ROS2 Humble docker image provided in NGC just stopped working when doing "apt-get update"

We’re using the image nvcr.io/nvidia/isaac/ros:aarch64-ros2_humble_b7e1ed6c02a6fa3c1c7392479291c035 as base image of several of the components in our system, but from some days ago the command “apt-get update” inside that image just stopped working, raising this error:

root@e10846a5b851:/# apt-get update
Get:1 http://packages.ros.org/ros2-testing/ubuntu focal InRelease [4,685 B]
Err:1 http://packages.ros.org/ros2-testing/ubuntu focal InRelease                                                                   
  At least one invalid signature was encountered.
Get:2 http://ports.ubuntu.com/ubuntu-ports focal InRelease [265 kB]                                                                 
Get:3 http://ppa.launchpad.net/mosquitto-dev/mosquitto-ppa/ubuntu focal InRelease [24.6 kB]                                         
Get:4 https://apt.kitware.com/ubuntu focal InRelease [15.5 kB]                                                                      
Get:5 https://isaac.download.nvidia.com/isaac-ros/ubuntu/main focal InRelease [4,316 B]                                             
Get:6 https://repo.download.nvidia.com/jetson/common r35.4 InRelease [2,555 B]                                                      
Err:5 https://isaac.download.nvidia.com/isaac-ros/ubuntu/main focal InRelease                                                       
  At least one invalid signature was encountered.
Err:6 https://repo.download.nvidia.com/jetson/common r35.4 InRelease                       
  At least one invalid signature was encountered.
Err:4 https://apt.kitware.com/ubuntu focal InRelease     
  At least one invalid signature was encountered.
Err:3 http://ppa.launchpad.net/mosquitto-dev/mosquitto-ppa/ubuntu focal InRelease
  At least one invalid signature was encountered.
Get:7 https://packagecloud.io/github/git-lfs/ubuntu focal InRelease [29.1 kB]
Err:2 http://ports.ubuntu.com/ubuntu-ports focal InRelease
  At least one invalid signature was encountered.
Get:8 http://ports.ubuntu.com/ubuntu-ports focal-updates InRelease [128 kB]
Err:7 https://packagecloud.io/github/git-lfs/ubuntu focal InRelease
  At least one invalid signature was encountered.
Err:8 http://ports.ubuntu.com/ubuntu-ports focal-updates InRelease
  At least one invalid signature was encountered.
Get:9 http://ports.ubuntu.com/ubuntu-ports focal-backports InRelease [128 kB]
Err:9 http://ports.ubuntu.com/ubuntu-ports focal-backports InRelease
  At least one invalid signature was encountered.
Get:10 http://ports.ubuntu.com/ubuntu-ports focal-security InRelease [128 kB]
Err:10 http://ports.ubuntu.com/ubuntu-ports focal-security InRelease
  At least one invalid signature was encountered.
Reading package lists... Done
W: GPG error: http://packages.ros.org/ros2-testing/ubuntu focal InRelease: At least one invalid signature was encountered.
E: The repository 'http://packages.ros.org/ros2-testing/ubuntu focal InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://isaac.download.nvidia.com/isaac-ros/ubuntu/main focal InRelease: At least one invalid signature was encountered.
E: The repository 'https://isaac.download.nvidia.com/isaac-ros/ubuntu/main focal InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://repo.download.nvidia.com/jetson/common r35.4 InRelease: At least one invalid signature was encountered.
E: The repository 'https://repo.download.nvidia.com/jetson/common r35.4 InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.kitware.com/ubuntu focal InRelease: At least one invalid signature was encountered.
E: The repository 'https://apt.kitware.com/ubuntu focal InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://ppa.launchpad.net/mosquitto-dev/mosquitto-ppa/ubuntu focal InRelease: At least one invalid signature was encountered.
E: The repository 'http://ppa.launchpad.net/mosquitto-dev/mosquitto-ppa/ubuntu focal InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://ports.ubuntu.com/ubuntu-ports focal InRelease: At least one invalid signature was encountered.
E: The repository 'http://ports.ubuntu.com/ubuntu-ports focal InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://packagecloud.io/github/git-lfs/ubuntu focal InRelease: At least one invalid signature was encountered.
E: The repository 'https://packagecloud.io/github/git-lfs/ubuntu focal InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://ports.ubuntu.com/ubuntu-ports focal-updates InRelease: At least one invalid signature was encountered.
E: The repository 'http://ports.ubuntu.com/ubuntu-ports focal-updates InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://ports.ubuntu.com/ubuntu-ports focal-backports InRelease: At least one invalid signature was encountered.
E: The repository 'http://ports.ubuntu.com/ubuntu-ports focal-backports InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://ports.ubuntu.com/ubuntu-ports focal-security InRelease: At least one invalid signature was encountered.
E: The repository 'http://ports.ubuntu.com/ubuntu-ports focal-security InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

That error has made several of our CI/CD and components building start failing.

It’s not a posibility right now to change the base image (you can understand it’d imply rebuilding a lot of stuff).

I’m bulding components in a Jetson Orin AGX development board.

I tried to use the next image but it aparently uses a CUDA version that is not compatible with my jetpack version.

I’m using jetpack 5.1.1 (L4T 35.3.1)

And I get this error when I just try to open the image

nvcr.io/nvidia/isaac/ros:aarch64-ros2_humble_692ceb1a0a35fe8a1f37641bab978508

docker run --rm -it nvcr.io/nvidia/isaac/ros:aarch64-ros2_humble_692ceb1a0a35fe8a1f37641bab978508 bash

docker: Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: nvidia-container-runtime did not terminate successfully: exit status 1: time="2025-02-16T16:50:50-05:00" level=error msg="failed to create NVIDIA Container Runtime: failed to construct OCI spec modifier: requirements not met: unsatisfied condition: cuda>=12.2 (cuda=11.4)"
: unknown.

So I guess (correct me if I’m wrong) that if I try to use any newer image I’ll get the same error.

Hi @camilo2

Which version of Isaac ROS are you using? I’m working with the latest and I don’t encounter any issues.

You can look from GitHub - NVIDIA-ISAAC-ROS/isaac_ros_common: Common utilities, packages, scripts, Dockerfiles, and testing infrastructure for Isaac ROS packages. in the tag to load the right docker image.

Let me know
Raffaello