I worked around this issue by putting the following into /etc/apt/preferences.d/gnupg inside the chroot: Package: gnupg Pin: version 2.* Pin-Priority: -100 ... and downgrading to the version from stretch (1.4.20-6). Cheers, -Hilko