GNU bug report logs - #37939
guix-install.sh: Fails to detect signing key on Debian10.

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 37939 in the body.
You can then email your comments to 37939 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Kai Mertens <kmx <at> posteo.net>
To: <bug-guix <at> gnu.org>
Subject: guix-install.sh: Fails to detect signing key on Debian10.
Date: Sun, 27 Oct 2019 09:59:39 +0100

[Message part 1 (text/plain, inline)]

Dear GNU Guix developers,

I just tried to install guix on top of a fresh debian10 system, which
has been installed from debian-live-10.0.0-amd64-gnome.iso and updated.

The guix install script fails in function chk_gpg_keyring(), although
the key is present.

If I remove the discard redirection >/dev/null 2>&1 from the gpg
command, the following message occurs:

 gpg: keyblock resource '/root/.gnupg/pubring.kbx': No such file or directory
 gpg: Fatal: /root/.gnupg: directory does not exist!

Of course these files do not exist, as I imported the key to the user
account, not to the root account. Then I executed the script as user,
using sudo.

This procedure works fine on trisquel7 or 8, but it fails on debian10.

I wonder why ‘sudo gpg’ does not make a difference between being called
via sudo versus being called as root.

Do I use debian the wrong way?

best regards
Kai

-- 
Kai Mertens <kmx <at> posteo.net>
OpenPGP Key-ID: 0x40B15AB4B05B5BF1 on keys.gnupg.net
Key fingerprint = 7C83 0A80 01FF 679C 6E8E  AFD3 40B1 5AB4 B05B 5BF1
What is that? Please check: https://emailselfdefense.fsf.org/en/

[Message part 2 (application/pgp-signature, inline)]

Message #8 received at 37939 <at> debbugs.gnu.org (full text, mbox):

From: Bengt Richter <bokr <at> bokr.com>
To: Kai Mertens <kmx <at> posteo.net>
Cc: 37939 <at> debbugs.gnu.org
Subject: Re: bug#37939: guix-install.sh: Fails to detect signing key on
 Debian10.
Date: Sun, 27 Oct 2019 05:15:17 -0700

Hi again Kai,

On +2019-10-27 09:59:39 +0100, Kai Mertens wrote:
> Dear GNU Guix developers,
> 
> I just tried to install guix on top of a fresh debian10 system, which
> has been installed from debian-live-10.0.0-amd64-gnome.iso and updated.
> 
> The guix install script fails in function chk_gpg_keyring(), although
> the key is present.
> 
> If I remove the discard redirection >/dev/null 2>&1 from the gpg
> command, the following message occurs:
> 
>  gpg: keyblock resource '/root/.gnupg/pubring.kbx': No such file or directory
>  gpg: Fatal: /root/.gnupg: directory does not exist!
> 
> Of course these files do not exist, as I imported the key to the user
> account, not to the root account. Then I executed the script as user,
> using sudo.
> 
> This procedure works fine on trisquel7 or 8, but it fails on debian10.
> 
> I wonder why ‘sudo gpg’ does not make a difference between being called
> via sudo versus being called as root.
>

man sudo ;-)

specifically the -i option

I think if you are a "sudoer" plain sudo switches you to root,
but keeps the environment you were in, with PATH etc, but
sudo -i will set the environment as if you logged in as root.

try "sudo set" and compare with "sudo -i set" 
(or env in place of set)

HTH
--
Regards,
Bengt Richter

Message #11 received at 37939 <at> debbugs.gnu.org (full text, mbox):

From: Kai Mertens <kmx <at> posteo.net>
To: Bengt Richter <bokr <at> bokr.com>
Cc: 37939 <at> debbugs.gnu.org
Subject: Re: bug#37939: guix-install.sh: Fails to detect signing key on
 Debian10.
Date: Sat, 16 Nov 2019 02:29:27 +0100

[Message part 1 (text/plain, inline)]

On Sun, 27 Oct 2019 05:15:17 -0700
Bengt Richter <bokr <at> bokr.com> wrote:

> Hi again Kai,
> 
> On +2019-10-27 09:59:39 +0100, Kai Mertens wrote:
> > Dear GNU Guix developers,
> > 
> > [...]
> >  
> 
> man sudo ;-)

Oops.

