bug#41266: Suggested command to import key does not work on debian

bug#41266: Suggested command to import key does not work on debian

[Julien Lepiller]

Hi,

I just installed a debian VM to test changes in the install script and found this issue when running the installer script:

First it fails because it cannot find the public key and suggests running:

wget … -q0 - | gpg --import

-q0 does not work with debian's wget, but -O works.

Aftcr importing the key, the script still complains it cannot find it. Re-running the same command with "sudo" in front of the gpg import command re-imports the key and the script is then able to find it.

My guess is that the first import imported the key in my user's keyring, but the script looks in root's keyring. The second attempt added the key to root's keyring.

bug#41266: Suggested command to import key does not work on debian

[Ricardo Wurmus]

Hi Julien,

> First it fails because it cannot find the public key and suggests running:
>
> wget … -q0 - | gpg --import
>
> -q0 does not work with debian's wget, but -O works.

The installer script does not display this command.  There is no zero in
the wget commands.

> Aftcr importing the key, the script still complains it cannot find
> it. Re-running the same command with "sudo" in front of the gpg import
> command re-imports the key and the script is then able to find it.
>
> My guess is that the first import imported the key in my user's
> keyring, but the script looks in root's keyring. The second attempt
> added the key to root's keyring.

Yes, this is correct.  Since the installer script runs as root the key
import also needs to be done as root to affect the root user’s keyring.

-- 
Ricardo

bug#41266: Suggested command to import key does not work on debian

[Julien Lepiller]

Le Thu, 14 May 2020 12:28:11 -0400,
Julien Lepiller <julien@lepiller.eu> a écrit :

> Hi,
> 
> I just installed a debian VM to test changes in the install script
> and found this issue when running the installer script:
> 
> First it fails because it cannot find the public key and suggests
> running:
> 
> wget … -q0 - | gpg --import
> 
> -q0 does not work with debian's wget, but -O works.
> 
> Aftcr importing the key, the script still complains it cannot find
> it. Re-running the same command with "sudo" in front of the gpg
> import command re-imports the key and the script is then able to find
> it.
> 
> My guess is that the first import imported the key in my user's
> keyring, but the script looks in root's keyring. The second attempt
> added the key to root's keyring.
> 

Forget the wget thing, it's my fault for not reading it properly. The
gpg command still needs to be run with sudo on at least fedora and
debian.

bug#41266: Suggested command to import key does not work on debian

[Bengt Richter]

Hi,

On +2020-05-17 21:25:54 +0200, Julien Lepiller wrote:
> Le Thu, 14 May 2020 12:28:11 -0400,
> Julien Lepiller <julien@lepiller.eu> a écrit :
> 
> > Hi,
> > 
> > I just installed a debian VM to test changes in the install script
> > and found this issue when running the installer script:
> > 
> > First it fails because it cannot find the public key and suggests
> > running:
> > 
> > wget … -q0 - | gpg --import
> > 
> > -q0 does not work with debian's wget, but -O works.
> > 
> > Aftcr importing the key, the script still complains it cannot find
> > it. Re-running the same command with "sudo" in front of the gpg
> > import command re-imports the key and the script is then able to find
> > it.
> > 
> > My guess is that the first import imported the key in my user's
> > keyring, but the script looks in root's keyring. The second attempt
> > added the key to root's keyring.
> > 
> 
> Forget the wget thing, it's my fault for not reading it properly. The
> gpg command still needs to be run with sudo on at least fedora and
> debian.
> 
> 
>
If the problem is actually expired keys vs nonexistent,
gpg --refresh-keys
might be worth trying.


-- 
Regards,
Bengt Richter

bug#41266: Suggested command to import key does not work on debian

[zimoun]

Hi,

On Sun, 17 May 2020 at 21:25, Julien Lepiller <julien@lepiller.eu> wrote:

> Forget the wget thing, it's my fault for not reading it properly. The
> gpg command still needs to be run with sudo on at least fedora and
> debian.

Now, the binary install script “guix-install.sh” displays:

  echo "  wget 'https://sv.gnu.org/people/viewgpg.php?user_id=15145' -qO - | sudo -i gpg --import -"

Therefore, it is fine, right?  I am closing but feel free to reopen if I
misread or miss something.


Cheers,
simon