Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

archlinux-keyring should be upgraded before installing openssl and glibc #30

Closed
libook opened this issue Mar 27, 2023 · 4 comments
Closed
Assignees
Labels
resolution:invalid This doesn't seem right type:bug Something isn't working

Comments

@libook
Copy link

libook commented Mar 27, 2023

Current version caused GPG key issues while installing openssl and glibc.

@mdevaev
Copy link
Member

mdevaev commented Mar 27, 2023

Plese show me the log with error, I can't reproduce it.

@mdevaev
Copy link
Member

mdevaev commented Mar 27, 2023

Try make clean and then make os NC=1

@libook
Copy link
Author

libook commented Mar 28, 2023

$ sudo make os
mkdir -p `dirname ./.pi-builder/v0-hdmi-rpi3`
git clone --depth=1 https://github.com/mdevaev/pi-builder ./.pi-builder/v0-hdmi-rpi3
Cloning into './.pi-builder/v0-hdmi-rpi3'...
remote: Enumerating objects: 54, done.
remote: Counting objects: 100% (54/54), done.
remote: Compressing objects: 100% (43/43), done.
remote: Total 54 (delta 0), reused 40 (delta 0), pack-reused 0
Receiving objects: 100% (54/54), 2.73 MiB | 3.67 MiB/s, done.
rm -rf ./.pi-builder/v0-hdmi-rpi3/stages/{pikvm,pikvm-otg-console}
cp -a pikvm pikvm-otg-console ./.pi-builder/v0-hdmi-rpi3/stages
cp -a disk-v0.conf ./.pi-builder/v0-hdmi-rpi3/disk.conf
make -C ./.pi-builder/v0-hdmi-rpi3 os \
	NC= \
	BUILD_OPTS='  \
		--build-arg PLATFORM=v0-hdmi \
		--build-arg VERSIONS=5.38-1/3.210-1/0.43-1/0.22-1/0.25-1 \
		--build-arg OLED= \
		--build-arg FAN= \
		--build-arg ROOT_PASSWD=root \
		--build-arg WEBUI_ADMIN_PASSWD=lidaya \
		--build-arg IPMI_ADMIN_PASSWD=lidaya \
	' \
	PROJECT=pikvm-os-v0-hdmi \
	BOARD=rpi3 \
	STAGES='__init__ os pikvm-repo watchdog ro no-audit pikvm __cleanup__' \
	HOSTNAME=pikvm \
	LOCALE=en_US \
	TIMEZONE=Asia/Shanghai \
	REPO_URL=http://de3.mirror.archlinuxarm.org
make[1]: Entering directory '/home/libook/Documents/GitProjects/pikvm-os/.pi-builder/v0-hdmi-rpi3'
===== Ensuring toolbox image =====
docker build \
		--rm \
		--tag pi-builder-arm-toolbox \
		 \
		--file toolbox/Dockerfile.root \
	toolbox
DEPRECATED: The legacy builder is deprecated and will be removed in a future release.
            Install the buildx component to build images with BuildKit:
            https://docs.docker.com/go/buildx/

Sending build context to Docker daemon  23.55kB
Step 1/7 : FROM archlinux/archlinux:base
 ---> 72991fd3f8d3
Step 2/7 : RUN mkdir -p /etc/pacman.d/hooks 	&& ln -s /dev/null /etc/pacman.d/hooks/30-systemd-tmpfiles.hook
 ---> Using cache
 ---> 2ede0d0137cd
Step 3/7 : RUN pacman --noconfirm --ask=4 -Syy 	&& pacman --needed --noconfirm --ask=4 -S 		glibc 		openssl 		openssl-1.1 	&& pacman --needed --noconfirm --ask=4 -S 		pacman 	&& pacman-db-upgrade 	&& pacman-key --init 	&& pacman --needed --noconfirm --ask=4 -S 		p11-kit 		archlinux-keyring 		ca-certificates 		ca-certificates-mozilla 		ca-certificates-utils 	&& pacman --noconfirm --ask=4 -Syu 	&& pacman --needed --noconfirm --ask=4 -S 		arp-scan 		python 		parted 		dosfstools rsync 	&& rm -rf /var/cache/pacman/pkg/*
 ---> Running in ccc7ee3c79b0
:: Synchronizing package databases...
downloading core.db...
downloading extra.db...
downloading community.db...
resolving dependencies...
looking for conflicting packages...

