Example mytest/figlet fails without optional GPG keys

[APN-Pucky]

Example mytest/figlet fails without optional GPG keys

[berney]

This still happens in latest kubler, 23bd7ff

Normal (not verbose mode)

root@70e5971ef182:~/berney# kubler.sh build berney/figlet
»»»»»[init]» generate build graph
»»» required engines:    docker
»»» required stage3:     stage3-amd64-musl-hardened stage3-amd64-hardened-nomultilib-openrc
»»» required builders:   kubler/bob-musl kubler/bob
»»» build sequence:      kubler/busybox kubler/glibc berney/figlet
»[✔]»[init]» done.
»[]»[portage]» download portage snapshot [ 43M ]
root@70e5971ef182:~/berney# echo $?
1

Verbose mode

root@70e5971ef182:~/berney# kubler.sh build -v berney/figlet
»»»»»[init]» generate build graph
»»» required engines:    docker
»»» required stage3:     stage3-amd64-musl-hardened stage3-amd64-hardened-nomultilib-openrc
»»» required builders:   kubler/bob-musl kubler/bob
»»» build sequence:      kubler/busybox kubler/glibc berney/figlet
»[✔]»[init]» done.
»»»»»[portage]» download portage snapshot
gpg: Signature made Tue Oct 17 00:56:38 2023 UTC
gpg:                using RSA key E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
gpg: Can't check signature: No public key
»[✘]»[portage]» Signature check failed
»[!]»[portage]» Pick one of the options below to continue:

 1. Setup gpg and import the gentoo infrastructure gpg key:

  gpg --keyserver keys.gentoo.org --recv-keys <key-id>

  The key-id can be found in the gpg output a few lines above this, look for: 'gpg: using RSA key XXXXXXXXXXXXXXXXXX'

  Note: The Gentoo infrastructure team occasionally changes the keys, so you may need to repeat this step from time to time.

 2. Disable gpg checking temporarily by passing the -s arg to the build command

 3. Disable gpg checking permanently by setting KUBLER_SKIP_GPG_CHECK='true' in kubler.conf

[r7l]

I was running into the same issue. Gentoo has messed up the releases. It's been like this for at least 2 weeks. The issue is that the .asc file isn't the one it should be. Take a look here and compare the dates of the files:

The tar.xz file is called:

stage3-amd64-musl-hardened-20231015T161657Z.tar.xz

While the tar.xz.asc file is called:

stage3-amd64-musl-hardened-20231008T170201Z.tar.xz.asc

It should be exactly the same but it isn't. I've made a post about it on the Gentoo forums but it's still broken it seems.

The issue with Kubler is from this line. It does skip the check but still tries to download the file prior to the check.

Edit:

Easy workaround is by placing a fake file to your download directory with the expected name. Kubler checks for a file to be existing there and skips the download in that case.

[edannenberg]

Seems to be resolved, feel free to reopen if there are still issues.