I'm chiming in, although I observed this on Ubuntu Precise (apt 0.8.16~exp12ubuntu10.21):
W: GPG error: http://repo.i.bitbit.net precise Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmas...@ubuntu.com> the reason for this was: root@backend:/var/lib/apt/lists# ls -l *Release* [...] -rw-r--r-- 1 root root 0 Jul 20 13:46 repo.i.bitbit.net_ubuntu_dists_precise_Release IMHO "apt-get update" should delete files it thinks are corrupt and retry the download before reporting the problem. alternatively "apt-get clean" could be more aggressive. -- kind regards, Kjetil T. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org