Packages (3) glibc-2.37-2  openssl-3.0.8-1  openssl-1.1-1.1.1.t-1

Total Download Size:   16.74 MiB
Total Installed Size:  63.70 MiB
Net Upgrade Size:      10.22 MiB

:: Proceed with installation? [Y/n] 
:: Retrieving packages...
downloading glibc-2.37-2-x86_64.pkg.tar.zst...
downloading openssl-3.0.8-1-x86_64.pkg.tar.zst...
downloading openssl-1.1-1.1.1.t-1-x86_64.pkg.tar.zst...
checking keyring...
downloading required keys...
:: Import PGP key 76A5EF9054449A5C, "Pierre Schmitz <[email protected]>"? [Y/n] 
checking package integrity...
error: glibc: signature from "Frederik Schwan <[email protected]>" is unknown trust
:: File /var/cache/pacman/pkg/glibc-2.37-2-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] error: openssl: signature from "Pierre Schmitz <[email protected]>" is marginal trust

:: File /var/cache/pacman/pkg/openssl-3.0.8-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] error: openssl-1.1: signature from "Pierre Schmitz <[email protected]>" is marginal trust

:: File /var/cache/pacman/pkg/openssl-1.1-1.1.1.t-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] error: failed to commit transaction (invalid or corrupted package (PGP signature))

Errors occurred, no packages were upgraded.
The command '/bin/sh -c pacman --noconfirm --ask=4 -Syy 	&& pacman --needed --noconfirm --ask=4 -S 		glibc 		openssl 		openssl-1.1 	&& pacman --needed --noconfirm --ask=4 -S 		pacman 	&& pacman-db-upgrade 	&& pacman-key --init 	&& pacman --needed --noconfirm --ask=4 -S 		p11-kit 		archlinux-keyring 		ca-certificates 		ca-certificates-mozilla 		ca-certificates-utils 	&& pacman --noconfirm --ask=4 -Syu 	&& pacman --needed --noconfirm --ask=4 -S 		arp-scan 		python 		parted 		dosfstools 		rsync 	&& rm -rf /var/cache/pacman/pkg/*' returned a non-zero code: 1
make[1]: *** [Makefile:186: toolbox] Error 1
make[1]: Leaving directory '/home/libook/Documents/GitProjects/pikvm-os/.pi-builder/v0-hdmi-rpi3'
make: *** [Makefile:60: os] Error 2

Same with make clean and then make os NC=1.

$ sudo make clean
make -C ./.pi-builder/v0-hdmi-rpi3 clean
make[1]: Entering directory '/home/libook/Documents/GitProjects/pikvm-os/.pi-builder/v0-hdmi-rpi3'
rm -rf ./.build ./.built.conf
make[1]: Leaving directory '/home/libook/Documents/GitProjects/pikvm-os/.pi-builder/v0-hdmi-rpi3'
[  4:41PM ]  [ libook@libook-blade:~/Documents/GitProjects/pikvm-os(master✔) ]
$ sudo make os NC=1
rm -rf ./.pi-builder/v0-hdmi-rpi3/stages/{pikvm,pikvm-otg-console}
cp -a pikvm pikvm-otg-console ./.pi-builder/v0-hdmi-rpi3/stages
cp -a disk-v0.conf ./.pi-builder/v0-hdmi-rpi3/disk.conf
make -C ./.pi-builder/v0-hdmi-rpi3 os \
	NC=1 \
	BUILD_OPTS='  \
		--build-arg PLATFORM=v0-hdmi \
		--build-arg VERSIONS=5.38-1/3.210-1/0.43-1/0.22-1/0.25-1 \
		--build-arg OLED= \
		--build-arg FAN= \
		--build-arg ROOT_PASSWD=root \
		--build-arg WEBUI_ADMIN_PASSWD=lidaya \
		--build-arg IPMI_ADMIN_PASSWD=lidaya \
	' \
	PROJECT=pikvm-os-v0-hdmi \
	BOARD=rpi3 \
	STAGES='__init__ os pikvm-repo watchdog ro no-audit pikvm __cleanup__' \
	HOSTNAME=pikvm \
	LOCALE=en_US \
	TIMEZONE=Asia/Shanghai \
	REPO_URL=http://de3.mirror.archlinuxarm.org
make[1]: Entering directory '/home/libook/Documents/GitProjects/pikvm-os/.pi-builder/v0-hdmi-rpi3'
===== Ensuring toolbox image =====
docker build \
		--rm \
		--tag pi-builder-arm-toolbox \
		 \
		--file toolbox/Dockerfile.root \
	toolbox
DEPRECATED: The legacy builder is deprecated and will be removed in a future release.
            Install the buildx component to build images with BuildKit:
            https://docs.docker.com/go/buildx/

