sec-keys/openpgp-keys-brave-browser : gpg-agent error

Message

MorgothSauron · Post by **MorgothSauron** » Thu Nov 13, 2025 5:43 pm

Hello,
I have brave browser installed from the another-brave-overlay repository for quite some time now and never encountered any issue to update it.

A recent updates wants to import PGP keys, but it fails with the following error:

Code: Select all

=== Skipping unpack of 'openpgp-keys-brave-browser-release-20250709.asc'
>>> Source unpacked in /var/portage/tmp/portage/sec-keys/openpgp-keys-brave-browser-release-20250709/work
>>> Preparing source in /var/portage/tmp/portage/sec-keys/openpgp-keys-brave-browser-release-20250709/work ...
>>> Source prepared.
>>> Configuring source in /var/portage/tmp/portage/sec-keys/openpgp-keys-brave-browser-release-20250709/work ...
>>> Source configured.
>>> Compiling source in /var/portage/tmp/portage/sec-keys/openpgp-keys-brave-browser-release-20250709/work ...
gpg: keybox '/var/portage/tmp/portage/sec-keys/openpgp-keys-brave-browser-release-20250709/work/gnupg/pubring.kbx' created
gpg: /var/portage/tmp/portage/sec-keys/openpgp-keys-brave-browser-release-20250709/work/gnupg/trustdb.gpg: trustdb created
gpg: key C479D18E038EAF42: public key "Brave Checksums Release (Brave Checksums Release) <brave-checksums-release@brave.com>" imported
gpg: error running '/usr/bin/gpg-agent': exit status 2
gpg: failed to start gpg-agent '/usr/bin/gpg-agent': General error
gpg: can't connect to the gpg-agent: General error
gpg: key 68E5C22615F0E249: public key "Brave Checksums Release (Brave Checksums Release) <checksums-release@brave.com>" imported
gpg: error running '/usr/bin/gpg-agent': exit status 2
gpg: failed to start gpg-agent '/usr/bin/gpg-agent': General error
gpg: can't connect to the gpg-agent: General error
gpg: key EDC0814C91A8144D: public key "Brave Checksums Release (Brave Checksums Release) <checksums-release@brave.com>" imported
gpg: error running '/usr/bin/gpg-agent': exit status 2
gpg: failed to start gpg-agent '/usr/bin/gpg-agent': General error
gpg: can't connect to the gpg-agent: General error
gpg: Total number processed: 3
gpg:               imported: 3
 * ERROR: sec-keys/openpgp-keys-brave-browser-release-20250709::another-brave-overlay failed (compile phase):
 *   (no error message)
 * 
 * Call stack:
 *     ebuild.sh, line 143:  Called src_compile
 *   environment, line 382:  Called sec-keys_src_compile
 *   environment, line 311:  Called die
 * The specific snippet of code:
 *       gpg --import ${A} || die;
 * 
 * If you need support, post the output of `emerge --info '=sec-keys/openpgp-keys-brave-browser-release-20250709::another-brave-overlay'`,
 * the complete build log and the output of `emerge -pqv '=sec-keys/openpgp-keys-brave-browser-release-20250709::another-brave-overlay'`.
 * The complete build log is located at '/var/portage/logs/sec-keys:openpgp-keys-brave-browser-release-20250709:20251113-171752.log'.
 * For convenience, a symlink to the build log is located at '/var/portage/tmp/portage/sec-keys/openpgp-keys-brave-browser-release-20250709/temp/build.log'.
 * The ebuild environment file is located at '/var/portage/tmp/portage/sec-keys/openpgp-keys-brave-browser-release-20250709/temp/environment'.
 * Working directory: '/var/portage/tmp/portage/sec-keys/openpgp-keys-brave-browser-release-20250709/distdir'
 * S: '/var/portage/tmp/portage/sec-keys/openpgp-keys-brave-browser-release-20250709/work'

 * Messages for package sec-keys/openpgp-keys-brave-browser-release-20250709:
 * Log file: /var/portage/logs/sec-keys:openpgp-keys-brave-browser-release-20250709:20251113-171752.log

 * ERROR: sec-keys/openpgp-keys-brave-browser-release-20250709::another-brave-overlay failed (compile phase):
 *   (no error message)
 * Call stack:
 *     ebuild.sh, line 143:  Called src_compile
 *   environment, line 382:  Called sec-keys_src_compile
 *   environment, line 311:  Called die
 * The specific snippet of code:
 *       gpg --import ${A} || die;
 * If you need support, post the output of `emerge --info '=sec-keys/openpgp-keys-brave-browser-release-20250709::another-brave-overlay'`,
 * the complete build log and the output of `emerge -pqv '=sec-keys/openpgp-keys-brave-browser-release-20250709::another-brave-overlay'`.
 * The complete build log is located at '/var/portage/logs/sec-keys:openpgp-keys-brave-browser-release-20250709:20251113-171752.log'.
 * For convenience, a symlink to the build log is located at '/var/portage/tmp/portage/sec-keys/openpgp-keys-brave-browser-release-20250709/temp/build.log'.
 * The ebuild environment file is located at '/var/portage/tmp/portage/sec-keys/openpgp-keys-brave-browser-release-20250709/temp/environment'.
 * Working directory: '/var/portage/tmp/portage/sec-keys/openpgp-keys-brave-browser-release-20250709/distdir'
 * S: '/var/portage/tmp/portage/sec-keys/openpgp-keys-brave-browser-release-20250709/work'

What is interesting is that the message seems to indicate the the keys are imported but something is going on with the gpg-agent.

