Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[SOLVED] can't open '/tmp/.private/root/portage-sign-....sig
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Portage & Programming
View previous topic :: View next topic  
Author Message
pimiento
n00b
n00b


Joined: 09 Dec 2017
Posts: 22

PostPosted: Thu Oct 17, 2024 10:51 am    Post subject: [SOLVED] can't open '/tmp/.private/root/portage-sign-....sig Reply with quote

Code:

$ sudo emerge -1g ensurepip-setuptools

Local copy of remote index is up-to-date and will be used.
Calculating dependencies... done!
Dependency resolution took 5.05 s (backtrack: 0/20).


>>> Emerging binary (1 of 1) dev-python/ensurepip-setuptools-74.1.3::gentoo
--2024-10-17 15:46:34--  https://distfiles.gentoo.org/releases/amd64/binpackages/23.0/x86-64/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-1.gpkg.tar
Resolving distfiles.gentoo.org (distfiles.gentoo.org)... 2a02:6ea0:c500::6, 2a02:6ea0:c500::5, 185.76.9.12, ...
Connecting to distfiles.gentoo.org (distfiles.gentoo.org)|2a02:6ea0:c500::6|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1198080 (1.1M) [application/x-tar]
Saving to: ‘/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-8.gpkg.tar.partial’

/var/cache/binpkgs/dev-python/ensurepip-setupto 100%[======================================================================================================>]   1.14M  1.95MB/s    in 0.6s   

2024-10-17 15:46:35 (1.95 MB/s) - ‘/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-8.gpkg.tar.partial’ saved [1198080/1198080]

 * ensurepip-setuptools-74.1.3-8.gpkg.tar MD5 SHA1 size ;-) ...          [ ok ]
!!!
gpg: WARNING: unsafe ownership on homedir '/etc/portage/gnupg'
gpg: can't open '/tmp/.private/root/portage-sign-m0j90tz1.sig': Permission denied
gpg: verify signatures failed: Permission denied
[GNUPG:] FAILURE verify 33587201
!!! Invalid binary package: '/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-8.gpkg.tar.partial', GPG verify failed

>>> Failed to emerge dev-python/ensurepip-setuptools-74.1.3, Log file:

>>>  '/var/tmp/portage/dev-python/ensurepip-setuptools-74.1.3/temp/build.log'


Emerging without genbinpkg works well.


Last edited by pimiento on Fri Oct 18, 2024 4:46 pm; edited 1 time in total
Back to top
View user's profile Send private message
Banana
Moderator
Moderator


Joined: 21 May 2004
Posts: 1800
Location: Germany

PostPosted: Thu Oct 17, 2024 12:03 pm    Post subject: Reply with quote

Please login as root diretly and not use sudo. This should help in your case.
_________________
Forum Guidelines

PFL - Portage file list - find which package a file or command belongs to.
My delta-labs.org snippets do expire
Back to top
View user's profile Send private message
pimiento
n00b
n00b


Joined: 09 Dec 2017
Posts: 22

PostPosted: Thu Oct 17, 2024 2:32 pm    Post subject: Reply with quote

Banana wrote:
Please login as root diretly and not use sudo. This should help in your case.


Do you mean using
Code:
su -
?

Code:

$ su -
Password:
Last login: Thu Oct 17 19:29:42 +05 2024 on pts/2
# emerge -1g ensurepip-setuptools

Local copy of remote index is up-to-date and will be used.
Calculating dependencies... done!
Dependency resolution took 5.09 s (backtrack: 0/20).


>>> Emerging binary (1 of 1) dev-python/ensurepip-setuptools-74.1.3::gentoo
--2024-10-17 19:31:03--  https://distfiles.gentoo.org/releases/amd64/binpackages/23.0/x86-64/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-1.gpkg.tar
Resolving distfiles.gentoo.org (distfiles.gentoo.org)... 2a02:6ea0:c500::6, 2a02:6ea0:c500::5, 185.76.9.12, ...
Connecting to distfiles.gentoo.org (distfiles.gentoo.org)|2a02:6ea0:c500::6|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1198080 (1.1M) [application/x-tar]
Saving to: ‘/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-10.gpkg.tar.partial’

/var/cache/binpkgs/dev-python/ensurepip-setupto 100%[======================================================================================================>]   1.14M  1.90MB/s    in 0.6s   

