AUR PGP Issue

can you post the full command and outputs? something like I posted
maybe using sudo for gpg?

May I say. you are not very accurate in your undertakings, not in you postings in this thread.

One time, you’re trying librewolf, next time librewolf-bin, and mixing things together, that really don’t belong together.

These 2 errors mybe due to lack of rights. Have you tried them from a root shell?

gpg: connecting dirmngr at ā€˜/root/.gnupg/S.dirmngr’ failed: IPC connect call failed
gpg: keyserver receive failed: No dirmngr

This is a completely different error. Probably due to wring software setup (no directory manager).

two things involved first root and normal user is still mixed up not sure if you was copy pasting output from try as root or normal user is using root path?

and it says what is the issue already:
gpg: keyserver receive failed: No dirmngr*

yay -Qo /usr/bin/dirmngr
/usr/bin/dirmngr is owned by gnupg 2.2.39-1

so this is part of the GnuPG package check what you have installed:
yay -Qs gnupg

And validate if you somehow missing dirmngr:
ls /usr/bin/dirmngr

If GnuPG is installed but the path is not valid you screwed this up somehow.
Could help to reinstall the package:
yay -S gnupg

f.bin
I have tried all permutations and combinations to figure out successful installation of librewolf. normal as well as bin.

  1. Tried as user installation of librewolf with Yay librewolf

  2. Tried as user yay librewolf.bin
    This issue is not limited to librewolf package.
    ntps (network time secure protocol) upgrade from default ntp using yay ntps returned same pgp error
    SE Linux packages failed with same error.
    Let me reiterate my ports usage. I only allow 443,853,11371(key server mandatory) out.
    packman package signin requires 11371 port and that port is allowed out
    Tried manual installation of keys using different hkps and htps servers
    Removed gnupg and re installed all keys of arch linux and endeavourOS.

  3. Can i use root for yay helper. Archlinux does not recommend root previleges for yay helper

no you shouldn’t

Reinstalled gnupg

> warning: gnupg-2.2.39-1 is up to date – reinstalling
> resolving dependencies…
> looking for conflicting packages…
**> **
> Package (1) Old Version New Version Net Change Download Size
**> **
> core/gnupg 2.2.39-1 2.2.39-1 0.00 MiB 2.34 MiB
**> **
> Total Download Size: 2.34 MiB
> Total Installed Size: 8.54 MiB
> Net Upgrade Size: 0.00 MiB
**> **
> :: Proceed with installation? [Y/n] Y
> :: Retrieving packages…
> gnupg-2.2.39-1-x86_64 2.3 MiB 1500 KiB/s 00:02 [--------------------------------] 100%
> (1/1) checking keys in keyring [--------------------------------] 100%
> (1/1) checking package integrity [--------------------------------] 100%
> (1/1) loading package files [--------------------------------] 100%
> (1/1) checking for file conflicts [--------------------------------] 100%
> :: Processing package changes…
> (1/1) reinstalling gnupg [--------------------------------] 100%
> :: Running post-transaction hooks…
> (1/4) Arming ConditionNeedsUpdate…
> (2/4) Removing obsolete cached package files (keeping the latest two)…
> ==> no candidate packages found for pruning
> (3/4) Checking which packages need to be rebuilt
*> (4/4) Updating the info directory file…

Followed your suggestion to use root for manual import of key from other server. still same error after fresh gnupg install

> [root@NastikaasP330SatTosh nastikaa321518]# gpg --keyserver hkps://keyserver.ubuntu.com --search-keys E57235D22764129FA4F2F4D17F52608ED0E49D76
> gpg: connecting dirmngr at ā€˜/root/.gnupg/S.dirmngr’ failed: IPC connect call failed
> gpg: error searching keyserver: No dirmngr
> gpg: keyserver search failed: No dirmngr

