-
Notifications
You must be signed in to change notification settings - Fork 687
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
gpg error on Focal while submitting any message and document #5499
Comments
In Focal, The following diff solves the problem, question for the team, if this is a good way to move forward. diff --git a/install_files/ansible-base/roles/app/tasks/initialize_securedrop_app.yml b/install_files/ansible-base/roles/app/tasks/initialize_securedrop_app.yml
index 8d0892bcb..70732a84c 100644
--- a/install_files/ansible-base/roles/app/tasks/initialize_securedrop_app.yml
+++ b/install_files/ansible-base/roles/app/tasks/initialize_securedrop_app.yml
@@ -11,6 +11,7 @@
command: >
su -s /bin/bash -c 'gpg
--homedir {{ securedrop_data }}/keys
+ --no-default-keyring --keyring {{ securedrop_data }}/keys/pubring.gpg
--import {{ securedrop_data }}/{{ securedrop_app_gpg_public_key }}' {{ securedrop_user }}
register: gpg_app_key_import
changed_when: "'imported: 1' in gpg_app_key_import.stderr" |
kushaldas
added a commit
that referenced
this issue
Sep 30, 2020
`make dev-focal` will start a Focal container with SecureDrop running. Also updates the gpg2 --import command to import into the pubring.gpg keyring file explictly. Related Ansible change is tracked via #5499
12 tasks
kushaldas
added a commit
that referenced
this issue
Oct 6, 2020
`make dev-focal` will start a Focal container with SecureDrop running. Also updates the gpg2 --import command to import into the pubring.gpg keyring file explictly. Related Ansible change is tracked via #5499
kushaldas
added a commit
that referenced
this issue
Oct 7, 2020
`make dev-focal` will start a Focal container with SecureDrop running. Also updates the gpg2 --import command to import into the pubring.gpg keyring file explictly. Related Ansible change is tracked via #5499
kushaldas
added a commit
that referenced
this issue
Oct 8, 2020
`make dev-focal` will start a Focal container with SecureDrop running. Also updates the gpg2 --import command to import into the pubring.gpg keyring file explictly. Related Ansible change is tracked via #5499
kushaldas
added a commit
that referenced
this issue
Oct 21, 2020
`make dev-focal` will start a Focal container with SecureDrop running. Also updates the gpg2 --import command to import into the pubring.gpg keyring file explictly. Related Ansible change is tracked via #5499
kushaldas
added a commit
that referenced
this issue
Oct 29, 2020
`make dev-focal` will start a Focal container with SecureDrop running. Also updates the gpg2 --import command to import into the pubring.gpg keyring file explictly. Related Ansible change is tracked via #5499
kushaldas
added a commit
that referenced
this issue
Nov 4, 2020
`make dev-focal` will start a Focal container with SecureDrop running. Also updates the gpg2 --import command to import into the pubring.gpg keyring file explictly. Related Ansible change is tracked via #5499
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Description
On
Focal
staging environment, if we submit any document or message, the server throwsinternal error
.Steps to Reproduce
molecule converge -s libvirt-staging-focal -- --tags grsecurity
Expected Behavior
Actual Behavior
Shows error on the source interface.
The error message in the log shows
But, the files/message are actually shows in
/var/lib/securedrop/store
in proper encrypted form.Comments
Suggestions to fix, any other relevant information.
The text was updated successfully, but these errors were encountered: