Public key missing for Guix installation script?

Public key missing for Guix installation script?

[evan.straw99]

Hello,
Tried to post this once before but it got rejected from the mailing
list for some reason.
I'm trying to install GNU Guix using the installation script
(https://git.savannah.gnu.org/cgit/guix.git/plain/etc/guix-install.sh)
.

Early on, there is a GPG verification step that fails due to a missing
PGP key. The script tells me:
[1550113585.102]: Starting installation (Wed Feb 13 19:06:25 PST 2019)
[1550113585.106]: [ PASS ] verification of required commands completed
[1550113585.113]: [ FAIL ] Missing OpenPGP public key.  Fetch it with
this command:
  gpg --keyserver pool.sks-keyservers.net --recv-keys
3CE464558A84FDC69DB40CFB090B11993D9AEBB5

However, upon running that gpg command, I receive the following error
message:
"gpg: keyserver receive failed: No data"

It appears this key is missing from the key server. Additionally, I've
been searching all around other key servers for this key and I can't
find anything.
Not sure what to do about this. Is there a place I can find this key,
or is it safe to just comment out the verification step in the
installation script for now?

Thanks,
- Evan

Re: Public key missing for Guix installation script?

[Giovanni Biscuolo]

[-- Attachment #1: Type: text/plain, Size: 793 bytes --]

Hello Evan,

please consider that help-guix@gnu.org is more appropriate for this kind
of questions :-)

evan.Straw99@gmail.com writes:

[...]

> this command:
>   gpg --keyserver pool.sks-keyservers.net --recv-keys
> 3CE464558A84FDC69DB40CFB090B11993D9AEBB5
>
> However, upon running that gpg command, I receive the following error
> message:
> "gpg: keyserver receive failed: No data"

once it happened to me too: I tried a second time and I was able to
import the key

unfortunately it seems that the keyserver network is someway abused; see
https://dev.gnupg.org/T4163 for details

AFAIU there is nothing Guix devels can do about this, just be patient
about this keyserver issue ;-)

HTH!
Giovanni

[...]

-- 
Giovanni Biscuolo

Xelera IT Infrastructures

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]

Re: Public key missing for Guix installation script?

[Evan Straw]

[-- Attachment #1.1: Type: text/plain, Size: 1243 bytes --]

Hi,
Apologies for sending this to the wrong mailing list, I realized some
time after sending my message that help-guix would be better but didn't
want to duplicate my message. I'll send appropriate stuff there instead
in the future.

I managed to get the public key using the method you suggested on
Brett's thread in guix-devel. The installation script is working now,
thanks for your help!

-Evan

On 2/14/19 12:22 AM, Giovanni Biscuolo wrote:
> Hello Evan,
>
> please consider that help-guix@gnu.org is more appropriate for this kind
> of questions :-)
>
> evan.Straw99@gmail.com writes:
>
> [...]
>
>> this command:
>>   gpg --keyserver pool.sks-keyservers.net --recv-keys
>> 3CE464558A84FDC69DB40CFB090B11993D9AEBB5
>>
>> However, upon running that gpg command, I receive the following error
>> message:
>> "gpg: keyserver receive failed: No data"
> once it happened to me too: I tried a second time and I was able to
> import the key
>
> unfortunately it seems that the keyserver network is someway abused; see
> https://dev.gnupg.org/T4163 for details
>
> AFAIU there is nothing Guix devels can do about this, just be patient
> about this keyserver issue ;-)
>
> HTH!
> Giovanni
>
> [...]
>


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: Public key missing for Guix installation script?

[Giovanni Biscuolo]

[-- Attachment #1: Type: text/plain, Size: 866 bytes --]

Hi,

Evan Straw <evan.straw99@gmail.com> writes:

[...]

> I managed to get the public key using the method you suggested on
> Brett's thread in guix-devel. The installation script is working now,

for reference here, this is the useful snippet from the thread in
guix-devel:

--8<---------------cut here---------------start------------->8---
use:

$ gpg --keyserver hkps://hkps.pool.sks-keyservers.net --search-keys  3CE464558A84FDC69DB40CFB090B11993D9AEBB5

AFAIU for this to work out of the box users need a 2.1.11 and above
gnupg version, otherwise they should follow the instructions found here:

   https://sks-keyservers.net/overview-of-pools.php#pool_hkps
--8<---------------cut here---------------end--------------->8---

> thanks for your help!

you're wellcome :-)

[...]

-- 
Giovanni Biscuolo

Xelera IT Infrastructures

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]

Re: Public key missing for Guix installation script?

[Efraim Flashner]

[-- Attachment #1: Type: text/plain, Size: 1728 bytes --]

On Wed, Feb 13, 2019 at 09:02:46PM -0800, evan.straw99@gmail.com wrote:
> Hello,
> Tried to post this once before but it got rejected from the mailing
> list for some reason.
> I'm trying to install GNU Guix using the installation script
> (https://git.savannah.gnu.org/cgit/guix.git/plain/etc/guix-install.sh)
> .
> 
> Early on, there is a GPG verification step that fails due to a missing
> PGP key. The script tells me:
> [1550113585.102]: Starting installation (Wed Feb 13 19:06:25 PST 2019)
> [1550113585.106]: [ PASS ] verification of required commands completed
> [1550113585.113]: [ FAIL ] Missing OpenPGP public key.  Fetch it with
> this command:
>   gpg --keyserver pool.sks-keyservers.net --recv-keys
> 3CE464558A84FDC69DB40CFB090B11993D9AEBB5
> 
> However, upon running that gpg command, I receive the following error
> message:
> "gpg: keyserver receive failed: No data"
> 
> It appears this key is missing from the key server. Additionally, I've
> been searching all around other key servers for this key and I can't
> find anything.
> Not sure what to do about this. Is there a place I can find this key,
> or is it safe to just comment out the verification step in the
> installation script for now?
> 
> Thanks,
> - Evan
> 

I come across this occasionally, so in my scripts I've changed it to:
until gpg --recv-keys 3CE464558A84FDC69DB40CFB090B11993D9AEBB5; do echo "trying again..."; done

The key is also available at http://www.fdn.fr/~lcourtes/ludovic.asc

-- 
Efraim Flashner   <efraim@flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]