Key servers have had issues in the past. Not sure about current status.
https://bbs.archlinux.org/viewtopic.php?id=259148
This chronic problem of not being able to import occured to me with arco linux as well and this is not specific to endeavourOS.
When system is fresh everything works. After some time may be some intruder messes up OS installation.
The place where i live has cyber criminals/activists who can use ISP,Satellite,4G mobile networks to intrude.
ISP is not trust worthy. They change my security settings on router and allow UDP 1900 port UpNP communication.Use 123 UDP port for spoofing purpose. They have access. My local password on router is meaningless.
My PC wireless radio is disabled. But that is not enough. Motherboard can be accessesd by kali linux/mobile networks
I can not do anything if hacker is capable of altering bios level settings from outer space.
Open source security is in question when BigTech wants to harass its users so that their OS with PC and mobile gets sold.
For business reasons,They dont like users managing old PC with open source Linux OS.
According to them users should buy new mobile phones and laptops every 2 years.

Finally installed archlinux-tweak-tool ,enabled arcolinux repos and installed pamac-all from arcolinux which also gets manjaro packages. librewolf is picked from arcolinux_repo_xlarge/librewolf-bin 104.0.2-1

**> 1 arcolinux_repo_xlarge/librewolf-bin 104.0.2-1 (79.0 MiB 230.5 MiB) **
> Community-maintained fork of Firefox, focused on privacy, security and freedom.
> ==> Packages to install (eg: 1 2 3, 1-3 or ^4)
> ==> 1
> resolving dependencies…
> looking for conflicting packages…
**> **
> Package (1) New Version Net Change Download Size
**> **
> arcolinux_repo_xlarge/librewolf-bin 104.0.2-1 230.49 MiB 78.96 MiB
**> **
> Total Download Size: 78.96 MiB
> Total Installed Size: 230.49 MiB
**> **
> :: Proceed with installation? [Y/n] Y
> :: Retrieving packages…
> librewolf-bin-104.0.2-1-x86_64 79.0 MiB 3.82 MiB/s 00:21 [--------------------------------] 100%
> (1/1) checking keys in keyring [--------------------------------] 100%
> (1/1) checking package integrity [--------------------------------] 100%
> (1/1) loading package files [--------------------------------] 100%
> (1/1) checking for file conflicts [--------------------------------] 100%
> :: Processing package changes…
> (1/1) installing librewolf-bin [--------------------------------] 100%
> >> Remember to check for changes in /usr/lib/librewolf/librewolf.cfg.pacnew
> >> as those will not automatically overwrite your existing librewolf.cfg.
**> >> **
> >> We would encourage you to migrate your own changes to the new overrides file
> >> at ~/.librewolf/librewolf.overrides.cfg instead, so making changes directly
> >> in your librewolf.cfg is not necessary anymore (in most cases at least).
**> >> **
> >> Check out https://gitlab.com/librewolf-community/settings/-/merge_requests/13
> >> for more information on this.
> Optional dependencies for librewolf-bin
> networkmanager: Location detection via available WiFi networks [installed]
> libnotify: Notification integration [installed]
> pulseaudio: Audio support [installed]
> speech-dispatcher: Text-to-Speech
> hunspell-en_US: Spell checking, American English
> :: Running post-transaction hooks…
> (1/4) Arming ConditionNeedsUpdate…
> (2/4) Updating icon theme caches…
> (3/4) Removing obsolete cached package files (keeping the latest two)…
> ==> no candidate packages found for pruning
> (4/4) Updating the desktop file MIME type cache…
This package is available with other archlinux distro repos,hence i could install
But ntpsec can not be installed so as other packages from AUR with out key import from archlinux key servers.
Not sure whether my ISP blocked 11371 tcp port which is mandatory.
Someone help with ISP level forensics. This issue will not arise again.Thanks

Do NOT! run gpg with sudo. You want to import keys into your users key-ring, not root’s.

If that is the case, try a keyserver that operates on a different port:
hkp://keyserver.ubuntu.com:80. (Port 80 is http and should definitely not be blocked.)

