Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 57445

Summary: repoman goes into endless loop on gpg key problems
Product: Portage Development Reporter: Daniel Black (RETIRED) <dragonheart>
Component: RepomanAssignee: Portage team <dev-portage>
Status: RESOLVED FIXED    
Severity: minor CC: betelgeuse, vapier
Priority: High Keywords: InVCS
Version: unspecified   
Hardware: All   
OS: All   
Whiteboard:
Package list:
Runtime testing required: ---
Bug Depends on:    
Bug Blocks: 115839    
Attachments: repoman.diff

Description Daniel Black (RETIRED) gentoo-dev 2004-07-17 21:58:47 UTC
When doing a repoman commit with FEATURES=sign and PORTAGE_GPG_KEY=... (where the key is password protected throws repoman into an endless loop. After quiting this there is no Manifest commited.
Comment 1 Daniel Black (RETIRED) gentoo-dev 2004-07-17 22:27:43 UTC
No traceback sorry just this when a repoman commit is done.

<<< files/pdnsd.rc6
<<< files/digest-pdnsd-1.1.10
>>> Computed message digests.

gpg: no default secret key: secret key not available
gpg: [stdin]: clearsign failed: secret key not available
!!! YOU MUST sign the Manifest.
!!! You can also disable this for the time being by removing FEATURES='sign'gpg: no default secret key: secret key not available
gpg: [stdin]: clearsign failed: secret key not available
!!! YOU MUST sign the Manifest.
!!! You can also disable this for the time being by removing FEATURES='sign'gpg: no default secret key: secret key not available
gpg: [stdin]: clearsign failed: secret key not available
!!! YOU MUST sign the Manifest.
!!! You can also disable this for the time being by removing FEATURES='sign'gpg: no default secret key: secret key not available
gpg: [stdin]: clearsign failed: secret key not available
!!! YOU MUST sign the Manifest.
!!! You can also disable this for the time being by removing FEATURES='sign'gpg: no default secret key: secret key not available
gpg: [stdin]: clearsign failed: secret key not available
!!! YOU MUST sign the Manifest.
!!! You can also disable this for the time being by removing FEATURES='sign'gpg: no default secret key: secret key not available
gpg: [stdin]: clearsign failed: secret key not available
!!! YOU MUST sign the Manifest.
!!! You can also disable this for the time being by removing FEATURES='sign'gpg: no default secret key: secret key not available
Comment 2 Marius Mauch (RETIRED) gentoo-dev 2004-07-18 06:10:21 UTC
Did you set PORTAGE_GPG_DIR ?
Comment 3 Daniel Black (RETIRED) gentoo-dev 2004-07-18 15:29:20 UTC
no.
Comment 4 Marius Mauch (RETIRED) gentoo-dev 2004-07-18 15:43:26 UTC
So the problem is not the passphares on the key, gpg simply can't find your key (remember that portage probably runs under a different user with a different $HOME). PORTAGE_GPG_DIR should be set to the dir where your keyring for signing is.
Comment 5 Nicholas Jones (RETIRED) gentoo-dev 2004-08-15 15:09:03 UTC
This should get moved into portage_gpg.py and handled with checks and exceptions.

bug 60384 describes an issue with gnupg-1.9 not working/existing.
Comment 6 Alec Warner (RETIRED) archtester gentoo-dev Security 2006-01-25 22:14:14 UTC
Can anyone duplicate this with a recent version of repoman/portage? ( preferably 2.0.53 or greater ).
Comment 7 Jason Stubbs (RETIRED) gentoo-dev 2006-01-25 22:38:54 UTC
Yep.
Comment 8 Petteri Räty (RETIRED) gentoo-dev 2006-02-11 09:53:39 UTC
Checking in Manifest;
/var/cvsroot/gentoo-x86/net-p2p/azureus-bin/Manifest,v  <--  Manifest
new revision: 1.75; previous revision: 1.74
done
gpg: no default secret key: unusable secret key
gpg: .//Manifest: clearsign failed: unusable secret key
!!! gpg exited with '512' status
!!! YOU MUST sign the Manifest.
!!! You can also disable this for the time being by removing FEATURES='sign'gpg: no default secret key: unusable secret key
gpg: .//Manifest: clearsign failed: unusable secret key
!!! gpg exited with '512' status
!!! YOU MUST sign the Manifest.
!!! You can also disable this for the time being by removing FEATURES='sign'gpg: no default secret key: unusable secret key
gpg: .//Manifest: clearsign failed: unusable secret key

Repoman also goes into an endless loop with an expired key.
Comment 9 solar (RETIRED) gentoo-dev 2006-02-12 20:47:59 UTC
Created attachment 79643 [details, diff]
repoman.diff

Does this help at all? Atleat with bailing?
Comment 10 Alec Warner (RETIRED) archtester gentoo-dev Security 2006-02-17 16:27:29 UTC
*** Bug 72873 has been marked as a duplicate of this bug. ***
Comment 11 solar (RETIRED) gentoo-dev 2006-03-24 15:30:14 UTC
that patch was bogus. dont try it
Comment 12 Zac Medico gentoo-dev 2006-04-18 03:01:52 UTC
This is fixed in svn r3173.
Comment 13 Zac Medico gentoo-dev 2006-04-18 03:37:18 UTC
Released in 2.1_pre9-r1.