emerge --sync error

wenzi · Tux's lil' helper Joined: 18 Jan 2019 Posts: 106

I install gentoo follow the wiki, at this step emerge-webrsync,it's OK but emerge --sync, I get this error
OpenPGP keyring refresh failed:
gpg: refreshing 4 keys from hkps://keys.gentoo.org
gpg: keyserver refresh failed: General error
sorry for my poor English.

commie1337 · n00b Joined: 04 Aug 2019 Posts: 7

I've gotten the exact same error on my recent installs, it doesn't seem to change anything if you proceed with the installation without running the command. Hope that helps

.

nubiocicarini · Posted: Sun Aug 04, 2019 4:11 am Post subject:

https://gentoo.org/news/2019/07/03/sks-key-poisoning.html

mike155 · Posted: Sun Aug 04, 2019 11:58 am Post subject:

Many users report problems with tree verification. It doesn't work well on my machines, too.

I therefore recommend to disable it - until developers come up with an better solution.

Emerge portage without USE flag 'rsync-verify' AND
Add the lines below to the 'DEFAULT' section of /etc/portage/repos.conf/gentoo.conf:

Code:

sync-rsync-verify-metamanifest = no
sync-allow-hardlinks = no
Please look at the 'gentoo' section of the same file. In case there are entries that override the entries you added in step 2, remove them.

EDIT: added item 3 after this post.

NeddySeagoon · Posted: Sun Aug 04, 2019 12:09 pm Post subject:

wenzi,

That means that the keys you have cannot be checked for updates.
Its not a problem provided that the keys you have are not expired.

nubiocicarini,

That key poisoning attack does not apply to keys.gentoo.org as it does not sync with the rest of the hkps network and updates to it are restricted too.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.

nubiocicarini · Posted: Sun Aug 04, 2019 6:10 pm Post subject:

leonchik1976 · Guru Joined: 24 Jan 2010 Posts: 326

NeddySeagoon · Posted: Sun Aug 04, 2019 6:37 pm Post subject:

leonchik1976,

Intermittent failures like that are not a problem, so there is noting to fix.
If it fails every time, that's a problem.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.

cmaurand · n00b Joined: 21 Dec 2004 Posts: 42 Location: Biddeford, ME

I use to run Gentoo all the time. I gave up on it when I couldn't keep it updated due to constantly changing init system. Then I went to Ubuntu server. Ubuntu server has latency issues that I think are related to systemd. So I thought that I would give Gentoo another shot. I need a primary dns server and systemd does not lend itself to actually running a DNS server. it wants to use systemd-resolvd which is just a total piece of garbage. I digress. I've spent several hours getting a system built even with the mistakes in the docs and got around the parts that don't work, like the missing dependencies that need to be installed, but aren't mentioned in the docs.

Then I got to the step "emerge --sync" and got key errors. I've been getting key errors for several days. Apparently I'm not the only one and this problem has been going on for qute a number of months. I give up.

I'm giving up on Gentoo, too. This kind of thing should just work. I shouldn't have to spend hours jumping through hoops to get it to work, either. Especially when the trouble is on the Gentoo end and nothing is getting done to fix this issue. emerge-webrsync works OK, but that is not the preferred method, is it?

I can't be spending this much time just trying to get a headless server running. I've spent hours tracking down this error and that and then got stuck on this and there doesn't seem to be a coherent solution. The Install shouldn't be this difficult and I've been working with Linux for 25 years

--Curtis
_________________
Curtis

leonchik1976 · Guru Joined: 24 Jan 2010 Posts: 326

Jaglover · Posted: Mon Aug 05, 2019 2:11 pm Post subject:

Thanks! I didn't know there is something wrong with Gentoo. I will stop using it ASAP.
_________________
My Gentoo installation notes.
Please learn how to denote units correctly!

NeddySeagoon · Posted: Mon Aug 05, 2019 3:09 pm Post subject:

leonchik1976, cmaurand,

It works from Scotland.

mike155 · Posted: Mon Aug 05, 2019 3:23 pm Post subject:

leonchik1976 · Guru Joined: 24 Jan 2010 Posts: 326

mike155 · Posted: Mon Aug 05, 2019 3:40 pm Post subject:

NeddySeagoon · Posted: Mon Aug 05, 2019 4:54 pm Post subject:

mike155,

As always, patches welcome.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.

freke · Posted: Mon Aug 05, 2019 6:29 pm Post subject:

nc-pv · n00b Joined: 01 Oct 2012 Posts: 45

Hi.

I am trying to understand whether or not I am having the same issue.

I have an (almost) offline Gentoo system that can access certain Gentoo mirrors via HTTP-only proxy (that I can't control). I manually downloaded and imported the GPG keys needed for the verification (Release media signatures) and whenever the portage was complaining about expired keys I was manually retrieving the needed keys and importing them again. That method worked for years.

After the last portage update the emerge --sync (using webrsync) is trying to contact the key server and refresh the signatures. Many people here report that this is broken, but in my case the portage does not have a single chance to contact the server, because the system is offline and making it online is out of question.

Is it a (recently introduced) flaw in the design of the portage system that requires Gentoo systems to be able to connect and retrieve keys from the key server in order to use tree verification?

How can I tell the portage to NOT to try to refresh the keys? It has worked previously for years, but it is broken now.
_________________
Use GNU/Linux

cmaurand · n00b Joined: 21 Dec 2004 Posts: 42 Location: Biddeford, ME

leonchik1976 · Guru Joined: 24 Jan 2010 Posts: 326

mike155 · Posted: Tue Aug 06, 2019 3:27 pm Post subject:

cmaurand · n00b Joined: 21 Dec 2004 Posts: 42 Location: Biddeford, ME

nc-pv · n00b Joined: 01 Oct 2012 Posts: 45

mike155 · Posted: Tue Aug 06, 2019 5:08 pm Post subject:

vcmota · Guru Joined: 19 Jun 2017 Posts: 372