Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Can't fetch keys to verify
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Installing Gentoo
View previous topic :: View next topic  
Author Message
Zane314
n00b
n00b


Joined: 20 Jun 2017
Posts: 6

PostPosted: Tue Jun 20, 2017 10:54 pm    Post subject: Can't fetch keys to verify Reply with quote

Hello,

Before I get into my issue I want to introduce myself as far as explaining why I'm trying to run Gentoo. I've been running Linux Mint for a while now and I'm getting tired of people on youtube saying that Mint is for noobs. I realize that it is but since I consider myself a junior developer and read on distrowatch as well as elsewhere that Gentoo is for developers I want to try to get iit running in a VM (Linux Mint being the host OS) and see if supports all the hardware and software I'd be running. Now getting to my issue. While going through the install guide here I got stuck trying to verify the installation because I can't even get gpg to fetch either of the two valid keys. I've tired both of the still valid keys listed here this is the output of my terminal

Code:
~ $ gpg --keyserver hkps.pool.sks-keyservers.net 0xDB6B8C1F96D8BF6D
gpg: can't open `0xDB6B8C1F96D8BF6D'
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 43192
Location: 56N 3W

PostPosted: Tue Jun 20, 2017 11:29 pm    Post subject: Reply with quote

Zane314,

Welcome to Gentoo.

Your command is not complete, add --receive-keys.

Code:
$ gpg --receive-keys --keyserver hkps.pool.sks-keyservers.net 0xDB6B8C1F96D8BF6D
gpg: key DB6B8C1F96D8BF6D: public key "Gentoo Portage Snapshot Signing Key (Automated Signing Key)" imported
gpg: marginals needed: 3  completes needed: 1  trust model: classic
gpg: depth: 0  valid:   5  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 5u
gpg: next trustdb check due at 2019-02-05
gpg: Total number processed: 1
gpg:               imported: 1
The guide has things in a different order.

Gentoo supports all the same hardware as any other distro using the linux kernel. Likewise for software.
You can check software in a VM but hardware testing is somewhat limited.
For that, do a dual boot system.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
Zane314
n00b
n00b


Joined: 20 Jun 2017
Posts: 6

PostPosted: Wed Jun 21, 2017 12:32 am    Post subject: Reply with quote

running that command gives the following output.

Code:
gpg --receive-keys --keyserver hkps.pool.sks-keyservers.net 0xDB6B8C1F96D8BF6D
gpg: Invalid option "--receive-keys"


Thanks for the info about the hardware and software support. I'll just do the VM to get used to the install process including installation of extra packages.
Back to top
View user's profile Send private message
charles17
Advocate
Advocate


Joined: 02 Mar 2008
Posts: 2613

PostPosted: Wed Jun 21, 2017 5:58 am    Post subject: Reply with quote

https://wiki.gentoo.org/wiki/Handbook:AMD64/Installation/Media#Linux_based_verification wrote:
gpg --keyserver hkp://keys.gnupg.net --recv-keys 0xBB572E0E2D182910
See the --recv-keys?
Back to top
View user's profile Send private message
Zane314
n00b
n00b


Joined: 20 Jun 2017
Posts: 6

PostPosted: Wed Jun 21, 2017 9:09 am    Post subject: Reply with quote

charles17 wrote:
https://wiki.gentoo.org/wiki/Handbook:AMD64/Installation/Media#Linux_based_verification wrote:
gpg --keyserver hkp://keys.gnupg.net --recv-keys 0xBB572E0E2D182910
See the --recv-keys?


Got it sorry. Now I get this.

Code:
gpg --recv-keys --keyserver hkps.pool.sks-keyservers.net 0xDB6B8C1F96D8BF6D
gpg: requesting key 96D8BF6D from hkp server hkps.pool.sks-keyservers.net
gpg: /home/coder/.gnupg/trustdb.gpg: trustdb created
gpg: key 96D8BF6D: public key "Gentoo Portage Snapshot Signing Key (Automated Signing Key)" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1  (RSA: 1)

Then I realized from re-reading that part of the guide that that check only checks the .asc file which is one file I hadn't actually downloaded since it was veiwable in my broswer. After copy the contents of and saving the file with that name I re-ran the same command and got this

Code:
gpg --recv-keys --keyserver hkps.pool.sks-keyservers.net 0xDB6B8C1F96D8BF6D
gpg: requesting key 96D8BF6D from hkp server hkps.pool.sks-keyservers.net
gpg: key 96D8BF6D: "Gentoo Portage Snapshot Signing Key (Automated Signing Key)" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1

I had saved the file with this name using gedit. install-amd64-minimal-20170615.iso.DIGESTS.asc
What am I doing wrong?
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 43192
Location: 56N 3W

PostPosted: Wed Jun 21, 2017 10:03 am    Post subject: Reply with quote

Zane314,

Nothing. That command only fetches the key.
Continue to the next step

Code:
gpg --verify install-amd64-minimal-20141204.iso.DIGESTS.asc

That's an example, its unlikely you will be using the install-amd64-minimal-20141204.iso in 2017.

