yandex

HestiaCP Failure After Upgrading to Version 1.9.2

Hosting

HestiaCP Failure After Upgrading. Nginx signing key invalid. Update the NGINX signing key

Cause

An error occurred before the update, but it was ignored:

The following signatures were invalid: EXPKEYSIG ABF5BD827BD9BF62 nginx signing key <signing-key@nginx.com>

Solution

All actions should be performed as root.

1. Update the NGINX signing key

curl -s https://nginx.org/keys/nginx_signing.key | sudo gpg --dearmor > /usr/share/keyrings/nginx-keyring.gpg
OR 
curl -fsSL https://nginx.org/keys/nginx_signing.key | gpg --dearmor | sudo tee /usr/share/keyrings/nginx-keyring.gpg > /dev/null

2. Backup configuration files

/etc/nginx/nginx.conf
/etc/apache2/apache2.conf

3. Fully update the system

apt-get update
apt-get upgrade

4. Check the status and create a system user

systemctl status hestia
sudo useradd -m -s /bin/bash hestiaweb
sudo usermod -aG sudo hestiaweb

5. Set the proper permissions

chown -R hestiaweb:hestiaweb /usr/local/hestia/data/sessions

6. Update sudo permissions

Important: Add the following lines to the bottom of the file using visudo. Use TAB between options!

visudo
Defaults:root !requiretty
hestiaweb   ALL=NOPASSWD:/usr/local/hestia/bin/*

7. Restart HestiaCP

systemctl restart hestia

8. Restore configuration files if needed

/etc/nginx/nginx.conf
/etc/apache2/apache2.conf

9. Restart again

systemctl restart hestia

461