[Bug 2057885] Re: gpg return 'No dirmngr' error when handling add_extra_ppas phase

[ethan.hsieh]

Hi Pual,

Based on Aristo's investigation, if homedir is too long (>100chars), gpg will fail due to unix socket path
length limit [1][2][3][4].

As per my understanding, your proosal is to rename the "tmp/ubuntu-
image-gpg" as "tmp/ui-gpg". But, the folder is still under "<working
directory>/". e.g. /home/ubuntu/workspace/iot-murcia-classic-2204/iot-
image-builds/work/chroot/. Is it correct?

The path used to be “/tmp/ubuntu-image-gpg/S.dirmngr”. I'm wondering if
you can change the path from "<working directory>/" to "/". Is there any
concern on it?

Thanks~

---
[1] https://lists.openembedded.org/g/openembedded-core/message/131139
[2] https://dev.gnupg.org/rG17efcd2a2acdc3b7f00711272aa51e5be2476921
[3] https://lists.gnupg.org/pipermail/gnupg-users/2017-January/057444.html
[4] https://unix.stackexchange.com/questions/367008/why-is-socket-path-length-limited-to-a-hundred-chars

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to Ubuntu Image.
https://bugs.launchpad.net/bugs/2057885

Title:
  gpg return 'No dirmngr' error when handling add_extra_ppas phase

Status in Ubuntu Image:
  In Progress

Bug description:
  Hi,

  We have an issue starting from 3.2+snap6 rev#742 when building an image with PPA.
  The 3.2+snap4 rev#737 version is workable without this issue.

  The building yaml at here: The working yaml:
  https://git.launchpad.net/~erlangen-team/erlangen/+git/iot-image-
  builds/tree/yaml/s32g-jammy-server-arm64.yaml

  Could you help to check this issue? Tks.

  Err msg:
  [6] add_extra_ppas
  gpg: WARNING: unsafe permissions on homedir '/home/ubuntu/workspace/iot-erlangen-classic-server-2204/iot-image-builds/work/chroot/tmp/ubuntu-image-gpg'
  gpg: keybox '/home/ubuntu/workspace/iot-erlangen-classic-server-2204/iot-image-builds/work/chroot/tmp/ubuntu-image-gpg/pubring.kbx' created
  gpg: error running '/usr/bin/dirmngr': exit status 1
  gpg: failed to start the dirmngr '/usr/bin/dirmngr': General error
  gpg: connecting dirmngr at '/home/ubuntu/workspace/iot-erlangen-classic-server-2204/iot-image-builds/work/chroot/tmp/ubuntu-image-gpg/S.dirmngr' failed: General error
  gpg: keyserver receive failed: No dirmngr
  duration: 503.675444ms
  Error: Error retrieving signing key for ppa "erlangen-team/nxp-s32g-bsp": Error running gpg command "/snap/ubuntu-image/776/usr/bin/gpg --no-default-keyring --no-options --batch --homedir work/chroot/tmp/ubuntu-image-gpg --secret-keyring work/chroot/tmp/ubuntu-image-gpg/tempring.gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 880A6D439C9C8920D1101AF97591D2F24E6BCB60". Error is "exit status 2". Full output below:
  gpg: WARNING: unsafe permissions on homedir '/home/ubuntu/workspace/iot-erlangen-classic-server-2204/iot-image-builds/work/chroot/tmp/ubuntu-image-gpg'
  gpg: keybox '/home/ubuntu/workspace/iot-erlangen-classic-server-2204/iot-image-builds/work/chroot/tmp/ubuntu-image-gpg/pubring.kbx' created
  gpg: error running '/usr/bin/dirmngr': exit status 1
  gpg: failed to start the dirmngr '/usr/bin/dirmngr': General error
  gpg: connecting dirmngr at '/home/ubuntu/workspace/iot-erlangen-classic-server-2204/iot-image-builds/work/chroot/tmp/ubuntu-image-gpg/S.dirmngr' failed: General error
  gpg: keyserver receive failed: No dirmngr

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-image/+bug/2057885/+subscriptions