Verifying that the digests file is sufficient. Once you have verified the signature on the digests file, you can trust its contents as much as you trust the key.
Then you use the contents of the digest to verify the download.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
Zane314
n00b
n00b


Joined: 20 Jun 2017
Posts: 6

PostPosted: Wed Jun 21, 2017 9:46 pm    Post subject: Reply with quote

Ok thanks I'm working on installing now and yes I know minimal isn't needed for the hardware we have nowadays I was just following the guide. Besides I want the full experience of installing from the ground up. :D
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 43192
Location: 56N 3W

PostPosted: Thu Jun 22, 2017 8:10 am    Post subject: Reply with quote

Zane314,

The minimal CD is a bit "hair shirt". As the boot media only provides a set a tools to accomplish the install, it does not contribute any code to the install, you don't lose anything by using a different boot media.
System Rescue CD is good. Its gentoo based and provides a GUI so you can browse the web to read the handbook and the forums while you install.

You still do the install the same way.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
Chiitoo
Administrator
Administrator


Joined: 28 Feb 2010
Posts: 1771
Location: Here and Away Again

PostPosted: Thu Jun 22, 2017 2:59 pm    Post subject: ><)))°€ Reply with quote

Teegrins, Zane314!

Zane314 wrote:
running that command gives the following output.

Code:
gpg --receive-keys --keyserver hkps.pool.sks-keyservers.net 0xDB6B8C1F96D8BF6D
gpg: Invalid option "--receive-keys"


In case you were wondering about this, the alias '--receive-keys' seems to have been added somewhere between 'app-crypt/gnupg-2.1.15' and 2.1.18 (from the versions available via Portage at this time), though somehow I didn't manage to find the actual commit for it yet. I'd guess NeddySeagoon has something around 2.1.21, while your environment has (or had) something that doesn't yet have it.

Welcome to Gentoo! :]
_________________
Kind Regards,
~ The Noob Unlimited ~

Sore wa sore, kore wa kore.
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 43192
Location: 56N 3W

PostPosted: Thu Jun 22, 2017 3:02 pm    Post subject: Reply with quote

Chiitoo,

Code:
 $ gpg --version
gpg (GnuPG) 2.1.21
libgcrypt 1.7.7
...

_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
Zane314
n00b
n00b


Joined: 20 Jun 2017
Posts: 6

PostPosted: Thu Jun 22, 2017 8:43 pm    Post subject: Reply with quote

NeddySeagoon wrote:
Zane314,

The minimal CD is a bit "hair shirt". As the boot media only provides a set a tools to accomplish the install, it does not contribute any code to the install, you don't lose anything by using a different boot media.
System Rescue CD is good. Its gentoo based and provides a GUI so you can browse the web to read the handbook and the forums while you install.

You still do the install the same way.


I'm not quite sure what you mean. I admit that when I wrote that previous post I didn't realize stage 3 files are still used in conjunction with doing a minimal install and I assumed you were referring to this directory which I just now realized isn't an install directory. (my bad) In that case though I don't understand what you meant by what you originally said. What did you mean by "you wouldn't use minimal install in 2017? Previous I assumed you were referring to an install that as precompiled stuff like the stages.

@Chitoo

You hit the nail on the head my gpg version is 1.4.16. Didn't realize Gentoo packages are that far ahead of Mint.
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 43192
Location: 56N 3W

PostPosted: Thu Jun 22, 2017 10:55 pm    Post subject: Reply with quote

Zane314,

The minimal CDs all have their build date in their name.
I pointed out that the handbook says
Code:
gpg --verify install-amd64-minimal-20141204.iso.DIGESTS.asc

That's a minimal CD from 4 December 2014. I was pointing out that it was an example and that you would be unlikely to be using a minimal CD from 2014 in 2017.

The admin CD is a step up from the minimal. I've never used it.

As the boot media is just a toolkit for accomplishing the install, almost anything that will provide a root shell can be used for a Gentoo install.
The binaries needed to get started are provided by the stage3 tarball, not the boot media.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
Zane314
n00b
n00b


Joined: 20 Jun 2017
Posts: 6

PostPosted: Fri Jun 23, 2017 1:17 am    Post subject: Reply with quote

I had a felling that's what you meant but I don't know how to get a more updated one since that one came from one of the links that the guide linked to.
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 43192
Location: 56N 3W

PostPosted: Fri Jun 23, 2017 9:08 am    Post subject: Reply with quote

Zane314,

No matter, whatever version of the liveCD you have, it worked for you. That's what matters.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Installing Gentoo All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum