Cloudflared cannot install | Cloudflare Developers | Page 1

subtle hinge Apr 7, 2026, 7:42 PM

#

Trying to install the connector using the official cloudflare steps on an ubuntu 24 machine.

It continously says that a pubkey is missing and therefore fails the installation.

#

full error:
W: GPG error: https://pkg.cloudflare.com/cloudflared noble InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 254B391D8CACCBF8 NO_PUBKEY 8A682D308D4E5E73
E: The repository 'https://pkg.cloudflare.com/cloudflared noble InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

lofty nebula Apr 7, 2026, 8:13 PM

#

subtle hinge Trying to install the connector using the official cloudflare steps on an ubuntu...

Did you install the key as per the instructions?

subtle hinge Apr 7, 2026, 8:16 PM

#

lofty nebula Did you install the key as per the instructions?

I followed all of the steps

lofty nebula Apr 7, 2026, 8:17 PM

#

subtle hinge I followed all of the steps

What is the output of cat /etc/apt/sources.list.d/cloudflared.list?

subtle hinge Apr 7, 2026, 8:33 PM

#

lofty nebula What is the output of `cat /etc/apt/sources.list.d/cloudflared.list`?

deb [signed-by=/usr/share/keyrings/cloudflare-main.gpg] https://pkg.cloudflare.com/cloudflared any main

lofty nebula Apr 7, 2026, 8:35 PM

#

subtle hinge deb [signed-by=/usr/share/keyrings/cloudflare-main.gpg] https://pkg.cloudflare.c...

And if you check /usr/share/keyrings/cloudflare-main.gpg, does the file exist?

subtle hinge Apr 7, 2026, 8:35 PM

#

yup it does

#

is the file supposed to look corrupted lmao?

lofty nebula Apr 7, 2026, 8:35 PM

#

yes

subtle hinge Apr 7, 2026, 8:35 PM

#

A bunch of ? emojis in there

#

okay good

lofty nebula Apr 7, 2026, 8:35 PM

#

It's a binary file

subtle hinge Apr 7, 2026, 8:36 PM

#

yeah i figured

#

really strange why this won't work.

#

Should i just manually add the missing key to apt?

#

sudo apt-get update && sudo apt-get install cloudflared
Hit:1 http://security.ubuntu.com/ubuntu noble-security InRelease
Hit:2 http://archive.ubuntu.com/ubuntu noble InRelease                                                      
Hit:3 http://archive.ubuntu.com/ubuntu noble-updates InRelease                                              
Hit:4 https://packages.wazuh.com/4.x/apt stable InRelease                                                   
Hit:5 https://deb.nodesource.com/node_22.x nodistro InRelease                                               
Hit:6 http://archive.ubuntu.com/ubuntu noble-backports InRelease                          
Get:7 https://pkg.cloudflare.com/cloudflared any InRelease [5039 B] 
Get:8 https://packages.doppler.com/public/cli/deb/debian any-version InRelease [11.9 kB]
Err:7 https://pkg.cloudflare.com/cloudflared any InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 254B391D8CACCBF8 NO_PUBKEY 8A682D308D4E5E73
Reading package lists... Done
W: GPG error: https://pkg.cloudflare.com/cloudflared any InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 254B391D8CACCBF8 NO_PUBKEY 8A682D308D4E5E73
E: The repository 'https://pkg.cloudflare.com/cloudflared any InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.```

lofty nebula Apr 7, 2026, 8:41 PM

#

Are both files owned by root with the correct permissions?

#

gpg --show-keys /usr/share/keyrings/cloudflare-main.gpg What does that say?

#

My only idea is that the file permissions of the key aren't set correctly

subtle hinge Apr 7, 2026, 8:46 PM

#

pub rsa4096 2025-10-23 [SC]
CC94B39C77AE7342A68B89628A682D308D4E5E73
uid CloudFlare Software Packaging 2025 help@cloudflare.com
sub rsa4096 2025-10-23 [E]

#

i will check permissios now

#

my permission for the .gpg file is 640. Is that okay?

lofty nebula Apr 7, 2026, 8:48 PM

#

erm, i have no idea if other read is needed. But all the files in that folder have 644 for me, so I'd try that

subtle hinge Apr 7, 2026, 8:48 PM

#

okay i will try.

#

well setting it to 644 worked.

#

thank you so much

#

holy that took longer than expected

#

thanks man!!!!

lofty nebula Apr 7, 2026, 8:52 PM

#

subtle hinge thanks man!!!!

You might want to check if they keyrings folder has the correct permissions so you don't run into the same problem again later

subtle hinge Apr 7, 2026, 9:16 PM

#

lofty nebula You might want to check if they keyrings folder has the correct permissions so y...

i will!

#

Btw laudian, sorry to ask.
I wanted to ask for some security advice.

My bot listens to telegram requests at port 3000. i setup an endpoint to localhost:3000.

I setup WAF to only allow post requests, only allowed IPs of telegram. Is this safe enough? Am i missing something?

#

Furthermore, it connects to http://localhost:3000.
Does cloudflare automatically forward it to https?

lofty nebula Apr 7, 2026, 9:19 PM

#

subtle hinge Furthermore, it connects to http://localhost:3000. Does cloudflare automatically...

If you enable the automatic https redirect on cloudflare, yes

subtle hinge Apr 7, 2026, 9:23 PM

#

awesome! Is there any other thing i should enable for more security?

lofty nebula Apr 7, 2026, 9:30 PM

#

If Telegram doesn't offer any further authentication, limiting access to their IPs seems like a good place to start.

#Cloudflared cannot install