Created attachment 4002 [details] FULL.LOG STATUS: FAILED BUILD: 2.2.2: rc2-60402978fe3648bf560b3386c6e9dd661cdf2083 ENVIRONMENT: Ubuntu 17.04 x86-64 There are 2 ways of manual and automatic reproduction. STEPS TO REPRODUCE MANUAL: Steps: 1. Generate a gpg key gpg --gen-keyAnd provide this info when requested: key: RSAkey-size: 2048key-valid: 0realname: testuseremail: testuser@email.comcomment: nocommentpassphrase: test123 2. Create a secret.txt with 'test123' in it.3. Export the secret and the public key: gpg --export --armor "testuser (nocomment) <testuser@testemail.com>" > key.pubgpg --export-secret-keys --armor "testuser (nocomment) <testuser@testemail.com>" > key.secret 4. Add to local.conf: INHERIT += "sign_rpm"RPM_GPG_PASSPHRASE_FILE = "/home/daniel/poky/meta-selftest/files/secret.txt"RPM_GPG_NAME = "testuser"RPM_GPG_PUBKEY = "/home/daniel/poky/meta-selftest/files/key.pub"GPG_PATH = "/home/daniel/poky/meta-selftest/files/" 5. bitbake -c cleansstate ed6. bitbake -c clean ed7. bitbake ed8. tmp/sysroots/x86_64-linux/usr/bin/rpm --import /home/daniel/poky/meta-selftest/files/key.pub9. tmp/sysroots/x86_64-linux/usr/bin/rpm --checksig tmp/deploy/rpm/i586/ed-1.9-r0.i586.rpm STEPS TO REPRODUCE AUTOMATED: oe-selftest –r signing EXPECTED OUTCOME: it should show that the package was signed correctly: eg :tmp/deploy/rpm/i586/ed-1.9-r0.i586.rpm: rsa sha1 md5 OK ACTUAL OUTCOME: ====================================================================== ERROR [0.000s]: setUpClass (oeqa.selftest.signing.Signing) ---------------------------------------------------------------------- AssertionError: Command 'gpg --homedir /tmp/oeqa-signing-hc7m5doc --import /home/ab/autobuilder/yocto-worker/nightly-oe-selftest-ubuntu1704/build/meta-selftest/files/signing/key.pub /home/ab/autobuilder/yocto-worker/nightly-oe-selftest-ubuntu1704/build/meta-selftest/files/signing/key.secret' returned non-zero exit status 2: gpg: keybox '/tmp/oeqa-signing-hc7m5doc/pubring.kbx' created gpg: /tmp/oeqa-signing-hc7m5doc/trustdb.gpg: trustdb created gpg: key 7B31316B5D64AD52: public key "testuser (nocomment) <testuser@testemail.com>" imported gpg: key 7B31316B5D64AD52: "testuser (nocomment) <testuser@testemail.com>" not changed gpg: key 7B31316B5D64AD52/7B31316B5D64AD52: error sending to agent: Inappropriate ioctl for device gpg: error building skey array: Inappropriate ioctl for device gpg: Total number processed: 2 gpg: imported: 1 gpg: unchanged: 1 gpg: secret keys read: 1 ---------------------------------------------------------------------- NOTE: log in attchment
Although this bug is pretty similar to bug 12022, this is failing in the gpg launch and bug 12022 on the rpmsign, so partially related. The common denominator is that both bugs (this one and 12022) are happening on the same distro. Moving to next release due to freeze.
recent log reported by RP: https://autobuilder.yocto.io/builders/nightly-oe-selftest/builds/540/steps/Running%20oe-selftest/logs/stdio
As well as pyro above, it was seen on morty: https://autobuilder.yocto.io/builders/nightly-oe-selftest/builds/540/steps/Running%20oe-selftest/logs/stdio (debian9.yocto.io worker)
(In reply to comment #0) > Created attachment 4002 [details] > FULL.LOG > > STATUS: FAILED > BUILD: 2.2.2: rc2-60402978fe3648bf560b3386c6e9dd661cdf2083 > ENVIRONMENT: Ubuntu 17.04 x86-64 > > There are 2 ways of manual and automatic reproduction. > > STEPS TO REPRODUCE MANUAL: > Steps: > 1. Generate a gpg key > gpg --gen-keyAnd provide this info when requested: > > key: RSAkey-size: 2048key-valid: 0realname: testuseremail: > testuser@email.comcomment: nocommentpassphrase: test123 > 2. Create a secret.txt with 'test123' in it.3. Export the secret and the > public key: > gpg --export --armor "testuser (nocomment) <testuser@testemail.com>" > > key.pubgpg --export-secret-keys --armor "testuser (nocomment) > <testuser@testemail.com>" > key.secret > 4. Add to local.conf: > INHERIT += "sign_rpm"RPM_GPG_PASSPHRASE_FILE = > "/home/daniel/poky/meta-selftest/files/secret.txt"RPM_GPG_NAME = > "testuser"RPM_GPG_PUBKEY = > "/home/daniel/poky/meta-selftest/files/key.pub"GPG_PATH = > "/home/daniel/poky/meta-selftest/files/" > 5. bitbake -c cleansstate ed6. bitbake -c clean ed7. bitbake