Skip to content

gpg --keyserver doesn't work with AL2023 minimal #78

@keithly

Description

@keithly

gpg: keyserver receive failed: No dirmngr
amazonlinux/amazon-linux-2023#243

Minimal AL2023 versions use microdnf, which doesn't have the suggested workarounds to easily install the full gpg.

I tried to use sigstore instead. https://www.python.org/download/sigstore/ says use the python tool, etc. Uh, but you're trying to build python, right? What if it doesn't exist?
I tried using sigstore cosign instead, but using
cosign verify-blob Python-${PYTHON_VERSION}.tar.xz --bundle Python-${PYTHON_VERSION}.tar.xz.sigstore [email protected] --certificate-oidc-issuer=https://accounts.google.com
I get

Error: bundle does not contain cert for verification, please provide public key
main.go:74: error during command execution: bundle does not contain cert for verification, please provide public key

I'm just going to get rid of the verification for now.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions