--- Begin Message ---
|
Subject: |
"guix import gnu" says public key is not in keyring |
|
Date: |
Sat, 1 Jun 2019 21:33:51 -0600 |
I am trying to define the gnurobots package using guix import. I try
the following and get the corresponding results:
~$ guix import gnu gnurobots
Starting download of /tmp/guix-file.sRnZ4I
From ftp://ftp.gnu.org/gnu/gnurobots/gnurobots-1.2.0.tar.gz...
gnurobots-1.2.0.tar.gz 173KiB 163KiB/s 00:01
[##################] 100.0%
Starting download of /tmp/guix-file.cZoC7H
From ftp://ftp.gnu.org/gnu/gnurobots/gnurobots-1.2.0.tar.gz.sig...
….0.tar.gz.sig 72B 170KiB/s 00:00
[##################] 100.0% In execvp of gpgv: No such file or directory
guix import: warning: signature verification failed for
`ftp://ftp.gnu.org/gnu/gnurobots/gnurobots-1.2.0.tar.gz' guix import:
warning: (could be because the public key is not in your keyring) guix
import: error: 'gnu' import failed
~$ guix import gnu --key-download=interactive gnurobots
Starting download of /tmp/guix-file.e0KAGy
From ftp://ftp.gnu.org/gnu/gnurobots/gnurobots-1.2.0.tar.gz...
gnurobots-1.2.0.tar.gz 173KiB 162KiB/s 00:01
[##################] 100.0%
Starting download of /tmp/guix-file.lStU1V
From ftp://ftp.gnu.org/gnu/gnurobots/gnurobots-1.2.0.tar.gz.sig...
….0.tar.gz.sig 72B 111KiB/s 00:00
[##################] 100.0% In execvp of gpgv: No such file or directory
guix import: warning: signature verification failed for
`ftp://ftp.gnu.org/gnu/gnurobots/gnurobots-1.2.0.tar.gz' guix import:
warning: (could be because the public key is not in your keyring) guix
import: error: 'gnu' import failed
~$ guix import gnu --key-download=always gnurobots
Starting download of /tmp/guix-file.DtCU1Y
From ftp://ftp.gnu.org/gnu/gnurobots/gnurobots-1.2.0.tar.gz...
gnurobots-1.2.0.tar.gz 173KiB 178KiB/s 00:01
[##################] 100.0%
Starting download of /tmp/guix-file.QOlbzN
From ftp://ftp.gnu.org/gnu/gnurobots/gnurobots-1.2.0.tar.gz.sig...
….0.tar.gz.sig 72B 48KiB/s 00:00
[##################] 100.0% In execvp of gpgv: No such file or directory
guix import: warning: signature verification failed for
`ftp://ftp.gnu.org/gnu/gnurobots/gnurobots-1.2.0.tar.gz' guix import:
warning: (could be because the public key is not in your keyring) guix
import: error: 'gnu' import failed
~$ guix import gnu --key-download=never gnurobots
Starting download of /tmp/guix-file.fgTq6E
From ftp://ftp.gnu.org/gnu/gnurobots/gnurobots-1.2.0.tar.gz...
gnurobots-1.2.0.tar.gz 173KiB 132KiB/s 00:01
[##################] 100.0%
Starting download of /tmp/guix-file.v4rsPY
From ftp://ftp.gnu.org/gnu/gnurobots/gnurobots-1.2.0.tar.gz.sig...
….0.tar.gz.sig 72B 51KiB/s 00:00
[##################] 100.0% In execvp of gpgv: No such file or directory
guix import: warning: signature verification failed for
`ftp://ftp.gnu.org/gnu/gnurobots/gnurobots-1.2.0.tar.gz' guix import:
warning: (could be because the public key is not in your keyring) guix
import: error: 'gnu' import failed
It appears the --key-download option does nothing, even though the
documentation says --key-download=always should automatically
install the missing keys, and there should be a prompt if the option
is omitted. This is fixed when I install gnupg. It appears guix needs
gnupg as a propagated input for this function to work statelessly.
If anyone has a contrary opinion, please express it. I will
make, test, and submit a patch on Monday if nobody beats me to it.
--Jesse
--- End Message ---
--- Begin Message ---
|
Subject: |
Re: bug#36051: "guix import gnu" says public key is not in keyring |
|
Date: |
Mon, 02 Sep 2019 21:41:32 +0200 |
|
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/26.2 (gnu/linux) |
Hi Jesse,
Jesse Gibbons <address@hidden> (by way of Jesse Gibbons
<address@hidden>) skribis:
> On Sun, 02 Jun 2019 18:13:16 +0200
> Ludovic Courtès <address@hidden> wrote:
>
>> Hi,
>>
>> Jesse Gibbons <address@hidden> skribis:
>>
>> > Starting download of /tmp/guix-file.cZoC7H
>> > From ftp://ftp.gnu.org/gnu/gnurobots/gnurobots-1.2.0.tar.gz.sig...
>> > ….0.tar.gz.sig 72B 170KiB/s 00:00
>> > [##################] 100.0% In execvp of gpgv: No such file or
>> > directory
>>
>> The real issue here is that ‘gpgv’ cannot be found in $PATH.
>>
>> I think you have to run “guix install gnupg” to fix it.
>>
>> HTH,
>> Ludo’.
>
> I pointed that out at the end of my bug report. I thought guix was
> supposed to be stateless, with behavior independent on what the user has
> installed, so I recommended adding gnupg as a propagated input so it
> wouldn't be dependant on a user (or administrator) installing gnupg.
> If it is preferrable not to install gnupg alongside guix, then I will
> note in the docs that gnupg must be found in $PATH for "guix import
> gnu", "guix import elpa" and "guix refresh" to be successful, and then
> we can close this issue.
I finally went ahead and mentioned it in the manual in commit
d34e9114e679666dfbf7caf577117010eca20520.
Thanks,
Ludo’.
--- End Message ---