ed8. > tmp/sysroots/x86_64-linux/usr/bin/rpm --import > /home/daniel/poky/meta-selftest/files/key.pub9. > tmp/sysroots/x86_64-linux/usr/bin/rpm --checksig > tmp/deploy/rpm/i586/ed-1.9-r0.i586.rpm > > STEPS TO REPRODUCE AUTOMATED: > > oe-selftest –r signing > > > EXPECTED OUTCOME: > > it should show that the package was signed correctly: > > eg :tmp/deploy/rpm/i586/ed-1.9-r0.i586.rpm: rsa sha1 md5 OK > > ACTUAL OUTCOME: > ====================================================================== > ERROR [0.000s]: setUpClass (oeqa.selftest.signing.Signing) > ---------------------------------------------------------------------- > AssertionError: Command 'gpg --homedir /tmp/oeqa-signing-hc7m5doc --import > /home/ab/autobuilder/yocto-worker/nightly-oe-selftest-ubuntu1704/build/meta- > selftest/files/signing/key.pub > /home/ab/autobuilder/yocto-worker/nightly-oe-selftest-ubuntu1704/build/meta- > selftest/files/signing/key.secret' returned non-zero exit status 2: > gpg: keybox '/tmp/oeqa-signing-hc7m5doc/pubring.kbx' created > gpg: /tmp/oeqa-signing-hc7m5doc/trustdb.gpg: trustdb created > gpg: key 7B31316B5D64AD52: public key "testuser (nocomment) > <testuser@testemail.com>" imported > gpg: key 7B31316B5D64AD52: "testuser (nocomment) <testuser@testemail.com>" > not changed > gpg: key 7B31316B5D64AD52/7B31316B5D64AD52: error sending to agent: > Inappropriate ioctl for device > gpg: error building skey array: Inappropriate ioctl for device > gpg: Total number processed: 2 > gpg: imported: 1 > gpg: unchanged: 1 > gpg: secret keys read: 1 > > ---------------------------------------------------------------------- > NOTE: log in attchment Oscar, lets use the keys defined on meta-selftest. Can you please run the same manual test with this command: $ mkdir /tmp/oeqa-signing-oscar $ or some folder which is unique on /tmp $ gpg --batch --homedir /tmp/oeqa-signing-oscar --import <path to poky morty>/meta-selftest/files/signing/key.pub /<path to poky morty>/meta-selftest/files/signing/key.secret I have tested the above command on a ubuntu 1704 box and I have no issues. This the gnupg version I used: lsandov1@ubuntu1704:~$ gpg --version gpg (GnuPG) 2.1.15 libgcrypt 1.7.6-beta Copyright (C) 2016 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Home: /home/lsandov1/.gnupg Supported algorithms: Pubkey: RSA, ELG, DSA, ECDH, ECDSA, EDDSA Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH, CAMELLIA128, CAMELLIA192, CAMELLIA256 Hash: SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224 Compression: Uncompressed, ZIP, ZLIB, BZIP2
> Oscar, lets use the keys defined on meta-selftest. Can you please run the > same manual test with this command: > > $ mkdir /tmp/oeqa-signing-oscar $ or some folder which is unique on /tmp > $ gpg --batch --homedir /tmp/oeqa-signing-oscar --import <path to poky > morty>/meta-selftest/files/signing/key.pub /<path to poky > morty>/meta-selftest/files/signing/key.secret > > I have tested the above command on a ubuntu 1704 box and I have no issues. > This the gnupg version I used: > > lsandov1@ubuntu1704:~$ gpg --version > gpg (GnuPG) 2.1.15 > libgcrypt 1.7.6-beta > Copyright (C) 2016 Free Software Foundation, Inc. > License GPLv3+: GNU GPL version 3 or later > <https://gnu.org/licenses/gpl.html> > This is free software: you are free to change and redistribute it. > There is NO WARRANTY, to the extent permitted by law. > > Home: /home/lsandov1/.gnupg > Supported algorithms: > Pubkey: RSA, ELG, DSA, ECDH, ECDSA, EDDSA > Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH, > CAMELLIA128, CAMELLIA192, CAMELLIA256 > Hash: SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224 > Compression: Uncompressed, ZIP, ZLIB, BZIP2 Leo, I have tested the above command on a ubuntu 1604 box and I have no issues. This the gnupg version I used: oscar@oscar:~$ gpg --version gpg (GnuPG) 1.4.20 Copyright (C) 2015 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Home: ~/.gnupg Supported algorithms: Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH, CAMELLIA128, CAMELLIA192, CAMELLIA256 Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224 Compression: Uncompressed, ZIP, ZLIB, BZIP2
is marked as duplicate the error already exists documented bug 12022 *** This bug has been marked as a duplicate of bug 12022 ***