[Bug 2057885] Re: gpg return 'No dirmngr' error when handling add_extra_ppas phase

[Paul Mars]

Hey Ethan,


> As per my understanding, your proosal is to rename the "tmp/ubuntu-image-gpg" as "tmp/ui-gpg". But, the folder is still under "<working directory>/". e.g. /home/ubuntu/workspace/iot-murcia-classic-2204/iot-image-builds/work/chroot/. Is it correct?

Correct (the exact name is tmp/u-i-gpg but you get the idea). This is
now available.

> The path used to be “/tmp/ubuntu-image-gpg/S.dirmngr”. I'm wondering
if you can change the path from "<working directory>/tmp" to "/tmp". Is
there any concern on it?

As mentioned in my previous comment using a directory under the workdir
was intentional to make the build process more self contained and avoid
creating files/directories outside the workdir. One of my high level
goals is to make the build process less dangerous to the system.

But we could consider using /tmp again since the risk of breaking stuff
while using it should probably be low. If I rework that, as mentioned
previously I will add an ID in the path to make sure concurrent builds
are not using the same gpg homedir.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to Ubuntu Image.
https://bugs.launchpad.net/bugs/2057885

Title:
  gpg return 'No dirmngr' error when handling add_extra_ppas phase

Status in Ubuntu Image:
  In Progress

Bug description:
  Hi,

  We have an issue starting from 3.2+snap6 rev#742 when building an image with PPA.
  The 3.2+snap4 rev#737 version is workable without this issue.

  The building yaml at here: The working yaml:
  https://git.launchpad.net/~erlangen-team/erlangen/+git/iot-image-
  builds/tree/yaml/s32g-jammy-server-arm64.yaml

  Could you help to check this issue? Tks.

  Err msg:
  [6] add_extra_ppas
  gpg: WARNING: unsafe permissions on homedir '/home/ubuntu/workspace/iot-erlangen-classic-server-2204/iot-image-builds/work/chroot/tmp/ubuntu-image-gpg'
  gpg: keybox '/home/ubuntu/workspace/iot-erlangen-classic-server-2204/iot-image-builds/work/chroot/tmp/ubuntu-image-gpg/pubring.kbx' created
  gpg: error running '/usr/bin/dirmngr': exit status 1
  gpg: failed to start the dirmngr '/usr/bin/dirmngr': General error
  gpg: connecting dirmngr at '/home/ubuntu/workspace/iot-erlangen-classic-server-2204/iot-image-builds/work/chroot/tmp/ubuntu-image-gpg/S.dirmngr' failed: General error
  gpg: keyserver receive failed: No dirmngr
  duration: 503.675444ms
  Error: Error retrieving signing key for ppa "erlangen-team/nxp-s32g-bsp": Error running gpg command "/snap/ubuntu-image/776/usr/bin/gpg --no-default-keyring --no-options --batch --homedir work/chroot/tmp/ubuntu-image-gpg --secret-keyring work/chroot/tmp/ubuntu-image-gpg/tempring.gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 880A6D439C9C8920D1101AF97591D2F24E6BCB60". Error is "exit status 2". Full output below:
  gpg: WARNING: unsafe permissions on homedir '/home/ubuntu/workspace/iot-erlangen-classic-server-2204/iot-image-builds/work/chroot/tmp/ubuntu-image-gpg'
  gpg: keybox '/home/ubuntu/workspace/iot-erlangen-classic-server-2204/iot-image-builds/work/chroot/tmp/ubuntu-image-gpg/pubring.kbx' created
  gpg: error running '/usr/bin/dirmngr': exit status 1
  gpg: failed to start the dirmngr '/usr/bin/dirmngr': General error
  gpg: connecting dirmngr at '/home/ubuntu/workspace/iot-erlangen-classic-server-2204/iot-image-builds/work/chroot/tmp/ubuntu-image-gpg/S.dirmngr' failed: General error
  gpg: keyserver receive failed: No dirmngr

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-image/+bug/2057885/+subscriptions