yarn GPG public key error

[russoz]

Hi there,

I have just tried to rebuild/reopen the devcontainer with the docker-in-docker feature, and I got this error:

[2026-03-15T22:33:05.242Z] ===========================================================================
Feature       : Docker (Docker-in-Docker)
Description   : Create child containers *inside* a container, independent from the host's docker instance. Installs Docker extension in the container along with needed CLIs.
Id            : ghcr.io/devcontainers/features/docker-in-docker
Version       : 2.16.1
Documentation : https://github.com/devcontainers/features/tree/main/src/docker-in-docker
Options       :
    VERSION="latest"
    MOBY="true"
    MOBYBUILDXVERSION="latest"
    DOCKERDASHCOMPOSEVERSION="v2"
    AZUREDNSAUTODETECTION="true"
    DOCKERDEFAULTADDRESSPOOL=""
    INSTALLDOCKERBUILDX="true"
    INSTALLDOCKERCOMPOSESWITCH="false"
    DISABLEIP6TABLES="false"
===========================================================================
[2026-03-15T22:33:05.282Z] (*) bookworm is supported for Moby installation  - setting up Microsoft repository
[2026-03-15T22:33:05.307Z] find: '/var/lib/apt/lists/*': No such file or directory
[2026-03-15T22:33:05.308Z] Running apt-get update...
[2026-03-15T22:33:05.774Z] Get:1 https://dl.yarnpkg.com/debian stable InRelease
[2026-03-15T22:33:05.864Z] Err:1 https://dl.yarnpkg.com/debian stable InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 62D54FD4003F6525
[2026-03-15T22:33:05.872Z] Get:2 http://deb.debian.org/debian bookworm InRelease [151 kB]
[2026-03-15T22:33:06.171Z] Get:3 http://deb.debian.org/debian bookworm-updates InRelease [55.4 kB]
[2026-03-15T22:33:06.182Z] Get:4 http://deb.debian.org/debian-security bookworm-security InRelease [48.0 kB]
[2026-03-15T22:33:06.193Z] Get:5 http://deb.debian.org/debian bookworm/main amd64 Packages [8792 kB]
[2026-03-15T22:33:06.639Z] Get:6 http://deb.debian.org/debian bookworm-updates/main amd64 Packages [6924 B]
[2026-03-15T22:33:06.640Z] Get:7 http://deb.debian.org/debian-security bookworm-security/main amd64 Packages [294 kB]
[2026-03-15T22:33:07.923Z] Reading package lists...
[2026-03-15T22:33:08.658Z] 
[2026-03-15T22:33:08.677Z] W: GPG error: https://dl.yarnpkg.com/debian stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 62D54FD4003F6525
E: The repository 'https://dl.yarnpkg.com/debian stable InRelease' is not signed.
[2026-03-15T22:33:08.678Z] ERROR: Feature "Docker (Docker-in-Docker)" (ghcr.io/devcontainers/features/docker-in-docker) failed to install! Look at the documentation at https://github.com/devcontainers/features/tree/main/src/docker-in-docker for help troubleshooting this error.
[2026-03-15T22:33:08.825Z] The command '/bin/sh -c chmod -R 0755 /tmp/dev-container-features/docker-in-docker_0 && cd /tmp/dev-container-features/docker-in-docker_0 && chmod +x ./devcontainer-features-install.sh && ./devcontainer-features-install.sh' returned a non-zero code: 100
[2026-03-15T22:33:08.827Z] Stop (4767 ms): Run: docker build --build-arg _DEV_CONTAINERS_BASE_IMAGE=mcr.microsoft.com/devcontainers/python:3.14-bookworm --build-arg _DEV_CONTAINERS_IMAGE_USER=root --build-arg _DEV_CONTAINERS_FEATURE_CONTENT_SOURCE=dev_container_feature_content_temp --target dev_containers_target_stage -f /tmp/devcontainercli-az/container-features/0.83.3-1773613981869/Dockerfile.extended -t vsc-community.openwrt-e1f557cf3fd364e540e638797e916885b6934e753f3bd6a428d92da4b75d6502-features /home/az/.config/Code/User/globalStorage/ms-vscode-remote.remote-containers/data/empty-folder
[2026-03-15T22:33:08.828Z] Error: Command failed: docker build --build-arg _DEV_CONTAINERS_BASE_IMAGE=mcr.microsoft.com/devcontainers/python:3.14-bookworm --build-arg _DEV_CONTAINERS_IMAGE_USER=root --build-arg _DEV_CONTAINERS_FEATURE_CONTENT_SOURCE=dev_container_feature_content_temp --target dev_containers_target_stage -f /tmp/devcontainercli-az/container-features/0.83.3-1773613981869/Dockerfile.extended -t vsc-community.openwrt-e1f557cf3fd364e540e638797e916885b6934e753f3bd6a428d92da4b75d6502-features /home/az/.config/Code/User/globalStorage/ms-vscode-remote.remote-containers/data/empty-folder
[2026-03-15T22:33:08.828Z]     at U9 (/home/az/.vscode/extensions/ms-vscode-remote.remote-containers-0.447.0/dist/spec-node/devContainersSpecCLI.js:467:1277)
[2026-03-15T22:33:08.828Z]     at RL (/home/az/.vscode/extensions/ms-vscode-remote.remote-containers-0.447.0/dist/spec-node/devContainersSpecCLI.js:467:1021)
[2026-03-15T22:33:08.828Z]     at async AZ (/home/az/.vscode/extensions/ms-vscode-remote.remote-containers-0.447.0/dist/spec-node/devContainersSpecCLI.js:485:3870)
[2026-03-15T22:33:08.829Z]     at async uC (/home/az/.vscode/extensions/ms-vscode-remote.remote-containers-0.447.0/dist/spec-node/devContainersSpecCLI.js:485:4989)
[2026-03-15T22:33:08.829Z]     at async L5 (/home/az/.vscode/extensions/ms-vscode-remote.remote-containers-0.447.0/dist/spec-node/devContainersSpecCLI.js:666:205)
[2026-03-15T22:33:08.829Z]     at async G5 (/home/az/.vscode/extensions/ms-vscode-remote.remote-containers-0.447.0/dist/spec-node/devContainersSpecCLI.js:665:15084)
[2026-03-15T22:33:08.829Z]     at async /home/az/.vscode/extensions/ms-vscode-remote.remote-containers-0.447.0/dist/spec-node/devContainersSpecCLI.js:485:1188
[2026-03-15T22:33:08.840Z] Stop (7811 ms): Run: /usr/share/code/code /home/az/.vscode/extensions/ms-vscode-remote.remote-containers-0.447.0/dist/spec-node/devContainersSpecCLI.js up --user-data-folder /home/az/.config/Code/User/globalStorage/ms-vscode-remote.remote-containers/data --container-session-data-folder /tmp/devcontainers-440e0e12-ed89-49c8-9f48-9575d3a0451d1773613978915 --workspace-folder /home/az/git/russoz-ansible/community.openwrt --workspace-mount-consistency cached --gpu-availability detect --id-label devcontainer.local_folder=/home/az/git/russoz-ansible/community.openwrt --id-label devcontainer.config_file=/home/az/git/russoz-ansible/community.openwrt/.devcontainer/devcontainer.json --log-level info --log-format json --config /home/az/git/russoz-ansible/community.openwrt/.devcontainer/devcontainer.json --default-user-env-probe loginInteractiveShell --remove-existing-container --mount type=volume,source=vscode,target=/vscode,external=true --skip-post-create --update-remote-user-uid-default on --mount-workspace-git-root --include-configuration --include-merged-configuration
[2026-03-15T22:33:08.840Z] Exit code 1
[2026-03-15T22:33:08.843Z] Command failed: /usr/share/code/code /home/az/.vscode/extensions/ms-vscode-remote.remote-containers-0.447.0/dist/spec-node/devContainersSpecCLI.js up --user-data-folder /home/az/.config/Code/User/globalStorage/ms-vscode-remote.remote-containers/data --container-session-data-folder /tmp/devcontainers-440e0e12-ed89-49c8-9f48-9575d3a0451d1773613978915 --workspace-folder /home/az/git/russoz-ansible/community.openwrt --workspace-mount-consistency cached --gpu-availability detect --id-label devcontainer.local_folder=/home/az/git/russoz-ansible/community.openwrt --id-label devcontainer.config_file=/home/az/git/russoz-ansible/community.openwrt/.devcontainer/devcontainer.json --log-level info --log-format json --config /home/az/git/russoz-ansible/community.openwrt/.devcontainer/devcontainer.json --default-user-env-probe loginInteractiveShell --remove-existing-container --mount type=volume,source=vscode,target=/vscode,external=true --skip-post-create --update-remote-user-uid-default on --mount-workspace-git-root --include-configuration --include-merged-configuration
[2026-03-15T22:33:08.843Z] Exit code 1