2024-10-17 19:31:04 (1.90 MB/s) - ‘/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-10.gpkg.tar.partial’ saved [1198080/1198080]

 * ensurepip-setuptools-74.1.3-10.gpkg.tar MD5 SHA1 size ;-) ...         [ ok ]
!!!
gpg: WARNING: unsafe ownership on homedir '/etc/portage/gnupg'
gpg: can't open '/tmp/.private/root/portage-sign-u1lk9v8u.sig': Permission denied
gpg: verify signatures failed: Permission denied
[GNUPG:] FAILURE verify 33587201
!!! Invalid binary package: '/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-10.gpkg.tar.partial', GPG verify failed

>>> Failed to emerge dev-python/ensurepip-setuptools-74.1.3, Log file:

>>>  '/var/tmp/portage/dev-python/ensurepip-setuptools-74.1.3/temp/build.log'
Back to top
View user's profile Send private message
Hu
Administrator
Administrator


Joined: 06 Mar 2007
Posts: 22869

PostPosted: Thu Oct 17, 2024 3:15 pm    Post subject: Reply with quote

What is the output of namei -l /etc/portage/gnupg /tmp/.private/root?
Back to top
View user's profile Send private message
Josef.95
Advocate
Advocate


Joined: 03 Sep 2007
Posts: 4679
Location: Germany

PostPosted: Thu Oct 17, 2024 4:33 pm    Post subject: Reply with quote

A refresh should probably work,
see in Troubleshooting from https://wiki.gentoo.org/wiki/Gentoo_Binary_Host_Quickstart#Package_signature_verification
Back to top
View user's profile Send private message
pimiento
n00b
n00b


Joined: 09 Dec 2017
Posts: 22

PostPosted: Fri Oct 18, 2024 5:43 am    Post subject: Reply with quote

Hu wrote:
What is the output of namei -l /etc/portage/gnupg /tmp/.private/root?


Code:

$ namei -l /etc/portage/gnupg /tmp/.private/root
f: /etc/portage/gnupg
drwxr-xr-x root    root    /
drwxr-xr-x root    root    etc
drwxrwxr-x portage portage portage
drwxr-xr-x root    root    gnupg
f: /tmp/.private/root
drwxr-xr-x root    root    /
drwxrwxrwt root    root    tmp
drwx--x--x root    root    .private
drwx-----T root    root    root
Back to top
View user's profile Send private message
logrusx
Advocate
Advocate


Joined: 22 Feb 2018
Posts: 2527

PostPosted: Fri Oct 18, 2024 6:15 am    Post subject: Reply with quote

I think this is related: https://forums.gentoo.org/viewtopic-t-1171290.html

Best Regards,
Georgi
Back to top
View user's profile Send private message
pimiento
n00b
n00b


Joined: 09 Dec 2017
Posts: 22

PostPosted: Fri Oct 18, 2024 6:20 am    Post subject: Reply with quote

logrusx wrote:
I think this is related: https://forums.gentoo.org/viewtopic-t-1171290.html

Best Regards,
Georgi


There is nothing about /tmp/.portage. As I see the problem is with /tmp/.portage permission. I've already removed /etc/portage/gnupg and done sudo getuto, so now there is only warning about /etc/portage/gnupg and the error is about /tmp/.portage. Actually I already got few problems with that .private subdir and would like to deactivate that feature but I don't remember where was that use-flag that enabled it.
Back to top
View user's profile Send private message
logrusx
Advocate
Advocate


Joined: 22 Feb 2018
Posts: 2527

PostPosted: Fri Oct 18, 2024 6:34 am    Post subject: Reply with quote

pimiento wrote:
logrusx wrote:
I think this is related: https://forums.gentoo.org/viewtopic-t-1171290.html

Best Regards,
Georgi


There is nothing about /tmp/.portage. As I see the problem is with /tmp/.portage permission. I've already removed /etc/portage/gnupg and done sudo getuto, so now there is only warning about /etc/portage/gnupg and the error is about /tmp/.portage. Actually I already got few problems with that .private subdir and would like to deactivate that feature but I don't remember where was that use-flag that enabled it.


Please don't use sudo. Use clean environment either with `su -` or directly logging in as root.