Sending build context to Docker daemon  23.55kB
Step 1/7 : FROM archlinux/archlinux:base
 ---> 72991fd3f8d3
Step 2/7 : RUN mkdir -p /etc/pacman.d/hooks 	&& ln -s /dev/null /etc/pacman.d/hooks/30-systemd-tmpfiles.hook
 ---> Using cache
 ---> 2ede0d0137cd
Step 3/7 : RUN pacman --noconfirm --ask=4 -Syy 	&& pacman --needed --noconfirm --ask=4 -S 		glibc 		openssl 		openssl-1.1 	&& pacman --needed --noconfirm --ask=4 -S 		pacman 	&& pacman-db-upgrade 	&& pacman-key --init 	&& pacman --needed --noconfirm --ask=4 -S 		p11-kit 		archlinux-keyring 		ca-certificates 		ca-certificates-mozilla 		ca-certificates-utils 	&& pacman --noconfirm --ask=4 -Syu 	&& pacman --needed --noconfirm --ask=4 -S 		arp-scan 		python 		parted 		dosfstools rsync 	&& rm -rf /var/cache/pacman/pkg/*
 ---> Running in 225c0d8468b4
:: Synchronizing package databases...
downloading core.db...
downloading extra.db...
downloading community.db...
resolving dependencies...
looking for conflicting packages...

Packages (3) glibc-2.37-2  openssl-3.0.8-1  openssl-1.1-1.1.1.t-1

Total Download Size:   16.74 MiB
Total Installed Size:  63.70 MiB
Net Upgrade Size:      10.22 MiB

:: Proceed with installation? [Y/n] 
:: Retrieving packages...
downloading glibc-2.37-2-x86_64.pkg.tar.zst...
downloading openssl-3.0.8-1-x86_64.pkg.tar.zst...
downloading openssl-1.1-1.1.1.t-1-x86_64.pkg.tar.zst...
checking keyring...
downloading required keys...
:: Import PGP key 76A5EF9054449A5C, "Pierre Schmitz <[email protected]>"? [Y/n] 
checking package integrity...
error: glibc: signature from "Frederik Schwan <[email protected]>" is unknown trust
:: File /var/cache/pacman/pkg/glibc-2.37-2-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] error: openssl: signature from "Pierre Schmitz <[email protected]>" is marginal trust

:: File /var/cache/pacman/pkg/openssl-3.0.8-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] error: openssl-1.1: signature from "Pierre Schmitz <[email protected]>" is marginal trust

:: File /var/cache/pacman/pkg/openssl-1.1-1.1.1.t-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] error: failed to commit transaction (invalid or corrupted package (PGP signature))

Errors occurred, no packages were upgraded.
The command '/bin/sh -c pacman --noconfirm --ask=4 -Syy 	&& pacman --needed --noconfirm --ask=4 -S 		glibc 		openssl 		openssl-1.1 	&& pacman --needed --noconfirm --ask=4 -S 		pacman 	&& pacman-db-upgrade 	&& pacman-key --init 	&& pacman --needed --noconfirm --ask=4 -S 		p11-kit 		archlinux-keyring 		ca-certificates 		ca-certificates-mozilla 		ca-certificates-utils 	&& pacman --noconfirm --ask=4 -Syu 	&& pacman --needed --noconfirm --ask=4 -S 		arp-scan 		python 		parted 		dosfstools 		rsync 	&& rm -rf /var/cache/pacman/pkg/*' returned a non-zero code: 1
make[1]: *** [Makefile:186: toolbox] Error 1
make[1]: Leaving directory '/home/libook/Documents/GitProjects/pikvm-os/.pi-builder/v0-hdmi-rpi3'
make: *** [Makefile:60: os] Error 2

I have edited .pi-builder/v0-hdmi-rpi3/toolbox/Dockerfile.root, moved pacman-key --init and the installation of archlinux-keyring to the top. And it was working.

@mdevaev
Copy link
Member

mdevaev commented May 22, 2023

I can't reproduce it on the fresh images.

@mdevaev mdevaev closed this as completed Aug 8, 2023
@mdevaev mdevaev self-assigned this Aug 8, 2023
@mdevaev mdevaev added type:bug Something isn't working resolution:invalid This doesn't seem right labels Aug 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
resolution:invalid This doesn't seem right type:bug Something isn't working
Development

No branches or pull requests

2 participants