EXPKEYSIG debian ubuntu fedora

Fix EXPKEYSIG 9DC858229FC7DD38

Docker CE <docker@docker.com> — by Docker Inc.

Error message
EXPKEYSIG 9DC858229FC7DD38 Docker CE <docker@docker.com>

Fix commands for Arch Linux

Method 1 Refresh key via pacman-key

Refreshes all keys in the pacman keyring from keyservers. Slowest but most thorough.

Arch Linux — bash
$ sudo pacman-key --refresh-keys

Method 2 Receive specific key

Fetches the specific expired key and locally signs it to mark it as trusted.

Arch Linux — bash
$ sudo pacman-key --keyserver keyserver.ubuntu.com --recv-keys 9DC858229FC7DD38
$ sudo pacman-key --lsign-key 9DC858229FC7DD38

Method 3 Reinitialize keyring (nuclear option)

Reinitializes the entire pacman keyring. Use only if other methods fail.

Arch Linux — bash
$ sudo pacman-key --init
$ sudo pacman-key --populate archlinux

After importing the key

Run sudo apt-get update (or your distro's equivalent) again. If successful you should see Hit: lines with no EXPKEYSIG warnings. Still broken? Check that your /etc/apt/sources.list.d/ entry references the correct [signed-by=…] keyring path.