Gentoo Forums :: View topic - [SOLVED] can't open '/tmp/.private/root/portage-sign-....sig

[SOLVED] can't open '/tmp/.private/root/portage-sign-....sig

View unanswered posts
View posts from last 24 hours

Gentoo Forums Forum Index

Portage & Programming

View previous topic :: View next topic

Author

Message

pimiento
n00b
n00b

Joined: 09 Dec 2017
Posts: 22

Posted: Thu Oct 17, 2024 10:51 am Post subject: [SOLVED] can't open '/tmp/.private/root/portage-sign-....sig

Code:

$ sudo emerge -1g ensurepip-setuptools

Local copy of remote index is up-to-date and will be used.
Calculating dependencies... done!
Dependency resolution took 5.05 s (backtrack: 0/20).

>>> Emerging binary (1 of 1) dev-python/ensurepip-setuptools-74.1.3::gentoo
--2024-10-17 15:46:34-- https://distfiles.gentoo.org/releases/amd64/binpackages/23.0/x86-64/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-1.gpkg.tar
Resolving distfiles.gentoo.org (distfiles.gentoo.org)... 2a02:6ea0:c500::6, 2a02:6ea0:c500::5, 185.76.9.12, ...
Connecting to distfiles.gentoo.org (distfiles.gentoo.org)|2a02:6ea0:c500::6|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1198080 (1.1M) [application/x-tar]
Saving to: ‘/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-8.gpkg.tar.partial’

/var/cache/binpkgs/dev-python/ensurepip-setupto 100%[======================================================================================================>] 1.14M 1.95MB/s in 0.6s

2024-10-17 15:46:35 (1.95 MB/s) - ‘/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-8.gpkg.tar.partial’ saved [1198080/1198080]

* ensurepip-setuptools-74.1.3-8.gpkg.tar MD5 SHA1 size ;-) ... [ ok ]
!!!
gpg: WARNING: unsafe ownership on homedir '/etc/portage/gnupg'
gpg: can't open '/tmp/.private/root/portage-sign-m0j90tz1.sig': Permission denied
gpg: verify signatures failed: Permission denied
[GNUPG:] FAILURE verify 33587201
!!! Invalid binary package: '/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-8.gpkg.tar.partial', GPG verify failed

>>> Failed to emerge dev-python/ensurepip-setuptools-74.1.3, Log file:

>>> '/var/tmp/portage/dev-python/ensurepip-setuptools-74.1.3/temp/build.log'

Emerging without genbinpkg works well.

Last edited by pimiento on Fri Oct 18, 2024 4:46 pm; edited 1 time in total

Banana
Moderator

Joined: 21 May 2004
Posts: 1803
Location: Germany

Posted: Thu Oct 17, 2024 12:03 pm Post subject:

Please login as root diretly and not use sudo. This should help in your case. _________________ Forum Guidelines PFL - Portage file list - find which package a file or command belongs to. My delta-labs.org snippets do expire

pimiento
n00b
n00b

Joined: 09 Dec 2017
Posts: 22

Posted: Thu Oct 17, 2024 2:32 pm Post subject:

Banana wrote:

Please login as root diretly and not use sudo. This should help in your case.

Do you mean using

Code:

su -

Code:

$ su -
Password:
Last login: Thu Oct 17 19:29:42 +05 2024 on pts/2
# emerge -1g ensurepip-setuptools

Local copy of remote index is up-to-date and will be used.
Calculating dependencies... done!
Dependency resolution took 5.09 s (backtrack: 0/20).

