[SOLVED] Problems wth installing binary packages (GPG)

[setan]

Hello,

I wanted to try and speed up the profile change using binary packages, but they do not seem to work...

Code: Select all

Would you like to merge these packages? [Yes/No] yes

>>> Verifying ebuild manifests

>>> Running pre-merge checks for acct-group/audio-0-r3
--2024-03-24 12:28:39--  https://distfiles.gentoo.org/releases/amd64/binpackages/23.0/x86-64-v3/acct-group/audio/audio-0-r3-1.gpkg.tar
Resolving distfiles.gentoo.org... 212.102.56.179, 195.181.175.40, 195.181.170.19, ...
Connecting to distfiles.gentoo.org|212.102.56.179|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 20480 (20K) [application/x-tar]
Saving to: ‘/var/cache/binpkgs/acct-group/audio/audio-0-r3-4.gpkg.tar.partial’

/var/cache/binpkgs/acct-group/audio/audio-0-r3-4.gpkg.tar.partial       100%[==================================================================================================>]  20.00K  --.-KB/s    in 0.001s  

2024-03-24 12:28:39 (13.9 MB/s) - ‘/var/cache/binpkgs/acct-group/audio/audio-0-r3-4.gpkg.tar.partial’ saved [20480/20480]

 * audio-0-r3-4.gpkg.tar MD5 SHA1 size ;-) ...                           [ ok ]
!!!
gpg: keyblock resource '/etc/portage/gnupg/pubring.kbx': No such file or directory
[GNUPG:] ERROR add_keyblock_resource 33587281
[GNUPG:] PLAINTEXT 74 0 
[GNUPG:] NEWSIG
gpg: Signature made Wed Mar 20 22:33:34 2024 CET
gpg:                using RSA key 534E4209AB49EEE1C19D96162C44695DB9F6043D
[GNUPG:] ERROR keydb_search 33554445
[GNUPG:] ERROR keydb_search 33554445
[GNUPG:] ERRSIG 2C44695DB9F6043D 1 10 01 1710970414 9 534E4209AB49EEE1C19D96162C44695DB9F6043D
[GNUPG:] NO_PUBKEY 2C44695DB9F6043D
gpg: Can't check signature: No public key
gpg: can't create `/etc/portage/gnupg/random_seed': No such file or directory
!!! Invalid binary package: '/var/cache/binpkgs/acct-group/audio/audio-0-r3-4.gpkg.tar.partial', GPG verify failed
 * Binary package is not usable

>>> Failed to emerge acct-group/audio-0-r3

It is true: the folder gnupg was not there before, so I created it with 777.
Now it complains about unsafe ownership and "gpg: Can't check signature: No public key"
How do I fix this?

[steve_v]

Try here, specifically blowing away /etc/portage/gnupg and running 'getuto' to regenerate it.

[setan]

This worked. Thanks!

[Decibels]

Glad found this. I was already at the doc mentioned but this cleared it up faster at the moment. Had no problem on one computer, but did on another and it must have had a older /etc/portage/gnupg. Moving it and creating it solved the signature verification.

Not wanting a lot of binaries if possible, but the WEBKIT-GTK is so terrible. Finally at my wits end after adding it to --exclude during emerge for long time. Finally had to upgrade. Man these binary packages are a God Send for Gentoo.

Something needs to be done about webkit-gtk or programs need to stop depending on it (or at least give option to build without it). Hours and hours to then fail, even on good computers. Thank you Dev's for providing up to date binaries for this atrocity.

Sorry for ranting about a particular program, but haven't done binaries before and didn't want to spend all day figuring it out and you pointing out the fix quickly solved the issue. THANKS!

[sam_]

Glad found this. I was already at the doc mentioned but this cleared it up faster at the moment. Had no problem on one computer, but did on another and it must have had a older /etc/portage/gnupg. Moving it and creating it solved the signature verification.

Not wanting a lot of binaries if possible, but the WEBKIT-GTK is so terrible. Finally at my wits end after adding it to --exclude during emerge for long time. Finally had to upgrade. Man these binary packages are a God Send for Gentoo.

Something needs to be done about webkit-gtk or programs need to stop depending on it (or at least give option to build without it). Hours and hours to then fail, even on good computers. Thank you Dev's for providing up to date binaries for this atrocity.

Sorry for ranting about a particular program, but haven't done binaries before and didn't want to spend all day figuring it out and you pointing out the fix quickly solved the issue. THANKS!

We will soon have a way to selectively say "just give me binpkgs for this package" that should help with this kind of case. I also have made some improvements to the error messages for binpkgs and have possibly some other ideas too.

There's not much else which can be done wrt webkit-gtk, it's already optional where that is possible, unfortunately.

[Decibels]

This is news of the most awesome sort! Thank you!

Ya, I have gnucash (tried some others and didn't like) and prusaslicer so need it, but man it is something just better off with a binary. So your work is going to help tremendously. I noticed after doing the binary and was finishing up the merges that it wanted to rebuild some packages and webkit-gtk (one version) was one it wanted to rebuild. Said that isn't going to happen, so excluded again. So telling system only do binary for selected packages is great.

I have a family member who got rid of anything that needs webkit-gtk, but I'm not in that boat.