I download the key file referenced in the ebuild (https://brave-browser-downloads.s3.brav ... elease.asc) to try to import it myself. The import (gpg --import github-checksums-release.asc) works fine without error or warning.

The output of emerge --info for the package:

Code: Select all

# emerge --info '=sec-keys/openpgp-keys-brave-browser-release-20250709::another-brave-overlay'
Portage 3.0.69 (python 3.13.5-final-0, default/linux/amd64/23.0/desktop/plasma, gcc-14, glibc-2.41-r6, 6.17.7-gentoo-x86_64 x86_64)
=================================================================
                         System Settings
=================================================================
System uname: Linux-6.17.7-gentoo-x86_64-x86_64-Intel-R-_Core-TM-_i7-9700K_CPU_@_3.60GHz-with-glibc2.41
KiB Mem:    32787664 total,  12078348 free
KiB Swap:    8388604 total,   8388604 free
Timestamp of repository gentoo: Thu, 13 Nov 2025 16:15:00 +0000
Head commit of repository gentoo: 732baee00ac5694c9ae2c224f894f0bf68687679
Head commit of repository another-brave-overlay: 6c078b0ba839e6accb809fc5745acd0d9fc3c068

Head commit of repository steam-overlay: 832638308105d0730d8c7e10eed2f81d9addfb11

Head commit of repository torbrowser: ec9d3fb711710e5347c740f18719e7ade7a4f030

sh bash 5.3_p3-r3
ld GNU ld (Gentoo 2.45 p3) 2.45.0
app-misc/pax-utils:        1.3.8::gentoo
app-shells/bash:           5.3_p3-r3::gentoo
dev-build/autoconf:        2.72-r4::gentoo
dev-build/automake:        1.18.1::gentoo
dev-build/cmake:           4.1.2-r1::gentoo
dev-build/libtool:         2.5.4::gentoo
dev-build/make:            4.4.1-r101::gentoo
dev-build/meson:           1.9.1::gentoo
dev-lang/perl:             5.40.2::gentoo
dev-lang/python:           3.13.5_p1::gentoo, 3.14.0::gentoo
dev-lang/rust:             1.89.0::gentoo
llvm-core/clang:           19.1.7::gentoo, 20.1.8::gentoo
llvm-core/lld:             19.1.7::gentoo, 20.1.8::gentoo
llvm-core/llvm:            19.1.7::gentoo, 20.1.8::gentoo
sys-apps/baselayout:       2.18::gentoo
sys-apps/openrc:           0.62.10::gentoo
sys-apps/sandbox:          2.46::gentoo
sys-devel/binutils:        2.45-r1::gentoo
sys-devel/binutils-config: 5.5.2::gentoo
sys-devel/gcc:             14.3.1_p20250801::gentoo
sys-devel/gcc-config:      2.12.1::gentoo
sys-kernel/linux-headers:  6.12::gentoo (virtual/os-headers)
sys-libs/glibc:            2.41-r6::gentoo
Repositories:

gentoo
    location: /var/portage/db/repos/gentoo
    sync-type: rsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: -1000
    volatile: True
    sync-rsync-verify-metamanifest: yes
    sync-rsync-verify-max-age: 24
    sync-rsync-verify-jobs: 1
    sync-rsync-extra-opts: 

another-brave-overlay
    location: /var/db/repos/another-brave-overlay
    sync-type: git
    sync-uri: https://github.com/falbrechtskirchinger/another-brave-overlay.git
    masters: gentoo
    volatile: False

steam-overlay
    location: /var/db/repos/steam-overlay
    sync-type: git
    sync-uri: https://github.com/anyc/steam-overlay.git
    masters: gentoo
    volatile: False

torbrowser
    location: /var/db/repos/torbrowser
    sync-type: git
    sync-uri: https://github.com/MeisterP/torbrowser-overlay.git
    masters: gentoo
    volatile: False

ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="@FREE"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/config /usr/share/easy-rsa /usr/share/gnupg/qualified.txt /usr/share/themes/oxygen-gtk/gtk-2.0 /var/bind"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d"
CXXFLAGS="-march=native -O2 -pipe"
DISTDIR="/var/portage/cache/distfiles"
EMERGE_DEFAULT_OPTS="--ask --jobs 3 --load-average 6"
ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GDK_PIXBUF_MODULE_FILE GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR XDG_STATE_HOME"
FCFLAGS="-march=native -O2 -pipe"
FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs buildpkg-live clean-logs config-protect-if-modified distlocks ebuild-locks export-pms-vars fixlafiles ipc-sandbox merge-sync merge-wait multilib-strict network-sandbox news parallel-fetch pid-sandbox pkgdir-index-trusted preserve-libs protect-owned qa-unresolved-soname-deps sandbox strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-march=native -O2 -pipe"
GENTOO_MIRRORS="http://gentoo.mirrors.ovh.net/gentoo-distfiles/"
LANG="en_US.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,-z,pack-relative-relocs"
LEX="flex"
MAKEOPTS="-j8"
PKGDIR="/var/portage/cache/binpkgs"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/portage/tmpfs"
SHELL="/bin/zsh"
USE="X a52 aac acl acpi activities alsa amd64 avif bzip2 cairo cdda cdr cet crypt cryptsetup cups dbus declarative dri dts dvd dvdr elogind encode exif flac gdbm gif gpm gtk gui iconv icu ipv6 jpeg jpegxl jumbo-build kde kwallet lcms libnotify libtirpc luks1_default mad mng mp3 mp4 mpeg multilib ncurses nls ogg opengl openmp pam pango pcre pdf pipewire plasma png policykit ppds pulseaudio qml qt5 qt6 readline savedconfig screencast sdl seccomp semantic-desktop sound spell ssl startup-notification svg sysv-utils test-rust tiff truetype udev udisks unicode upower usb verify-sig vorbis vulkan wayland webp widgets wxwidgets x264 xattr xcb xft xml xv xvid zlib" ABI_X86="64" ADA_TARGET="gcc_14" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_anon authn_dbm authn_file authz_dbm authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir env expires ext_filter file_cache filter headers include info log_config logio mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx avx2 f16c fma3 mmx mmxext pclmul popcnt rdrand sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax navcom oceanserver oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 tsip tripmate tnt ublox" GUILE_SINGLE_TARGET="3-0" GUILE_TARGETS="3-0" INPUT_DEVICES="libinput" KERNEL="linux" LCD_DEVICES="bayrad cfontz glk hd44780 lb216 lcdm001 mtxorb text" LLVM_TARGETS="X86" LUA_SINGLE_TARGET="lua5-1" LUA_TARGETS="lua5-1" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php8-3" POSTGRES_TARGETS="postgres17" PYTHON_SINGLE_TARGET="python3_13" PYTHON_TARGETS="python3_13" QEMU_SOFTMMU_TARGETS="x86_64 aarch64" QEMU_USER_TARGETS="x86_64" RUBY_TARGETS="ruby32 ruby33" SANE_BACKENDS="net" VIDEO_CARDS="amdgpu radeonsi" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipp2p iface geoip fuzzy condition tarpit sysrq proto logmark ipmark dhcpmac delude chaos account"
Unset:  ADDR2LINE, AR, ARFLAGS, AS, ASFLAGS, CC, CCLD, CONFIG_SHELL, CPP, CPPFLAGS, CTARGET, CXX, CXXFILT, ELFEDIT, EXTRA_ECONF, F77FLAGS, FC, GCOV, GPROF, INSTALL_MASK, LC_ALL, LD, LFLAGS, LIBTOOL, LINGUAS, MAKE, MAKEFLAGS, NM, OBJCOPY, OBJDUMP, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PYTHONPATH, RANLIB, READELF, RUSTFLAGS, SIZE, STRINGS, STRIP, YACC, YFLAGS

I checked the GitHub for this repository and there are no issues reported on this.

Any suggestions ? I'm posting here first because I can't tell if it is a problem with my system or with the ebuild.

flexibeast · Post by **flexibeast** » Thu Nov 13, 2025 9:44 pm

My guess is that this might more fallout from the current and ongoing drama around GnuPG: here's some old background on LWN, here's some information about the FreePG project, and here's some posts on gentoo-dev regarding related work in Gentoo.

(Even if the OP's issue turns out to be unrelated to the GnuPG stuff, i'd appreciate it if someone could point me to a page summarising the issues, for future use in other contexts.)

Post by **sam_** » Sat Nov 15, 2025 9:24 am

I think this is the issue w/ path length vs unix sockets. We workaround this in verify-sig.eclass by setting TMPDIR but sec-keys.eclass is missing the same treatment. Please file a bug against the eclass at bugs.gentoo.org.

MorgothSauron · Post by **MorgothSauron** » Thu Nov 20, 2025 4:29 pm

sam_ wrote:I think this is the issue w/ path length vs unix sockets. We workaround this in verify-sig.eclass by setting TMPDIR but sec-keys.eclass is missing the same treatment. Please file a bug against the eclass at bugs.gentoo.org.

Bug report created: https://bugs.gentoo.org/966274

Edit: As a workaround I disable the verify-sig USE flag to the brave browser package. Not ideal but at least I can update the system normally.