>>> Emerging binary (1 of 1) dev-python/ensurepip-setuptools-74.1.3::gentoo
--2024-10-17 19:31:03-- https://distfiles.gentoo.org/releases/amd64/binpackages/23.0/x86-64/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-1.gpkg.tar
Resolving distfiles.gentoo.org (distfiles.gentoo.org)... 2a02:6ea0:c500::6, 2a02:6ea0:c500::5, 185.76.9.12, ...
Connecting to distfiles.gentoo.org (distfiles.gentoo.org)|2a02:6ea0:c500::6|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1198080 (1.1M) [application/x-tar]
Saving to: ‘/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-10.gpkg.tar.partial’

/var/cache/binpkgs/dev-python/ensurepip-setupto 100%[======================================================================================================>] 1.14M 1.90MB/s in 0.6s

2024-10-17 19:31:04 (1.90 MB/s) - ‘/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-10.gpkg.tar.partial’ saved [1198080/1198080]

* ensurepip-setuptools-74.1.3-10.gpkg.tar MD5 SHA1 size ;-) ... [ ok ]
!!!
gpg: WARNING: unsafe ownership on homedir '/etc/portage/gnupg'
gpg: can't open '/tmp/.private/root/portage-sign-u1lk9v8u.sig': Permission denied
gpg: verify signatures failed: Permission denied
[GNUPG:] FAILURE verify 33587201
!!! Invalid binary package: '/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-10.gpkg.tar.partial', GPG verify failed

>>> Failed to emerge dev-python/ensurepip-setuptools-74.1.3, Log file:

>>> '/var/tmp/portage/dev-python/ensurepip-setuptools-74.1.3/temp/build.log'

Hu
Administrator

Joined: 06 Mar 2007
Posts: 22876

Posted: Thu Oct 17, 2024 3:15 pm Post subject:

What is the output of namei -l /etc/portage/gnupg /tmp/.private/root?

Josef.95
Advocate

Joined: 03 Sep 2007
Posts: 4679
Location: Germany

Posted: Thu Oct 17, 2024 4:33 pm Post subject:

A refresh should probably work, see in Troubleshooting from https://wiki.gentoo.org/wiki/Gentoo_Binary_Host_Quickstart#Package_signature_verification

pimiento
n00b
n00b

Joined: 09 Dec 2017
Posts: 22

Posted: Fri Oct 18, 2024 5:43 am Post subject:

Hu wrote:

What is the output of namei -l /etc/portage/gnupg /tmp/.private/root?

Code:

$ namei -l /etc/portage/gnupg /tmp/.private/root
f: /etc/portage/gnupg
drwxr-xr-x root root /
drwxr-xr-x root root etc
drwxrwxr-x portage portage portage
drwxr-xr-x root root gnupg
f: /tmp/.private/root
drwxr-xr-x root root /
drwxrwxrwt root root tmp
drwx--x--x root root .private
drwx-----T root root root

logrusx
Advocate

Joined: 22 Feb 2018
Posts: 2528

Posted: Fri Oct 18, 2024 6:15 am Post subject:

I think this is related: https://forums.gentoo.org/viewtopic-t-1171290.html Best Regards, Georgi

pimiento
n00b
n00b

Joined: 09 Dec 2017
Posts: 22

Posted: Fri Oct 18, 2024 6:20 am Post subject:

logrusx wrote:

I think this is related: https://forums.gentoo.org/viewtopic-t-1171290.html

Best Regards,
Georgi

There is nothing about /tmp/.portage. As I see the problem is with /tmp/.portage permission. I've already removed /etc/portage/gnupg and done sudo getuto, so now there is only warning about /etc/portage/gnupg and the error is about /tmp/.portage. Actually I already got few problems with that .private subdir and would like to deactivate that feature but I don't remember where was that use-flag that enabled it.

logrusx
Advocate

Joined: 22 Feb 2018
Posts: 2528

Posted: Fri Oct 18, 2024 6:34 am Post subject:

pimiento wrote:

logrusx wrote:

I think this is related: https://forums.gentoo.org/viewtopic-t-1171290.html

Best Regards,
Georgi

Please don't use sudo. Use clean environment either with `su -` or directly logging in as root.

The fact that you don't see the same path means nothing. I put this here for your helpers to see. As you can see I myself wasn't able to help in the other thread but this is starting to look like a trend, that's why I linked both threads.

