401 Unauthorized Error + Repository is Unsigned Error from apt-puppetcore Repository on Ubuntu

[securitasis]

Hello Community,

I am experiencing an issue when running sudo apt update on freshly provisioned Ubuntu systems (20.04, 22.04, and 24.04). The update process fails with a 401 Unauthorized error related to the Puppet repository. Below is the excerpt from the terminal output:

sudo apt update

Hit:1 http://archive.ubuntu.com/ubuntu noble InRelease
Hit:2 http://archive.ubuntu.com/ubuntu noble-updates InRelease
Hit:3 http://archive.ubuntu.com/ubuntu noble-security InRelease
Err:4 https://apt-puppetcore.puppet.com noble InRelease
  401  Unauthorized [IP: 65.8.248.69 443]
Reading package lists...
E: Failed to fetch https://apt-puppetcore.puppet.com/dists/noble/InRelease  401  Unauthorized [IP: 65.8.248.69 443]
E: The repository 'https://apt-puppetcore.puppet.com noble InRelease' is not signed.

I have also attached the full debug log for your reference:
puppet8_install_debug.log

Background:

• I have developed an install-puppet8.ps script that sets up Puppet on these Ubuntu versions.
• The script successfully provisions the system; however, the repository update error persists across all tested versions.

What I've Tried:

• Deleted and recreated new Puppet API Keys from https://forge.puppet.com/.
• Verifying the repository URL from https://apt-puppetcore.puppet.com/
• Ensuring that my system’s network settings allow access to the specified repository.
• Checking for any possible authentication or signing issues that might require additional credentials or updated keys.

Request for Assistance:

• Has anyone encountered a similar issue with the Puppet repository?
• Could there be a change or deprecation in the repository configuration for these Ubuntu versions?
• Are there recommended steps to resolve the 401 Unauthorized error or adjust the repository configuration to obtain a signed release?

I appreciate any insights, troubleshooting tips, or recommendations from the community. Thank you for your support and for taking the time to help resolve this issue.

Best regards,
Jerry Collins | Securitasis

[kenyon]

Seems like the need for authentication on the repositories is expected: puppetlabs/puppetlabs-puppet_agent#757

It's due to https://www.puppet.com/blog/open-source-puppet-updates-2025.

[luitzifa]

Your first have to accept the EULA and then create the api key:

https://forge.puppet.com/eula