The fact that you don't see the same path means nothing. I put this here for your helpers to see. As you can see I myself wasn't able to help in the other thread but this is starting to look like a trend, that's why I linked both threads.

Best Regards,
Georgi
Back to top
View user's profile Send private message
pimiento
n00b
n00b


Joined: 09 Dec 2017
Posts: 22

PostPosted: Fri Oct 18, 2024 6:45 am    Post subject: Reply with quote

Sorry, but can you clarify to me what exactly should I do using su - ?

Code:

polpo@mail:~$ su - root
Password:
Last login: Thu Oct 17 19:30:46 +05 2024 on pts/0
mail ~ # rm -rf /etc/portage/gnupg/
mail ~ # getuto
 * Initializing /etc/portage/gnupg ...
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: Generating Portage local OpenPGP trust key
gpg: done
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: checking the trustdb
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: key 9E6438C817072058: no user ID
gpg: key 9E6438C817072058: no user ID
gpg: key A13D0EF1914E7A72: no user ID
gpg: key A13D0EF1914E7A72: no user ID
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
pub   rsa4096 2018-05-28 [C] [expires: 2026-07-01]
      EF9538C9E8E64311A52CDEDFA13D0EF1914E7A72
uid           [ unknown] Gentoo repository mirrors (automated git signing key) <repomirrorci@gentoo.org>
sub   rsa2048 2018-05-28 [S] [expires: 2026-07-01]

pub   rsa4096 2011-11-25 [C] [expires: 2026-07-01]
      DCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D
uid           [ unknown] Gentoo ebuild repository signing key (Automated Signing Key) <infrastructure@gentoo.org>
uid           [ unknown] Gentoo Portage Snapshot Signing Key (Automated Signing Key)
sub   rsa4096 2011-11-25 [S] [expires: 2026-07-01]

pub   dsa1024 2004-07-20 [SC] [expires: 2025-07-01]
      D99EAC7379A850BCE47DA5F29E6438C817072058
uid           [ unknown] Gentoo Linux Release Engineering (Gentoo Linux Release Signing Key) <releng@gentoo.org>
sub   elg2048 2004-07-20 [E] [expires: 2025-07-01]

gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'

pub  rsa4096/A13D0EF1914E7A72
     created: 2018-05-28  expires: 2026-07-01  usage: C
     trust: unknown       validity: unknown
 Primary key fingerprint: EF95 38C9 E8E6 4311 A52C  DEDF A13D 0EF1 914E 7A72

     Gentoo repository mirrors (automated git signing key) <repomirrorci@gentoo.org>

This key is due to expire on 2026-07-01.

The signature will be marked as non-exportable.

gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: "F748E9B3C47E393CC24C8FAF7C2AC09CD98F2EDF" is not the primary fingerprint
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'

pub  rsa4096/DB6B8C1F96D8BF6D
     created: 2011-11-25  expires: 2026-07-01  usage: C
     trust: unknown       validity: unknown
 Primary key fingerprint: DCD0 5B71 EAB9 4199 527F  44AC DB6B 8C1F 96D8 BF6D

     Gentoo ebuild repository signing key (Automated Signing Key) <infrastructure@gentoo.org>
     Gentoo Portage Snapshot Signing Key (Automated Signing Key)

This key is due to expire on 2026-07-01.

The signature will be marked as non-exportable.

gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: "E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250" is not the primary fingerprint
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'

pub  dsa1024/9E6438C817072058
     created: 2004-07-20  expires: 2025-07-01  usage: SC
     trust: unknown       validity: unknown
 Primary key fingerprint: D99E AC73 79A8 50BC E47D  A5F2 9E64 38C8 1707 2058

     Gentoo Linux Release Engineering (Gentoo Linux Release Signing Key) <releng@gentoo.org>

This key is due to expire on 2025-07-01.

The signature will be marked as non-exportable.

gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: "C7FAC844D6122F080E1821A10403710E1415B4ED" is not the primary fingerprint
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'

pub  rsa4096/BB572E0E2D182910
     created: 2009-08-25  expires: 2026-07-01  usage: SC
     trust: unknown       validity: unknown
 Primary key fingerprint: 13EB BDBE DE7A 1277 5DFD  B1BA BB57 2E0E 2D18 2910

     Gentoo Linux Release Engineering (Automated Weekly Release Key) <releng@gentoo.org>

This key is due to expire on 2026-07-01.