Best Regards,
Georgi

pimiento
n00b
n00b

Joined: 09 Dec 2017
Posts: 22

Posted: Fri Oct 18, 2024 6:45 am Post subject:

Sorry, but can you clarify to me what exactly should I do using su - ?

Code:

polpo@mail:~$ su - root
Password:
Last login: Thu Oct 17 19:30:46 +05 2024 on pts/0
mail ~ # rm -rf /etc/portage/gnupg/
mail ~ # getuto
* Initializing /etc/portage/gnupg ...
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: Generating Portage local OpenPGP trust key
gpg: done
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: checking the trustdb
gpg: marginals needed: 3 completes needed: 1 trust model: pgp
gpg: depth: 0 valid: 1 signed: 0 trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: key 9E6438C817072058: no user ID
gpg: key 9E6438C817072058: no user ID
gpg: key A13D0EF1914E7A72: no user ID
gpg: key A13D0EF1914E7A72: no user ID
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
pub rsa4096 2018-05-28 [C] [expires: 2026-07-01]
EF9538C9E8E64311A52CDEDFA13D0EF1914E7A72
uid [ unknown] Gentoo repository mirrors (automated git signing key) <repomirrorci@gentoo.org>
sub rsa2048 2018-05-28 [S] [expires: 2026-07-01]

pub rsa4096 2011-11-25 [C] [expires: 2026-07-01]
DCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D
uid [ unknown] Gentoo ebuild repository signing key (Automated Signing Key) <infrastructure@gentoo.org>
uid [ unknown] Gentoo Portage Snapshot Signing Key (Automated Signing Key)
sub rsa4096 2011-11-25 [S] [expires: 2026-07-01]

pub dsa1024 2004-07-20 [SC] [expires: 2025-07-01]
D99EAC7379A850BCE47DA5F29E6438C817072058
uid [ unknown] Gentoo Linux Release Engineering (Gentoo Linux Release Signing Key) <releng@gentoo.org>
sub elg2048 2004-07-20 [E] [expires: 2025-07-01]

gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'

pub rsa4096/A13D0EF1914E7A72
created: 2018-05-28 expires: 2026-07-01 usage: C
trust: unknown validity: unknown
Primary key fingerprint: EF95 38C9 E8E6 4311 A52C DEDF A13D 0EF1 914E 7A72

Gentoo repository mirrors (automated git signing key) <repomirrorci@gentoo.org>

This key is due to expire on 2026-07-01.

The signature will be marked as non-exportable.

gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: "F748E9B3C47E393CC24C8FAF7C2AC09CD98F2EDF" is not the primary fingerprint
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'

pub rsa4096/DB6B8C1F96D8BF6D
created: 2011-11-25 expires: 2026-07-01 usage: C
trust: unknown validity: unknown
Primary key fingerprint: DCD0 5B71 EAB9 4199 527F 44AC DB6B 8C1F 96D8 BF6D

Gentoo ebuild repository signing key (Automated Signing Key) <infrastructure@gentoo.org>
Gentoo Portage Snapshot Signing Key (Automated Signing Key)

This key is due to expire on 2026-07-01.

The signature will be marked as non-exportable.

gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: "E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250" is not the primary fingerprint
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'

pub dsa1024/9E6438C817072058
created: 2004-07-20 expires: 2025-07-01 usage: SC
trust: unknown validity: unknown
Primary key fingerprint: D99E AC73 79A8 50BC E47D A5F2 9E64 38C8 1707 2058

Gentoo Linux Release Engineering (Gentoo Linux Release Signing Key) <releng@gentoo.org>

This key is due to expire on 2025-07-01.

The signature will be marked as non-exportable.

gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: "C7FAC844D6122F080E1821A10403710E1415B4ED" is not the primary fingerprint
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'

pub rsa4096/BB572E0E2D182910
created: 2009-08-25 expires: 2026-07-01 usage: SC
trust: unknown validity: unknown
Primary key fingerprint: 13EB BDBE DE7A 1277 5DFD B1BA BB57 2E0E 2D18 2910

Gentoo Linux Release Engineering (Automated Weekly Release Key) <releng@gentoo.org>

This key is due to expire on 2026-07-01.