> 
> specifically the -i option
> 
> I think if you are a "sudoer" plain sudo switches you to root,
> but keeps the environment you were in, with PATH etc, 
> but sudo -i will set the environment as if you logged in as root.
> 
> try "sudo set" and compare with "sudo -i set" 
> (or env in place of set)

Well, I tried "sudo --preserve-env ./guix-install.sh" on debian10, that
seems to work fine and the key in the sudoer’s keyring is detected. On
trisquel, I am used to use plain sudo instead.

Anyway – it is of course not a bug of the guix script. Maybe a usage
hint within the guix documentation in section 2.1 would be nice?

Thanks for your help,
best regards
Kai

-- 
Kai Mertens <kmx <at> posteo.net>
OpenPGP Key-ID: 0x40B15AB4B05B5BF1 on keys.gnupg.net
Key fingerprint = 7C83 0A80 01FF 679C 6E8E  AFD3 40B1 5AB4 B05B 5BF1
What is that? Please check: https://emailselfdefense.fsf.org/en/

[Message part 2 (application/pgp-signature, inline)]

Message #14 received at 37939 <at> debbugs.gnu.org (full text, mbox):

From: zimoun <zimon.toutoune <at> gmail.com>
To: Kai Mertens <kmx <at> posteo.net>
Cc: 37939 <at> debbugs.gnu.org, Bengt Richter <bokr <at> bokr.com>
Subject: Re: bug#37939: guix-install.sh: Fails to detect signing key on
 Debian10.
Date: Mon, 18 Nov 2019 11:24:38 +0100

Dear,

On Sat, 16 Nov 2019 at 03:34, Kai Mertens <kmx <at> posteo.net> wrote:

> Anyway – it is of course not a bug of the guix script. Maybe a usage
> hint within the guix documentation in section 2.1 would be nice?

Could you elaborate on a first attempt? I am not sure to understand
which hint you suggest.

The manual says: "It should be run as the root user." So to install on
my Debian, I simply log as root. :-)
If you speak about adding a hint when using the command sudo, then is
it really reliable on all the foreign distributions? Because the
command sudo is not always configured the same way, as you
experimented with Debian vs Trisquel.


All the best,
simon

Message #17 received at 37939 <at> debbugs.gnu.org (full text, mbox):

From: zimoun <zimon.toutoune <at> gmail.com>
To: Kai Mertens <kmx <at> posteo.net>
Cc: 37939 <at> debbugs.gnu.org, Bengt Richter <bokr <at> bokr.com>
Subject: Re: bug#37939: guix-install.sh: Fails to detect signing key on
 Debian10.
Date: Fri, 21 Feb 2020 15:24:00 +0100

Dear

> On Sat, 16 Nov 2019 at 03:34, Kai Mertens <kmx <at> posteo.net> wrote:

> > Anyway – it is of course not a bug of the guix script. Maybe a usage
> > hint within the guix documentation in section 2.1 would be nice?

I think it is not a bug and I do not see what could be improved. I
would like to close this bug. Is it ok for you? Or do you have a
comment to add?

Thank you in advance.

All the best,
simon

Message #24 received at 37939-done <at> debbugs.gnu.org (full text, mbox):

From: zimoun <zimon.toutoune <at> gmail.com>
To: 37939-done <at> debbugs.gnu.org
Subject: bug#37939: guix-install.sh: Fails to detect signing key
Date: Fri, 22 May 2020 02:18:03 +0200

Dear,

Because it is not a bug and after 12 weeks without any activity, I am closing.

Best regards,
simon

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.