The signature will be marked as non-exportable.

gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: "534E4209AB49EEE1C19D96162C44695DB9F6043D" is not the primary fingerprint
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: WARNING: unsafe permissions on homedir '/etc/portage/gnupg'
gpg: next trustdb check due at 2025-07-01                                                                                                                                                                      [ ok ]
mail ~ # emerge -1g ensurepip-setuptools

Local copy of remote index is up-to-date and will be used.
Calculating dependencies... done!
Dependency resolution took 5.09 s (backtrack: 0/20).


>>> Emerging binary (1 of 1) dev-python/ensurepip-setuptools-74.1.3::gentoo
--2024-10-18 11:39:40--  https://distfiles.gentoo.org/releases/amd64/binpackages/23.0/x86-64/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-1.gpkg.tar
Resolving distfiles.gentoo.org (distfiles.gentoo.org)... 2a02:6ea0:ce00::5, 2a02:6ea0:ce00::3, 138.199.17.169, ...
Connecting to distfiles.gentoo.org (distfiles.gentoo.org)|2a02:6ea0:ce00::5|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1198080 (1.1M) [application/x-tar]
Saving to: ‘/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-12.gpkg.tar.partial’

/var/cache/binpkgs/dev-python/ensurepip-setuptools/en 100%[======================================================================================================================>]   1.14M  2.30MB/s    in 0.5s

2024-10-18 11:39:41 (2.30 MB/s) - ‘/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-12.gpkg.tar.partial’ saved [1198080/1198080]

 * ensurepip-setuptools-74.1.3-12.gpkg.tar MD5 SHA1 size ;-) ...         [ ok ]
!!!
gpg: WARNING: unsafe ownership on homedir '/etc/portage/gnupg'
gpg: can't open '/tmp/.private/root/portage-sign-3waqsprd.sig': Permission denied
gpg: verify signatures failed: Permission denied
[GNUPG:] FAILURE verify 33587201
!!! Invalid binary package: '/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-12.gpkg.tar.partial', GPG verify failed

>>> Failed to emerge dev-python/ensurepip-setuptools-74.1.3, Log file:

>>>  '/var/tmp/portage/dev-python/ensurepip-setuptools-74.1.3/temp/build.log'
mail ~ #
Back to top
View user's profile Send private message
logrusx
Advocate
Advocate


Joined: 22 Feb 2018
Posts: 2527

PostPosted: Fri Oct 18, 2024 6:53 am    Post subject: Reply with quote

pimiento wrote:
Sorry, but can you clarify to me what exactly should I do using su - ?


Su - creates a new environment. Su without the dash or sudo and I guess doas do not. They give the root user your current user's environment. You can use su - without specifying the user, it defaults to root. When not running portage in a clean environment it sets the stage for problems. whether problems will arise, that depends on your regular user's environment.

Getuto run fine, despite the warnings. Maybe try to adjust permissions as shown in the linked thread, although I don't know if that'll help.

p.s. emerge --info might be useful.

Best Regards,
Georgi
Back to top
View user's profile Send private message
pimiento
n00b
n00b


Joined: 09 Dec 2017
Posts: 22

PostPosted: Fri Oct 18, 2024 7:07 am    Post subject: Reply with quote

logrusx wrote:
pimiento wrote:
Sorry, but can you clarify to me what exactly should I do using su - ?


Su - creates a new environment. Su without the dash or sudo and I guess doas do not. They give the root user your current user's environment. You can use su - without specifying the user, it defaults to root. When not running portage in a clean environment it sets the stage for problems. whether problems will arise, that depends on your regular user's environment.

Getuto run fine, despite the warnings. Maybe try to adjust permissions as shown in the linked thread, although I don't know if that'll help.

p.s. emerge --info might be useful.

Best Regards,
Georgi


I see the problem is with

Code:

gpg: can't open '/tmp/.private/root/portage-sign-3waqsprd.sig': Permission denied
gpg: verify signatures failed: Permission denied


do you have any ideas how to fix that?
Back to top
View user's profile Send private message
logrusx
Advocate
Advocate


Joined: 22 Feb 2018
Posts: 2527

PostPosted: Fri Oct 18, 2024 7:08 am    Post subject: Reply with quote

Post your emerge --info.