my devcontainer.json file looks like:

{
  "name": "community.openwrt devcontainer",
  "image": "mcr.microsoft.com/devcontainers/python:3.14-bookworm",
  "features": {
    "ghcr.io/devcontainers/features/docker-in-docker:2": {}
  },
  "customizations": {
    "vscode": {
      "settings": {
        "terminal.integrated.shell.linux": "/bin/bash",
        "python.pythonPath": "/usr/local/bin/python"
      },
  ...

This was working until some weeks ago. I am not using the devcontainer regularly, it was a exactly a check it was still OK.

[russoz]

Dockerfile is quite simplistic:

FROM mcr.microsoft.com/devcontainers/python:3.14-bookworm

WORKDIR /workspace

RUN pip install -U pip

[Kaniska244]

Hi @russoz

Thank you for reporting this issue. This has already been fix a while ago. Would you kindly check if its possible to clar your local image cache and pull the image again from the registry. That should fix this problem.
Kindly let me know if the issue still persists.

[russoz]

Worked like a charm! Thanks

[mujiansu]

I encountered the same issue when using the image mcr.microsoft.com/devcontainers/go:1-1.24-bullseye.

By modifying the Dockerfile and adding the following commands, I was able to resolve the problem:

RUN mkdir -p /etc/apt/keyrings \
    && curl -fsSL https://dl.yarnpkg.com/debian/pubkey.gpg \
        | gpg --dearmor -o /etc/apt/keyrings/yarn.gpg \
    && echo "deb [signed-by=/etc/apt/keyrings/yarn.gpg] https://dl.yarnpkg.com/debian stable main" \
        > /etc/apt/sources.list.d/yarn.list \
    && apt-get update