Summary: | sys-apps/portage-3.0.61-r1: backtrace when processing global updates with signed binpkgs | ||
---|---|---|---|
Product: | Portage Development | Reporter: | Greg Kubaryk <greg.kubaryk> |
Component: | Binary packages support | Assignee: | Portage team <dev-portage> |
Status: | RESOLVED FIXED | ||
Severity: | normal | CC: | zmedico |
Priority: | Normal | Keywords: | PullRequest |
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
See Also: | https://github.com/gentoo/portage/pull/1237 | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | 921380 | ||
Bug Blocks: |
Description
Greg Kubaryk
2024-01-15 01:41:43 UTC
The package in question is validly signed, it seems. # gpg --homedir /etc/portage/gnupg image.tar.zst.sig gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg' gpg: WARNING: no command supplied. Trying to guess what you mean ... gpg: assuming signed data in 'image.tar.zst' gpg: Signature made Fri Jan 5 23:40:33 2024 EST gpg: using EDDSA key 420610404B2E91FD9A9F6A6453A6F182DAFE5EE1 gpg: Good signature from "hex gentoo binpkg key <root@purr>" [full] It's supposed to ignore the package if there's an existing valid signature, so maybe we can also do the same for InvalidSignature here: https://gitweb.gentoo.org/proj/portage.git/commit/?id=c00dbfb9d8e3c494173200436ec4c5bc2689707f There's another one in aux_update from bug 919419: https://gitweb.gentoo.org/proj/portage.git/commit/?id=a7bbb4fc4d38f770fc943f3b856c5de56e315fe4 tl;dr: patch seems good Manually applying the patch to /usr/lib/python3.11/site-packages/portage/dbapi/bintree.py allowed global updates to complete; I used /etc/portage/patches/sys-apps/portage-3.0.61-r1/1237.patch to install a "cleanly" patched 3.0.61-r1, and normal operations have resumed. The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/proj/portage.git/commit/?id=68f4ea8a90d8759a1aa859d9188017e21797bdd0 commit 68f4ea8a90d8759a1aa859d9188017e21797bdd0 Author: Zac Medico <zmedico@gentoo.org> AuthorDate: 2024-01-16 01:08:36 +0000 Commit: Zac Medico <zmedico@gentoo.org> CommitDate: 2024-01-16 05:25:20 +0000 Handle SignatureException during package moves Ignore package moves for packages that raise SignatureException, just as they are ignored for packages that have a valid signature. Bug: https://bugs.gentoo.org/922142 Signed-off-by: Zac Medico <zmedico@gentoo.org> lib/portage/dbapi/bintree.py | 16 ++++++++++++---- 1 file changed, 12 insertions(+), 4 deletions(-) The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=77c44c46194922509bc4f2b5cfc099412a560a69 commit 77c44c46194922509bc4f2b5cfc099412a560a69 Author: Sam James <sam@gentoo.org> AuthorDate: 2024-02-22 07:23:40 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2024-02-22 07:23:50 +0000 sys-apps/portage: add 3.0.62 Closes: https://bugs.gentoo.org/663324 Closes: https://bugs.gentoo.org/728046 Closes: https://bugs.gentoo.org/891137 Closes: https://bugs.gentoo.org/906368 Closes: https://bugs.gentoo.org/916566 Closes: https://bugs.gentoo.org/921170 Closes: https://bugs.gentoo.org/921208 Closes: https://bugs.gentoo.org/921400 Closes: https://bugs.gentoo.org/922038 Closes: https://bugs.gentoo.org/922142 Closes: https://bugs.gentoo.org/923368 Closes: https://bugs.gentoo.org/923750 Closes: https://bugs.gentoo.org/923841 Closes: https://bugs.gentoo.org/923852 Closes: https://bugs.gentoo.org/923854 Closes: https://bugs.gentoo.org/924192 Closes: https://bugs.gentoo.org/924273 Closes: https://bugs.gentoo.org/924585 Closes: https://bugs.gentoo.org/921380 Signed-off-by: Sam James <sam@gentoo.org> sys-apps/portage/Manifest | 1 + sys-apps/portage/portage-3.0.62.ebuild | 246 +++++++++++++++++++++++++++++++++ 2 files changed, 247 insertions(+) |