Bug 829689 – =sec-keys/signify-keys-signify-30[verify-sig] should depend on sec-keys/openpgp-keys-signify to prevent FileNotFoundError: [Errno 2] No such file or directory: '/usr/share/openpgp-keys/signify.asc'

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Nick 2021-12-20 00:06:03 UTC]

Without patching the ebuild to depend on sec-keys/openpgp-keys-signify with verify-sig (or installing it manually) ${BROOT}/usr/share/openpgp-keys/signify.asc (VERIFY_SIG_OPENPGP_KEY_PATH) does not exist.


$ sudo emerge -a1 sec-keys/signify-keys-signify

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild   R    ] sec-keys/signify-keys-signify-30  USE="verify-sig*" 

Would you like to merge these packages? [Yes/No] y

>>> Verifying ebuild manifests

>>> Emerging (1 of 1) sec-keys/signify-keys-signify-30::gentoo
 * signify-30.pub BLAKE2B SHA512 size ;-) ...                            [ ok ]
 * signify-30.pub.asc BLAKE2B SHA512 size ;-) ...                        [ ok ]
>>> Unpacking source...
 * Verifying signify-30.pub ...
Traceback (most recent call last):
  File "/usr/lib/python-exec/python3.9/gemato", line 33, in <module>
    sys.exit(load_entry_point('gemato==16.2', 'console_scripts', 'gemato')())
  File "/usr/lib/python3.9/site-packages/gemato/cli.py", line 639, in setuptools_main
    sys.exit(main(sys.argv))
  File "/usr/lib/python3.9/site-packages/gemato/cli.py", line 628, in main
    vals.cmd.parse_args(vals, argp)
  File "/usr/lib/python3.9/site-packages/gemato/cli.py", line 580, in parse_args
    super().parse_args(args, argp)
  File "/usr/lib/python3.9/site-packages/gemato/cli.py", line 151, in parse_args
    super().parse_args(args, argp)
  File "/usr/lib/python3.9/site-packages/gemato/cli.py", line 118, in parse_args
    with open(args.openpgp_key, 'rb') as f:
FileNotFoundError: [Errno 2] No such file or directory: '/usr/share/openpgp-keys/signify.asc'
 * ERROR: sec-keys/signify-keys-signify-30::gentoo failed (unpack phase):
 *   PGP signature verification failed
 * 
 * Call stack:
 *     ebuild.sh, line 127:  Called src_unpack
 *   environment, line 524:  Called verify-sig_src_unpack
 *   environment, line 634:  Called verify-sig_verify_detached '/var/tmp/portage/sec-keys/signify-keys-signify-30/distdir/signify-30.pub' '/var/tmp/portage/sec-keys/signify-keys-signify-30/distdir/signify-30.pub.asc'
 *   environment, line 657:  Called die
 * The specific snippet of code:
 *               gemato gpg-wrap -K "${key}" "${extra_args[@]}" -- gpg --verify "${sig}" "${file}" || die "PGP signature verification failed"
 * 
 * If you need support, post the output of `emerge --info '=sec-keys/signify-keys-signify-30::gentoo'`,
 * the complete build log and the output of `emerge -pqv '=sec-keys/signify-keys-signify-30::gentoo'`.
 * The complete build log is located at '/var/tmp/portage/sec-keys/signify-keys-signify-30/temp/build.log'.
 * The ebuild environment file is located at '/var/tmp/portage/sec-keys/signify-keys-signify-30/temp/environment'.
 * Working directory: '/var/tmp/portage/sec-keys/signify-keys-signify-30/work'
 * S: '/var/tmp/portage/sec-keys/signify-keys-signify-30/work'

[Comment 1 Sam James 2021-12-20 00:06:56 UTC]

Thanks!

[Comment 2 Larry the Git Cow 2021-12-20 00:10:03 UTC]

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ee2340975ceb94538e7e96375a6067377e2a8115

commit ee2340975ceb94538e7e96375a6067377e2a8115
Author:     Sam James <[e-mail]>
AuthorDate: 2021-12-20 00:09:45 +0000
Commit:     Sam James <[e-mail]>
CommitDate: 2021-12-20 00:09:45 +0000

    sec-keys/signify-keys-signify: add missing verify-sig BDEPEND
    
    Closes: https://bugs.gentoo.org/829689
    Signed-off-by: Sam James <[e-mail]>

 sec-keys/signify-keys-signify/signify-keys-signify-30.ebuild | 2 ++
 1 file changed, 2 insertions(+)