4 Likes

my suggestion to use root??? :wink:
I say exactly the opposite… if you want to build a package with yay or manually you need the do this as normal user and you need to add the key to your normal users keyring.

the keyservers are public keyservers not from archlinux…

I have blocked 80. Only 443&853 are allowed. Tried hkps://pgp.mit.edu which works on 443 and TLS(853 port). Returned same error though

Import of keys with http:// or hkp:// i can not imagine as my PC never uses port 80 and http traffic
Hence used hkps:// on 443 and 853(DNS over TLS)
This is the result

> [nastikaa321518@NastikaasP330SatTosh ~]$ gpg --keyserver hkps://keyserver.ubuntu.com:443 --search-keys E57235D22764129FA4F2F4D17F52608ED0E49D76
> gpg: error searching keyserver: Operation not permitted
> gpg: keyserver search failed: Operation not permitted

What is the output of

find $HOME ! -user $USER

?

Everything under home directory should belong to your user so if that is the case it shouldn’t give any output.

Dunno what’s going on your network but as a workaround you could try manually downloading and importing: :person_shrugging:

curl "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xe57235d22764129fa4f2f4d17f52608ed0e49d76" -o some_pub.key
pgp --import some_pub.key

Output as follows. Hope my syntax is correct

[nastikaa321518@NastikaasP330SatTosh home]$ $HOME ! -user $nastikaa321518
bash: /home/nastikaa321518: Is a directory

Correct syntax:

find $HOME ! -user $USER

output is
nastikaa321518@NastikaasP330SatTosh ~]$ curl ā€œhttps://keyserver.ubuntu.com/pks/lookup?op=get&search=0xe57235d22764129fa4f2f4d17f52608ed0e49d76ā€ -o some_pub.key
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 3990 0 3990 0 0 8402 0 --:–:-- --:–:-- --:–:-- 8400
Down loaded 3390KB. After that tried to install ntpsec using yay
error
yay ntpsec
2 aur/ntpsec-git 1.2.1.r20.cb9d08ca5-1 (+1 0.00)
Security-hardened Network Time Protocol implementation (Git HEAD)
1 aur/ntpsec 1.2.1-0 (+10 0.05)
Security-hardened Network Time Protocol implementation
==> Packages to install (eg: 1 2 3, 1-3 or ^4)
==> 1
:: Checking for conflicts…
:: Checking for inner conflicts…
→ Package conflicts found:
→ Installing ntpsec will remove: ntp
→ Conflicting packages will have to be confirmed manually
[Repo Make:1] w3m-0.5.3.git20220409_1-1
[Aur:1] ntpsec-1.2.1-0

:: Remove make dependencies after install? [y/N] y
:: (1/1) Downloaded PKGBUILD: ntpsec
1 ntpsec (Build Files Exist)
==> Diffs to show?
==> [N]one [A]ll [Ab]ort [I]nstalled [No]tInstalled or (1 2 3, 1-3, ^4)
==> n
:: (1/1) Parsing SRCINFO: ntpsec

:: PGP keys need importing:
→ E57235D22764129FA4F2F4D17F52608ED0E49D76, required by: ntpsec
:: Import? [Y/n] y
:: Importing keys with gpg…
gpg: keyserver receive failed: Operation not permitted

This is result
> [nastikaa321518@NastikaasP330SatTosh ~]$ find $HOME ! -user $USER
> /home/nastikaa321518/.gnupg/dirmngr_ldapservers.conf

Seems you have some ownership issues.

As said before everything under home directory should belong to your user. If that was the case you shouldn’t be getting any output at all.

ls -al /home/nastikaa321518/.gnupg/dirmngr_ldapservers.conf

should verify that.

Correct the ownership issue with:

sudo chown $USER:$USER /home/nastikaa321518/.gnupg/dirmngr_ldapservers.conf

2 Likes