Installing kernel headers fails on keys

I think the easiest way is to temporary disable key checking to update the keyrings, and reactivate them after that. It is the solution in this thread.