The signature will be marked as non-exportable.

gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: "534E4209AB49EEE1C19D96162C44695DB9F6043D" is not the primary fingerprint
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: next trustdb check due at 2025-07-01 [ ok ]
mail ~ # emerge -1g ensurepip-setuptools

Local copy of remote index is up-to-date and will be used.
Calculating dependencies... done!
Dependency resolution took 5.09 s (backtrack: 0/20).

>>> Emerging binary (1 of 1) dev-python/ensurepip-setuptools-74.1.3::gentoo
--2024-10-18 11:39:40-- https://distfiles.gentoo.org/releases/amd64/binpackages/23.0/x86-64/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-1.gpkg.tar
Resolving distfiles.gentoo.org (distfiles.gentoo.org)... 2a02:6ea0:ce00::5, 2a02:6ea0:ce00::3, 138.199.17.169, ...
Connecting to distfiles.gentoo.org (distfiles.gentoo.org)|2a02:6ea0:ce00::5|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1198080 (1.1M) [application/x-tar]
Saving to: ‘/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-12.gpkg.tar.partial’

/var/cache/binpkgs/dev-python/ensurepip-setuptools/en 100%[======================================================================================================================>] 1.14M 2.30MB/s in 0.5s

2024-10-18 11:39:41 (2.30 MB/s) - ‘/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-12.gpkg.tar.partial’ saved [1198080/1198080]

* ensurepip-setuptools-74.1.3-12.gpkg.tar MD5 SHA1 size ;-) ... [ ok ]
!!!
gpg: WARNING: unsafe ownership on homedir '/etc/portage/gnupg'
gpg: can't open '/tmp/.private/root/portage-sign-3waqsprd.sig': Permission denied
gpg: verify signatures failed: Permission denied
[GNUPG:] FAILURE verify 33587201
!!! Invalid binary package: '/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-12.gpkg.tar.partial', GPG verify failed

>>> Failed to emerge dev-python/ensurepip-setuptools-74.1.3, Log file:

>>> '/var/tmp/portage/dev-python/ensurepip-setuptools-74.1.3/temp/build.log'
mail ~ #

logrusx
Advocate

Joined: 22 Feb 2018
Posts: 2528

Posted: Fri Oct 18, 2024 6:53 am Post subject:

pimiento wrote:

Sorry, but can you clarify to me what exactly should I do using su - ?

Su - creates a new environment. Su without the dash or sudo and I guess doas do not. They give the root user your current user's environment. You can use su - without specifying the user, it defaults to root. When not running portage in a clean environment it sets the stage for problems. whether problems will arise, that depends on your regular user's environment.

Getuto run fine, despite the warnings. Maybe try to adjust permissions as shown in the linked thread, although I don't know if that'll help.

p.s. emerge --info might be useful.

Best Regards,
Georgi

pimiento
n00b
n00b

Joined: 09 Dec 2017
Posts: 22

Posted: Fri Oct 18, 2024 7:07 am Post subject:

logrusx wrote:

pimiento wrote:

Sorry, but can you clarify to me what exactly should I do using su - ?

I see the problem is with

Code:

gpg: can't open '/tmp/.private/root/portage-sign-3waqsprd.sig': Permission denied
gpg: verify signatures failed: Permission denied

do you have any ideas how to fix that?

logrusx
Advocate

Joined: 22 Feb 2018
Posts: 2528

Posted: Fri Oct 18, 2024 7:08 am Post subject:

Post your emerge --info. Also try chmod 700 /etc/portage/gnupg chmod 600 /etc/portage/gnupg/* Despite you seeing it in /tmp/.private, this is still gnupg related issue. BTW do you use gnome-keyring? Best Regards, Georgi

pimiento
n00b
n00b

Joined: 09 Dec 2017
Posts: 22

Posted: Fri Oct 18, 2024 7:27 am Post subject:

logrusx wrote:

Post your emerge --info.

