification failed: https://packages.gitlab.com/runner/gitlab-runner/debian trixie InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on F6403F6544A38863DAA0B6E03F01618A51312F3F is not bound:            No binding signature at time 2026-01-28T07:10:26Z   because: No binding signature at time 2026-01-28T07:10:26Z
Warning: Failed to fetch https://packages.gitlab.com/runner/gitlab-runner/debian/dists/trixie/InRelease  Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on F6403F6544A38863DAA0B6E03F01618A51312F3F is not bound:            No binding signature at time 2026-01-28T07:10:26Z   because: No binding signature at time 2026-01-28T07:10:26Z
Warning: Some index files failed to download. They have been ignored, or old ones used instead.

Maybe keys were not properly rotated?