Bug 647100 – app-portage/gemato not playing well when squashfs is used

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Cănărău Constantin 2018-02-09 10:14:09 UTC]

I am using sys-fs/squashmount from mv overlay.
After syncing portage, gemato is unable to check signatures failing with:
"ERROR:root:Top-level Manifest not found in /usr/portage"

The problem is also reported here: https://forums.gentoo.org/viewtopic-p-8177874.html?sid=a01ac0dc95d8eef8b6c4aa11485d1f98

Added 
sync-rsync-verify-metamanifest = yes
sync-openpgp-key-path = /var/lib/gentoo/gkeys/keyrings/gentoo/release/pubring.gpg
to /etc/portage/repos.conf/gentoo.conf, but no change.

ls -als /var/lib/gentoo/gkeys/keyrings/gentoo/release/
total 52
 4 drwxr-xr-x 2 root root  4096 feb  6 02:20 .
 4 drwxr-xr-x 3 root root  4096 feb  4 18:37 ..
 4 -rw-r--r-- 1 root root  1928 feb  6 02:20 gkey.seeds
36 -rw-r--r-- 1 root root 35799 feb  6 02:20 pubring.gpg
 0 -rw-r--r-- 1 root root     0 feb  6 02:20 secring.gpg
 4 -rw-r--r-- 1 root root  1200 feb  6 02:20 trustdb.gpg

There are Manifest and Manifest.files.gz in /usr/portage

[ebuild   R    ] app-portage/gemato-11.0::gentoo  USE="blake2 bzip2 gpg -lzma -sha3 {-test}" PYTHON_TARGETS="python2_7 python3_6 -pypy -python3_4 -python3_5" 0 KiB
[ebuild   R    ] sys-apps/portage-2.3.24-r1::gentoo  USE="(ipc) native-extensions rsync-verify (xattr) -build -doc -epydoc -gentoo-dev (-selinux)" PYTHON_TARGETS="python2_7 python3_6 -pypy -python3_4 -python3_5" 0 KiB

I know that squashmount is an unofficial package and I understand if you close the bug as invalid.

Portage 2.3.24 (python 3.6.4-final-0, default/linux/amd64/17.1/no-multilib/hardened, gcc-7.3.0, glibc-2.27-r1, 4.15.2-gentoo-costel x86_64)
=================================================================
System uname: Linux-4.15.2-gentoo-costel-x86_64-Intel-R-_Core-TM-_i7-6700K_CPU_@_4.00GHz-with-gentoo-2.4.1
KiB Mem:    32946804 total,  28084436 free
KiB Swap:          0 total,         0 free
Timestamp of repository gentoo: Fri, 09 Feb 2018 09:30:01 +0000
Head commit of repository gentoo: a83936d543a480a9ff3ce904ae7d75a74a398ca3
sh bash 4.4_p18
ld GNU gold (Gentoo 2.30 p1 2.30.0) 1.15
app-shells/bash:          4.4_p18::gentoo
dev-java/java-config:     2.2.0-r3::gentoo
dev-lang/perl:            5.26.1-r1::gentoo
dev-lang/python:          2.7.14-r1::newer, 3.6.4::newer
dev-util/cmake:           3.10.2::gentoo
dev-util/pkgconfig:       0.29.2::gentoo
sys-apps/baselayout:      2.4.1-r2::gentoo
sys-apps/sandbox:         2.12::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69-r4::gentoo
sys-devel/automake:       1.14.1-r1::gentoo, 1.15.1-r1::gentoo
sys-devel/binutils:       2.30::gentoo
sys-devel/gcc:            7.3.0::newer
sys-devel/gcc-config:     1.9.1::gentoo
sys-devel/libtool:        2.4.6-r4::gentoo
sys-devel/make:           4.2.1-r1::gentoo
sys-kernel/linux-headers: 4.15::gentoo (virtual/os-headers)
sys-libs/glibc:           2.27-r1::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: -1000
    sync-rsync-verify-metamanifest: yes
    sync-rsync-extra-opts: --human-readable --delete-before --progress
    sync-rsync-vcs-ignore: true

added
    location: /usr/portage/local/added
    masters: gentoo
    priority: 30

gnome-next
    location: /usr/portage/local/gnome-next
    sync-type: laymansync
    sync-uri: https://github.com/Heather/gentoo-gnome.git
    masters: gentoo
    priority: 50

mv
    location: /usr/portage/local/mv
    sync-type: laymansync
    sync-uri: https://anongit.gentoo.org/git/user/mv.git
    masters: gentoo
    priority: 50

newer
    location: /usr/portage/local/newer
    masters: gentoo
    priority: 100

python
    location: /usr/portage/local/python
    masters: gentoo
    priority: 100

