Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

B42F6819007F00F88E364FD4036A9C25BF357DD4 key not found #22

Closed
rasekar2000 opened this issue Jun 19, 2016 · 13 comments
Closed

B42F6819007F00F88E364FD4036A9C25BF357DD4 key not found #22

rasekar2000 opened this issue Jun 19, 2016 · 13 comments

Comments

@rasekar2000
Copy link

https://gowalker.org/github.com/tianon/gosu

FROM debian

ENV GOSU_VERSION 1.7
RUN set -x
When I run, its not working .. because ..

&& gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \

http://ha.pool.sks-keyservers.net/ This key is not existing as per this website as well.

Can you please give a solution?
Thanks in advance.

@tianon
Copy link
Owner

tianon commented Jun 21, 2016

I can't seem to reproduce (http://ha.pool.sks-keyservers.net/pks/lookup?op=get&search=0xB42F6819007F00F88E364FD4036A9C25BF357DD4):

$ docker run -it --rm debian:jessie
root@966eb1c9b876:/# gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4
gpg: directory `/root/.gnupg' created
gpg: new configuration file `/root/.gnupg/gpg.conf' created
gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run
gpg: keyring `/root/.gnupg/secring.gpg' created
gpg: keyring `/root/.gnupg/pubring.gpg' created
gpg: requesting key BF357DD4 from hkp server ha.pool.sks-keyservers.net
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key BF357DD4: public key "Tianon Gravi <tianon@tianon.xyz>" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1  (RSA: 1)
root@966eb1c9b876:/# gpg --list-keys
/root/.gnupg/pubring.gpg
------------------------
pub   4096R/BF357DD4 2014-02-28
uid                  Tianon Gravi <tianon@tianon.xyz>
uid                  Tianon Gravi <tianon@debian.org>
uid                  Tianon Gravi <tianon@dockerproject.org>
uid                  Andrew Page (tianon) <andrew@infosiftr.com>
uid                  Andrew Page (tianon) <andrew@vitalroute.com>
uid                  Andrew Page (Tianon Gravi) <admwiggin@gmail.com>
uid                  Tianon Gravi (Andrew Page) <tianon@infosiftr.com>
sub   4096R/769826E6 2014-02-28 [expires: 2017-08-02]

@rasekar2000
Copy link
Author

Let me check it now

@rasekar2000
Copy link
Author

rasekar2000 commented Jun 22, 2016

RajRajen:scripts rajrajen$ docker exec -ti my_ubuntu /bin/bash
<vers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4
gpg: directory /root/.gnupg' created gpg: new configuration file/root/.gnupg/gpg.conf' created
gpg: WARNING: options in /root/.gnupg/gpg.conf' are not yet active during this run gpg: keyring/root/.gnupg/secring.gpg' created
gpg: keyring `/root/.gnupg/pubring.gpg' created
gpg: requesting key BF357DD4 from hkp server ha.pool.sks-keyservers.net
gpgkeys: key B42F6819007F00F88E364FD4036A9C25BF357DD4 can't be retrieved
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0
root@dec6710df59e:/data#

I noticed that I am on Ubuntu not on debian:jessie

@suckowbiz
Copy link

Quite sure your ubuntu has no correct keyserver available (initally). Take a look how to make it working:

[devops:~] 130 $ docker run -it ubuntu bash
root@dc2caa798606:/# gpg --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4
gpg: directory `/root/.gnupg' created
gpg: new configuration file `/root/.gnupg/gpg.conf' created
gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run
gpg: keyring `/root/.gnupg/secring.gpg' created
gpg: keyring `/root/.gnupg/pubring.gpg' created
gpg: no keyserver known (use option --keyserver)
gpg: keyserver receive failed: bad URI
root@dc2caa798606:/# gpg --keyserver hkp://p80.pool.sks-keyservers.net:80 --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4
gpg: requesting key BF357DD4 from hkp server p80.pool.sks-keyservers.net
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key BF357DD4: public key "Tianon Gravi <tianon@tianon.xyz>" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1  (RSA: 1)

@rasekar2000
Copy link
Author

rasekar2000 commented Jun 24, 2016

Sorry for the delayed reply @suckowbiz . checked earlier. .let me start from scratch ubuntu than my custom ubuntu and update you. Thanks for replying .

@blacktop
Copy link

blacktop commented Nov 10, 2016

just started seeing this:

2016-11-10 22:19:17 (2.92 MB/s) - '/usr/local/bin/gosu.asc' saved [543/543]

+ mktemp -d
+ export GNUPGHOME=/tmp/tmp.eIAjiH
+ gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4
gpg: keybox '/tmp/tmp.eIAjiH/pubring.kbx' created
gpg: keyserver receive failed: No keyserver available

Using gliderlabs/alpine:3.4 and gosu 1.10

@blacktop
Copy link

update is just started working again?

@rasekar2000
Copy link
Author

It seems gosu is no longer required for alpine3.4 + redis3.2.6 as you can see in

https://github.com/docker-library/redis/blob/master/3.2/alpine/Dockerfile

https://github.com/docker-library/redis/blob/master/3.2/alpine/docker-entrypoint.sh

And also, i suspect that earlier I was using DockerToolbar for MAC .. but it is causing few issues and hence switched back to VM based docker in my MAC and it is working.

I am leaving it to the team to close this ticket at their convenice.

@tianon
Copy link
Owner

tianon commented Dec 21, 2016

Yeah, if you're on Alpine 3.4+, I'd really recommend checking out su-exec, since it's a much smaller alternative written in C which is designed to be feature-compatible, and is available in the Alpine repos. 👍

@tianon tianon closed this as completed Dec 21, 2016
@tnguyen14
Copy link

I am running into this same problem today

gpgkeys: key B42F6819007F00F88E364FD4036A9C25BF357DD4 not found on keyserver

Is this just a temporary issue that would be resolved eventually somehow?

@tianon
Copy link
Owner

tianon commented Jul 30, 2018

Definitely a temporary/server issue. The nature of the keyservers is that they constantly share keys between one another, making it essentially impossible to remove a key from the keyserver network once enough servers have shared it.

@benbro
Copy link

benbro commented Jan 19, 2019

I'm getting an error:

key B42F6819007F00F88E364FD4036A9C25BF357DD4 can't be retrieved

I also tried with port 80 so I don't think it's a firewall issue:
hkp://ha.pool.sks-keyservers.net:80

If you open http://ha.pool.sks-keyservers.net/ with a browser and enter the key you get an error:
No results found: No keys found

Disabling ipv6 works for me:

export GNUPGHOME="$(mktemp -d)"; \
echo "disable-ipv6" >> "$GNUPGHOME"/dirmngr.conf; \
gpg --batch --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; \
gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; \
gpgconf --kill all; \
rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc;

@tianon
Copy link
Owner

tianon commented Jan 21, 2019

See docker-library/official-images#4252, especially docker-library/official-images#4252 (comment) / docker-library/php#666, and thus https://github.com/tianon/pgp-happy-eyeballs (which is how I solve GPG server issues for my own machines, and it's been working very, very reliably for me).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

6 participants