Also try

chmod 700 /etc/portage/gnupg
chmod 600 /etc/portage/gnupg/*

Despite you seeing it in /tmp/.private, this is still gnupg related issue.

BTW do you use gnome-keyring?

Best Regards,
Georgi
Back to top
View user's profile Send private message
pimiento
n00b
n00b


Joined: 09 Dec 2017
Posts: 22

PostPosted: Fri Oct 18, 2024 7:27 am    Post subject: Reply with quote

logrusx wrote:
Post your emerge --info.

Also try

chmod 700 /etc/portage/gnupg
chmod 600 /etc/portage/gnupg/*

Despite you seeing it in /tmp/.private, this is still gnupg related issue.

BTW do you use gnome-keyring?

Best Regards,
Georgi


No, I don't use gnome-keyring. Now, after chmod, the error is

Code:

>>> Emerging binary (1 of 1) dev-python/ensurepip-setuptools-74.1.3::gentoo
--2024-10-18 12:25:38--  https://distfiles.gentoo.org/releases/amd64/binpackages/23.0/x86-64/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-1.gpkg.tar
Resolving distfiles.gentoo.org (distfiles.gentoo.org)... 2a02:6ea0:ce00::5, 2a02:6ea0:ce00::3, 138.199.17.183, ...
Connecting to distfiles.gentoo.org (distfiles.gentoo.org)|2a02:6ea0:ce00::5|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1198080 (1.1M) [application/x-tar]
Saving to: ‘/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-14.gpkg.tar.partial’

/var/cache/binpkgs/dev-python/ensurepip-setuptools/en 100%[======================================================================================================================>]   1.14M  2.34MB/s    in 0.5s   

2024-10-18 12:25:39 (2.34 MB/s) - ‘/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-14.gpkg.tar.partial’ saved [1198080/1198080]

 * ensurepip-setuptools-74.1.3-14.gpkg.tar MD5 SHA1 size ;-) ...         [ ok ]
!!!
gpg: WARNING: unsafe ownership on homedir '/etc/portage/gnupg'
gpg: failed to create temporary file '/etc/portage/gnupg/.#lk0x0000561ebe78d020.mail.pvavilin.ru.13687': Permission denied
gpg: keyblock resource '/etc/portage/gnupg/pubring.kbx': Permission denied
[GNUPG:] ERROR add_keyblock_resource 33587201
gpg: can't open `/etc/portage/gnupg/random_seed': Permission denied
[GNUPG:] PLAINTEXT 74 0
[GNUPG:] NEWSIG
gpg: Signature made Sat Oct 12 21:22:09 2024 +05
gpg:                using RSA key 534E4209AB49EEE1C19D96162C44695DB9F6043D
[GNUPG:] ERROR keydb_search 33554445
[GNUPG:] ERROR keydb_search 33554445
[GNUPG:] ERRSIG 2C44695DB9F6043D 1 10 01 1728750129 9 534E4209AB49EEE1C19D96162C44695DB9F6043D
[GNUPG:] NO_PUBKEY 2C44695DB9F6043D
gpg: Can't check signature: No public key
[GNUPG:] FAILURE gpg-exit 33554433
gpg: note: random_seed file not updated
!!! Invalid binary package: '/var/cache/binpkgs/dev-python/ensurepip-setuptools/ensurepip-setuptools-74.1.3-14.gpkg.tar.partial', GPG verify failed

>>> Failed to emerge dev-python/ensurepip-setuptools-74.1.3, Log file:

>>>  '/var/tmp/portage/dev-python/ensurepip-setuptools-74.1.3/temp/build.log'
Back to top
View user's profile Send private message
logrusx
Advocate
Advocate


Joined: 22 Feb 2018
Posts: 2527

PostPosted: Fri Oct 18, 2024 7:33 am    Post subject: Reply with quote

Now it's unsafe ownership(was permissions). What is the ownership or /etc/portage/gnupg?

Have you done some fancy stuff with permissions/ownership?

Will you post your emerge --info at last?

Best Regards,
Georgi
Back to top
View user's profile Send private message
pimiento
n00b
n00b


Joined: 09 Dec 2017
Posts: 22

PostPosted: Fri Oct 18, 2024 4:45 pm    Post subject: Reply with quote

Finally I removed mktemp from pambase and everything works wel.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Portage & Programming All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum