Lxc-create ERROR: Unable to fetch GPG key from keyserver

Pepe · July 10, 2021, 4:15pm

Mohu potvrdit, že to souvisí s tím, co napsal v komentáři uživatel @ackstorm23. Pro více informací je možné si přečíst krátkou zprávičku na Root.cz:

Než se oprava dostane do jednotlivých vydání, tak je možné upravit soubor /usr/share/lxc/templates/lxc-download podle změn z commitu na GitHubu.

English part:

Many packages come from OpenWrt feeds as it is, but in this case, for LXC we have patch in turris/build repository as we provide a newer version than it is in OpenWrt 19.07.

Here goes my Saturday changes:

Turris OS 3.x:

I suggest you use opt-in migration or reflash by using rescue modes as described in our documentation to use a newer version of Turris OS.

Turris OS 5.x (will be part of upcoming Turris OS 5.2.4 release):

Ok, that’s Turris OS part, but here is also pull requests to OpenWrt.

18.06 (EoL already!):

github.com/openwrt/packages

lxc: add patch to switch GPG server

openwrt:openwrt-18.06 ← turris-cz:lxc-update-keyserver

opened 03:39PM - 10 Jul 21 UTC

BKPepe

+48 -1

Maintainer: @ratkaj Compile tested: openwrt-sdk-18.06.9-mvebu-cortexa9_gcc-7.3.…0_musl_eabi.Linux-x86_64 Run tested: OpenWrt 19.07.7 on Turris 1.1, powerpc8540 router with [this patch](https://gitlab.nic.cz/turris/os/build/-/commit/0bf44b2f1c273d5bf36e6a04d3c746cb837317be) verified that downloading LXC containers works. Description: - By default, there was used sks-keyservers.net pool, which has invalid SSL certificate and they also announced that their service is deprecate and no longer maintained. Use the same GPG server as LXC is using by default in the newer releases. - Fixes issue described here: https://forum.turris.cz/t/lxc-create-error-unable-to-fetch-gpg-key-from-keyserver/15636/2

19.07:

github.com/openwrt/packages

lxc: add patch to switch GPG server

openwrt:openwrt-19.07 ← turris-cz:19.07/lxc-update-gpg-keyserver

opened 03:44PM - 10 Jul 21 UTC

BKPepe

+48 -1

Maintainer: @ratkaj Compile tested: openwrt-sdk-19.07.7-mvebu-cortexa9_gcc-7.5.…0_musl_eabi.Linux-x86_64 Run tested: OpenWrt 19.07.7 on Turris 1.1, powerpc8540 router with [this patch](https://gitlab.nic.cz/turris/os/build/-/commit/0bf44b2f1c273d5bf36e6a04d3c746cb837317be) verified that downloading LXC containers works. Description: - By default, there was used sks-keyservers.net pool, which has invalid SSL certificate and they also announced that their service is deprecate and no longer maintained. Use the same GPG server as LXC is using by default in the newer releases. - Fixes issue described here: https://forum.turris.cz/t/lxc-create-error-unable-to-fetch-gpg-key-from-keyserver/15636/2

21.02:

github.com/openwrt/packages

lxc: add patch to switch GPG server

openwrt:openwrt-21.02 ← turris-cz:21.02/lxc-change-gpgkeyserver

opened 03:55PM - 10 Jul 21 UTC

BKPepe

+30 -1

Maintainer: @ratkaj Compile tested: openwrt-sdk-21.02.0-rc3-mvebu-cortexa53_gcc…-8.4.0_musl.Linux-x86_64 Run tested: OpenWrt 19.07.7 on Turris 1.1, powerpc8540 router with [this patch](https://gitlab.nic.cz/turris/os/build/-/commit/0bf44b2f1c273d5bf36e6a04d3c746cb837317be) verified that downloading LXC containers works. Description: - By default, there was used sks-keyservers.net pool, which has invalid SSL certificate and they also announced that their service is deprecate and no longer maintained. Use the same GPG server as LXC is using by default in the newer releases. - Fixes issue described here: https://forum.turris.cz/t/lxc-create-error-unable-to-fetch-gpg-key-from-keyserver/15636/2 __ The patch is present in stable-4.0 branch in LXC repository already, so it can be removed in the future bumps.

master:

github.com/openwrt/packages

lxc: add patch to switch GPG server

openwrt:master ← turris-cz:lxc-switch-gpg-keyserver

opened 04:02PM - 10 Jul 21 UTC

BKPepe

+30 -1

Maintainer: @ratkaj Compile tested: N/A; done for 21.02 in https://github.com/o…penwrt/packages/pull/16088 Run tested: OpenWrt 19.07.7 on Turris 1.1, powerpc8540 router with [this patch](https://gitlab.nic.cz/turris/os/build/-/commit/0bf44b2f1c273d5bf36e6a04d3c746cb837317be) verified that downloading LXC containers works. Description: - By default, there was used sks-keyservers.net pool, which has invalid SSL certificate and they also announced that their service is deprecate and no longer maintained. Use the same GPG server as LXC is using by default in the newer releases. - Fixes issue described here: https://forum.turris.cz/t/lxc-create-error-unable-to-fetch-gpg-key-from-keyserver/15636/2 __ The patch is present in stable-4.0 branch in LXC repository already, so it can be removed in the future bumps.

So, any pull requests are welcome to upstream and downstream distributions.