Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
portage rsync: Refreshing keys via WKD ... [ !! ][Solved]
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
CaptainBlood
Advocate
Advocate


Joined: 24 Jan 2010
Posts: 3641

PostPosted: Tue Jan 09, 2024 2:26 am    Post subject: portage rsync: Refreshing keys via WKD ... [ !! ][Solved] Reply with quote

Code:
>>> Syncing repository 'gentoo' into '/var/db/repos/gentoo'...
 * Using keys from /usr/share/openpgp-keys/gentoo-release.asc
 * Refreshing keys via WKD ...                                           [ !! ]
 * Refreshing keys from keyserver hkps://keys.gentoo.org ...             [ ok ]
>>> Starting rsync with rsync://185.41.106.155/gentoo-portage...
What's happening there?
Local config issue?
Remote config issue?

Any idea?

Thks 4 ur attention, interest & support.
_________________
USE="-* ..." in /etc/portage/make.conf here, i.e. a countermeasure to portage implicit braces, belt & diaper paradigm
LT: "I've been doing a passable imitation of the Fontana di Trevi, except my medium is mucus. Sooo much mucus. "


Last edited by CaptainBlood on Wed Jan 10, 2024 3:54 pm; edited 3 times in total
Back to top
View user's profile Send private message
jburns
Veteran
Veteran


Joined: 18 Jan 2007
Posts: 1214
Location: Massachusetts USA

PostPosted: Tue Jan 09, 2024 3:22 am    Post subject: Reply with quote

You could try a different rsync mirror. See https://www.gentoo.org/support/rsync-mirrors/
Back to top
View user's profile Send private message
CaptainBlood
Advocate
Advocate


Joined: 24 Jan 2010
Posts: 3641

PostPosted: Tue Jan 09, 2024 8:47 pm    Post subject: Reply with quote

@jburns: Thks 4 the reply.

Changing rsync: in /etc/portage/gentoo.conf makes no difference.

2 other units with likely same settings are fine in this resoect.

There must be a way to reset the involved key pieces,
or to import from a working unit...
Thks 4 ur attention, interest & support.
_________________
USE="-* ..." in /etc/portage/make.conf here, i.e. a countermeasure to portage implicit braces, belt & diaper paradigm
LT: "I've been doing a passable imitation of the Fontana di Trevi, except my medium is mucus. Sooo much mucus. "
Back to top
View user's profile Send private message
CaptainBlood
Advocate
Advocate


Joined: 24 Jan 2010
Posts: 3641

PostPosted: Tue Jan 09, 2024 10:30 pm    Post subject: Reply with quote

Gentoo Wiki says this thingie is Gentoo dev related, which I'm not.

The question now is why these 2 units are allowed to perform WKD refresh?

I'm really getting confused.

Thks 4 ur attention, interest & support.
_________________
USE="-* ..." in /etc/portage/make.conf here, i.e. a countermeasure to portage implicit braces, belt & diaper paradigm
LT: "I've been doing a passable imitation of the Fontana di Trevi, except my medium is mucus. Sooo much mucus. "
Back to top
View user's profile Send private message
CaptainBlood
Advocate
Advocate


Joined: 24 Jan 2010
Posts: 3641

PostPosted: Wed Jan 10, 2024 2:29 am    Post subject: Reply with quote

Yeah, Gentoo wiki can be confusing me, sometimes.

However failing unit it configured IP4+IP6 because packages requires it,
where onlly IP4 ISP is here (if that's meaningful.

Uncommenting as described in /etc/gai.conf as
Code:
#    For sites which prefer IPv4 connections change the last line to
#
precedence ::ffff:0:0/96  100
did the trick.

Consider this as a workaround. Maybe there is a better way.

The real work would be to change those packages not requiring IP5 when not needed.

Thks 4 ur attention, interest & support.
_________________
USE="-* ..." in /etc/portage/make.conf here, i.e. a countermeasure to portage implicit braces, belt & diaper paradigm
LT: "I've been doing a passable imitation of the Fontana di Trevi, except my medium is mucus. Sooo much mucus. "
Back to top
View user's profile Send private message
grknight
Retired Dev
Retired Dev


Joined: 20 Feb 2015
Posts: 1695

PostPosted: Wed Jan 10, 2024 2:54 am    Post subject: Reply with quote

CaptainBlood wrote:
Uncommenting as described in /etc/gai.conf as
Code:
#    For sites which prefer IPv4 connections change the last line to
#
precedence ::ffff:0:0/96  100
did the trick

If you set any precedence lines in gai.conf, you should also include the first 4 lines of the other 4 types, so uncomment the 20, 30, 40 and 50 lines as well.
Not doing so may lead to delays. That's why it says "change" and not "uncomment"
Back to top
View user's profile Send private message
CaptainBlood
Advocate
Advocate


Joined: 24 Jan 2010
Posts: 3641

PostPosted: Wed Jan 10, 2024 11:47 am    Post subject: Reply with quote

As in
Code:
precedence  ::1/128       50
precedence  ::/0          40
precedence  2002::/16     30
precedence ::/96          20
#precedence ::ffff:0:0/96  10
#
#    For sites which prefer IPv4 connections change the last line to
#
precedence ::ffff:0:0/96  100
where all lines where initially commented.