Installed sets: @desktop, @dev, @minimal
ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="*"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O3 -pipe -march=native -mtune=skylake -w -fomit-frame-pointer -flto=8 -floop-nest-optimize -ffast-math -funsafe-math-optimizations -fstack-protector-strong -mindirect-branch=thunk"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php7.2/ext-active/ /etc/php/cgi-php7.2/ext-active/ /etc/php/cli-php7.2/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-O3 -pipe -march=native -mtune=skylake -w -fomit-frame-pointer -flto=8 -floop-nest-optimize -ffast-math -funsafe-math-optimizations -fstack-protector-strong -mindirect-branch=thunk"
DISTDIR="/mnt/linux/distfiles"
EMERGE_DEFAULT_OPTS="--jobs=4 --load-average=11 --keep-going --with-bdeps=y --complete-graph --quiet-build=n --autounmask-write"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs candy cgroup collision-protect config-protect-if-modified distlocks fail-clean fixlafiles ipc-sandbox merge-sync multilib-strict news nodoc noinfo parallel-fetch parallel-install preserve-libs protect-owned sandbox sfperms strict unknown-features-filter unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://ftp.romnet.org/gentoo/ http://mirrors.evowise.com/gentoo/ ftp://ftp.romnet.org/gentoo/ http://distfiles.gentoo.org/"
LANG="ro_RO.UTF-8"
LC_ALL="ro_RO.UTF-8"
LDFLAGS="-Wl,-O1,--sort-common,--hash-style=gnu,--enable-new-dtags,--as-needed,-z,relro,-z,now -O3 -pipe -march=native -mtune=skylake -w -fomit-frame-pointer -flto=8 -floop-nest-optimize -ffast-math -funsafe-math-optimizations -fstack-protector-strong -mindirect-branch=thunk"
LINGUAS="ro en"
MAKEOPTS="-j8 --load-average=10"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_EXTRA_OPTS="--human-readable --delete-before --progress"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="X a52 aac acl acpi aes alsa amd64 appindicator avx avx2 bluetooth branding bzip2 cairo caps colord crypt cups custom-cflags custom-optimization cxx dbus egl encode exif fam flac fma3 gif glamor gles gpm gstreamer gtk gtk3 hardened iconv icu idn ipv6 jemalloc jpeg lcms libnotify libressl lz4 mad mmx mmxext mp3 mp4 mpeg ncurses nls nptl ogg opengl openmp opus pam pango pcre pdf perl pie png policykit popcnt pulseaudio python readline sdl seccomp server sse sse2 sse3 sse4_1 sse4_2 ssl ssp ssse3 svg systemd threads tiff truetype udev udisks unicode usb vaapi vdpau vhosts vorbis wayland x264 x265 xattr xcb xtpax xvid zlib" ABI_X86="64" ALSA_CARDS="hda-intel usb-audio" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx avx2 fma3 mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" CURL_SSL="libressl" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="evdev keyboard mouse" KERNEL="linux" L10N="ro en" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LLVM_TARGETS="AMDGPU BPF NVPTX X86" NETBEANS_MODULES="apisupport extide javafx php profiler websvccommon" NGINX_MODULES_HTTP="access auth_basic autoindex browser charset fastcgi gzip limit_conn limit_req memcached referer rewrite split_clients userid gunzip naxsi realip" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php7-2" POSTGRES_TARGETS="postgres9_5" PYTHON_SINGLE_TARGET="python3_6" PYTHON_TARGETS="python2_7 python3_6" RUBY_TARGETS="ruby25" USERLAND="GNU" VIDEO_CARDS="intel i965 nvidia" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS

[Comment 1 Michał Górny 2018-02-09 11:25:09 UTC]

If this is about overlayfs, then it's a known issue. I've sent a spec update to the ml yesterday about it and I'm waiting for update on security implications of the necessary changes.

[Comment 2 Pavel Goran 2018-03-02 04:18:32 UTC]

I encountered this problem as well.

/usr/portage is an overlayfs mount (though I don't use squashmount).

[Comment 3 Larry the Git Cow 2018-03-11 19:55:12 UTC]

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=14e310b622db570f7da09df2855403cfafabad7b

commit 14e310b622db570f7da09df2855403cfafabad7b
Author:     Michał Górny <[e-mail]>
AuthorDate: 2018-03-11 19:53:48 +0000
Commit:     Michał Górny <[e-mail]>
CommitDate: 2018-03-11 19:55:05 +0000

    app-portage/gemato: Bump to 12.0
    
    Closes: https://bugs.gentoo.org/647100
    Closes: https://bugs.gentoo.org/648408

 app-portage/gemato/Manifest           |  1 +
 app-portage/gemato/gemato-12.0.ebuild | 34 ++++++++++++++++++++++++++++++++++
 2 files changed, 35 insertions(+)