Also try

chmod 700 /etc/portage/gnupg
chmod 600 /etc/portage/gnupg/*

Despite you seeing it in /tmp/.private, this is still gnupg related issue.

BTW do you use gnome-keyring?

Best Regards,
Georgi

No, I don't use gnome-keyring. Now, after chmod, the error is

Code:

>>> Emerging binary (1 of 1) dev-python/ensurepip-setuptools-74.1.3::gentoo
--2024-10-18 12:25:38-- https://distfiles.gentoo.org/releases/amd64/binpackages/23.0/x86-64/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-1.gpkg.tar
Resolving distfiles.gentoo.org (distfiles.gentoo.org)... 2a02:6ea0:ce00::5, 2a02:6ea0:ce00::3, 138.199.17.183, ...
Connecting to distfiles.gentoo.org (distfiles.gentoo.org)|2a02:6ea0:ce00::5|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1198080 (1.1M) [application/x-tar]
Saving to: ‘/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-14.gpkg.tar.partial’

/var/cache/binpkgs/dev-python/ensurepip-setuptools/en 100%[======================================================================================================================>] 1.14M 2.34MB/s in 0.5s

2024-10-18 12:25:39 (2.34 MB/s) - ‘/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-14.gpkg.tar.partial’ saved [1198080/1198080]

* ensurepip-setuptools-74.1.3-14.gpkg.tar MD5 SHA1 size ;-) ... [ ok ]
!!!
gpg: WARNING: unsafe ownership on homedir '/etc/portage/gnupg'
gpg: failed to create temporary file '/etc/portage/gnupg/.#lk0x0000561ebe78d020.mail.pvavilin.ru.13687': Permission denied
gpg: keyblock resource '/etc/portage/gnupg/pubring.kbx': Permission denied
[GNUPG:] ERROR add_keyblock_resource 33587201
gpg: can't open `/etc/portage/gnupg/random_seed': Permission denied
[GNUPG:] PLAINTEXT 74 0
[GNUPG:] NEWSIG
gpg: Signature made Sat Oct 12 21:22:09 2024 +05
gpg: using RSA key 534E4209AB49EEE1C19D96162C44695DB9F6043D
[GNUPG:] ERROR keydb_search 33554445
[GNUPG:] ERROR keydb_search 33554445
[GNUPG:] ERRSIG 2C44695DB9F6043D 1 10 01 1728750129 9 534E4209AB49EEE1C19D96162C44695DB9F6043D
[GNUPG:] NO_PUBKEY 2C44695DB9F6043D
gpg: Can't check signature: No public key
[GNUPG:] FAILURE gpg-exit 33554433
gpg: note: random_seed file not updated
!!! Invalid binary package: '/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-14.gpkg.tar.partial', GPG verify failed

>>> Failed to emerge dev-python/ensurepip-setuptools-74.1.3, Log file:

>>> '/var/tmp/portage/dev-python/ensurepip-setuptools-74.1.3/temp/build.log'

logrusx
Advocate

Joined: 22 Feb 2018
Posts: 2528

Posted: Fri Oct 18, 2024 7:33 am Post subject:

Now it's unsafe ownership(was permissions). What is the ownership or /etc/portage/gnupg? Have you done some fancy stuff with permissions/ownership? Will you post your emerge --info at last? Best Regards, Georgi

pimiento
n00b
n00b

Joined: 09 Dec 2017
Posts: 22

Posted: Fri Oct 18, 2024 4:45 pm Post subject:

Finally I removed mktemp from pambase and everything works wel.

Display posts from previous:

	Gentoo Forums Forum Index Portage & Programming	All times are GMT
Page 1 of 1

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Copyright 2001-2024 Gentoo Foundation, Inc. Designed by Kyle Manna © 2003; Style derived from original subSilver theme. | Hosting by Gossamer Threads Inc. © | Powered by phpBB 2.0.23-gentoo-p11 © 2001, 2002 phpBB Group
Privacy Policy