Thks 4 ur attention, interest & support.
_________________
USE="-* ..." in /etc/portage/make.conf here, i.e. a countermeasure to portage implicit braces, belt & diaper paradigm
LT: "I've been doing a passable imitation of the Fontana di Trevi, except my medium is mucus. Sooo much mucus. "
Back to top
View user's profile Send private message
CaptainBlood
Advocate
Advocate


Joined: 24 Jan 2010
Posts: 3641

PostPosted: Wed Jan 10, 2024 2:35 pm    Post subject: Reply with quote

I' ve retested the whole thing, and it finally failed again.

Currently granting IP6 take precedence over IP4.

Investigating....
_________________
USE="-* ..." in /etc/portage/make.conf here, i.e. a countermeasure to portage implicit braces, belt & diaper paradigm
LT: "I've been doing a passable imitation of the Fontana di Trevi, except my medium is mucus. Sooo much mucus. "
Back to top
View user's profile Send private message
CaptainBlood
Advocate
Advocate


Joined: 24 Jan 2010
Posts: 3641

PostPosted: Wed Jan 10, 2024 3:53 pm    Post subject: Reply with quote

Spotted:

app-portage/gemato USE=gpg required in this repect

make.conf USE=-* here

It so happened 2 other working units have the consequent packages installed for likely because ebuild internal dependencies.

Thks 4 ur attention, interest & support.
_________________
USE="-* ..." in /etc/portage/make.conf here, i.e. a countermeasure to portage implicit braces, belt & diaper paradigm
LT: "I've been doing a passable imitation of the Fontana di Trevi, except my medium is mucus. Sooo much mucus. "
Back to top
View user's profile Send private message
CaptainBlood
Advocate
Advocate


Joined: 24 Jan 2010
Posts: 3641

PostPosted: Wed Jan 10, 2024 5:13 pm    Post subject: Reply with quote

My final 2 cents here is that sys-apps/portage deserves a gpg USE flag, instead of relying on profiles.

Thks 4 ur attention, interest & support.
_________________
USE="-* ..." in /etc/portage/make.conf here, i.e. a countermeasure to portage implicit braces, belt & diaper paradigm
LT: "I've been doing a passable imitation of the Fontana di Trevi, except my medium is mucus. Sooo much mucus. "
Back to top
View user's profile Send private message
sam_
Developer
Developer


Joined: 14 Aug 2020
Posts: 1693

PostPosted: Wed Jan 10, 2024 6:55 pm    Post subject: Reply with quote

Portage already has rsync-verify as a USE flag.
Back to top
View user's profile Send private message
Hu
Administrator
Administrator


Joined: 06 Mar 2007
Posts: 21744

PostPosted: Wed Jan 10, 2024 7:19 pm    Post subject: Reply with quote

  • sys-apps/portage has IUSE=+rsync-verify, as sam_ said (and I note here it is default enabled, unless suppressed by a user's USE=-rsync-verify or USE=-*).
  • sys-apps/portage has in its RDEPEND: !build? ( rsync-verify? ( app-portage/gemato[${PYTHON_USEDEP}] ) ) (irrelevant bits elided).
  • app-portage/gemato has IUSE=+gpg (therefore, again default-enabled).
CaptainBlood: this appears to be yet more fallout from the USE=-* that we keep telling you not to USE. There might be a bug here that Portage needs to RDEPEND on app-portage/gemato[gpg] to force the user to enable gpg support when Portage is doing verification (instead of accepting any gemato). I lack the background in Portage to determine whether USE=rsync-verify and gemato with USE=-gpg can ever work, so I cannot say with certainty that there is a bug here.
Back to top
View user's profile Send private message
CaptainBlood
Advocate
Advocate


Joined: 24 Jan 2010
Posts: 3641

PostPosted: Thu Jan 11, 2024 2:00 am    Post subject: Reply with quote

Hu wrote:
lack the background in Portage to determine whether USE=rsync-verify and gemato with USE=-gpg can ever work.
A. in Hu style: I do.
Hu wrote:
cannot say with certainty that there is a bug here.
A. What's the whole purpose of such a post?
Hu wrote:
this appears to be yet more fallout from the USE=-* that we keep telling you not to USE.
Q. Who is "we"? Sounds oddly personal. Imho referring to the appropriate Gentoo wiki would have been more constructive and neutral.

Banning USE=-* in make.conf ?

NEVER ! I don't want to have minus(-) in package.use.
Activating flags only.

Although it is not a perfect method it helps keeping the bloat away.
No belt+suspenders+diaper in my linuxes such as profile.

And it allows to detect poorly designed ebuilds, e.g. sys-apps/portage.
Just give it a try with app-portage/gemato[-gpg] to see if works.

I beg you stop beating that dead horse and moderate your self first; if you can.

Thks 4 ur attention, interest & support.
_________________
USE="-* ..." in /etc/portage/make.conf here, i.e. a countermeasure to portage implicit braces, belt & diaper paradigm
LT: "I've been doing a passable imitation of the Fontana di Trevi, except my medium is mucus. Sooo much mucus. "
Back to top
View user's profile Send private message
pietinger
Moderator
Moderator


Joined: 17 Oct 2006
Posts: 4268
Location: Bavaria

PostPosted: Thu Jan 11, 2024 3:02 am    Post subject: Reply with quote

CaptainBlood,

I would first like to refer you to this thread:
https://forums.gentoo.org/viewtopic-t-1163540.html

I strongly suspect that by "we" @Hu meant our Gentoo developers @sam and @asturm, as well as us moderators. I don't want to go any further into your post until I've slept on it for a night.
_________________
https://wiki.gentoo.org/wiki/User:Pietinger
Back to top
View user's profile Send private message
Hu
Administrator
Administrator


Joined: 06 Mar 2007
Posts: 21744

PostPosted: Thu Jan 11, 2024 4:18 pm    Post subject: Reply with quote

CaptainBlood wrote:
Hu wrote:
cannot say with certainty that there is a bug here.
A. What's the whole purpose of such a post?
The purpose of the post is to elaborate on sam_'s post, to explain why what sam_ posted is at least a partial explanation, and to bring up the possibility that the dependencies are insufficient to protect a user from USE=-*.
CaptainBlood wrote:
Hu wrote:
this appears to be yet more fallout from the USE=-* that we keep telling you not to USE.
Q. Who is "we"? Sounds oddly personal. Imho referring to the appropriate Gentoo wiki would have been more constructive and neutral.
As pietinger says, "we" is collectively the various forum users who, across more threads than I can count quickly, have advised you that setting USE=-* is discouraged and exposes you to weird problems that nobody else sees. If you insist on using USE=-*, then for any post where a system using USE=-* behaves badly, please either reproduce the problem in a more normal system, or at least mention that the system has USE=-* or show the relevant emerge --info so that we can see for ourselves that you have done this. It is reasonable for most readers not to expect you to have USE=-* because we keep telling you not to do it and it is very uncommon, so it is reasonable for those readers not to consider that your problem is self-inflicted by USE=-*, meaning we waste time considering common problems. Of all the users with whom I interacted, I can think of only two who use USE=-*: you, and stefan11111.
CaptainBlood wrote:
Banning USE=-* in make.conf ?
Of course not. You should use */* -* in /etc/portage/package.use if you want to disable everything. I still discourage that approach though, for the same reasons we have given before. I am not aware of any Gentoo developers or Gentoo tinderboxes that use USE=-*, so you are building a configuration that nobody has tried. That means you may encounter problems, and you should be prepared to support yourself.
CaptainBlood wrote:
NEVER ! I don't want to have minus(-) in package.use.
Activating flags only.
I'd rather not see the developers bring back the USE=nofeature convention just to accommodate this aversion to negations.
CaptainBlood wrote:
Although it is not a perfect method it helps keeping the bloat away.
No belt+suspenders+diaper in my linuxes such as profile.
That's fine, if you clean up your mess when things spill out on the floor.
CaptainBlood wrote:
And it allows to detect poorly designed ebuilds, e.g. sys-apps/portage.
Just give it a try with app-portage/gemato[-gpg] to see if works.
It will work fine here, since clearing that flag does not remove gnupg. As you can see in the ebuild, this flag only forces an RDEPEND, and does not directly change the installed code. Therefore, if the system happens to have gnupg installed for other reasons (as mine does), app-portage/gemato[-gpg] will work fine.
CaptainBlood wrote:
I beg you stop beating that dead horse and moderate your self first; if you can.
This is an odd request. You keep bringing us self-inflicted problems, not adequately notifying potential readers that this is a weird system with unusual properties, then expecting us to help you just as readily as we help new users who, in their inexperience, have made legitimate mistakes. You know better than to expect the system to be perfect when built with USE=-*. Stop causing yourself problems, or at least stop asking us to treat you the same as we treat users who don't know any better.

You are effectively running an ad-hoc tinderbox. Good etiquette around tinderboxes is that any reports from them should be clearly marked with any unusual circumstances from the tinderbox (non-default compiler, uncommon build settings, unusually strict network setup, unusually high parallelism, etc.), so that readers are primed to suspect unusual explanations. Your initial post here has none of those warnings.
Back to top
View user's profile Send private message
Zucca
Moderator
Moderator


Joined: 14 Jun 2007
Posts: 3373
Location: Rasi, Finland

PostPosted: Thu Jan 11, 2024 4:33 pm    Post subject: Reply with quote

CaptainBlood wrote:
And it allows to detect poorly designed ebuilds, e.g. sys-apps/portage.
Just give it a try with app-portage/gemato[-gpg] to see if works.
As always, please, file a bug.
_________________
..: Zucca :..
Gentoo IRC channels reside on Libera.Chat.
--
Quote:
I am NaN! I am a man!
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum