gpg error on Focal while submitting any message and document #5499
Projects
Comments
eloquence
moved this from Near Term - SecureDrop Core
to Next sprint nominations
in SecureDrop Team Board
eloquence
moved this from Next sprint nominations
to SecureDrop Sprint #59 - 9/17-10/1
in SecureDrop Team Board
|
In Focal, The following diff solves the problem, question for the team, if this is a good way to move forward. diff --git a/install_files/ansible-base/roles/app/tasks/initialize_securedrop_app.yml b/install_files/ansible-base/roles/app/tasks/initialize_securedrop_app.yml
index 8d0892bcb..70732a84c 100644
--- a/install_files/ansible-base/roles/app/tasks/initialize_securedrop_app.yml
+++ b/install_files/ansible-base/roles/app/tasks/initialize_securedrop_app.yml
@@ -11,6 +11,7 @@
command: >
su -s /bin/bash -c 'gpg
--homedir {{ securedrop_data }}/keys
+ --no-default-keyring --keyring {{ securedrop_data }}/keys/pubring.gpg
--import {{ securedrop_data }}/{{ securedrop_app_gpg_public_key }}' {{ securedrop_user }}
register: gpg_app_key_import
changed_when: "'imported: 1' in gpg_app_key_import.stderr" |
kushaldas
added a commit
that referenced
this issue
Sep 30, 2020
`make dev-focal` will start a Focal container with SecureDrop running. Also updates the gpg2 --import command to import into the pubring.gpg keyring file explictly. Related Ansible change is tracked via #5499
12 tasks
kushaldas
added a commit
that referenced
this issue
Oct 6, 2020
`make dev-focal` will start a Focal container with SecureDrop running. Also updates the gpg2 --import command to import into the pubring.gpg keyring file explictly. Related Ansible change is tracked via #5499
kushaldas
added a commit
that referenced
this issue
Oct 7, 2020
`make dev-focal` will start a Focal container with SecureDrop running. Also updates the gpg2 --import command to import into the pubring.gpg keyring file explictly. Related Ansible change is tracked via #5499
kushaldas
added a commit
that referenced
this issue
Oct 8, 2020
`make dev-focal` will start a Focal container with SecureDrop running. Also updates the gpg2 --import command to import into the pubring.gpg keyring file explictly. Related Ansible change is tracked via #5499
SecureDrop Team Board
automation
moved this from SecureDrop Sprint #61 - 10/15-10/28
to Done
Oct 16, 2020
kushaldas
added a commit
that referenced
this issue
Oct 21, 2020
`make dev-focal` will start a Focal container with SecureDrop running. Also updates the gpg2 --import command to import into the pubring.gpg keyring file explictly. Related Ansible change is tracked via #5499
kushaldas
added a commit
that referenced
this issue
Oct 29, 2020
`make dev-focal` will start a Focal container with SecureDrop running. Also updates the gpg2 --import command to import into the pubring.gpg keyring file explictly. Related Ansible change is tracked via #5499
kushaldas
added a commit
that referenced
this issue
Nov 4, 2020
`make dev-focal` will start a Focal container with SecureDrop running. Also updates the gpg2 --import command to import into the pubring.gpg keyring file explictly. Related Ansible change is tracked via #5499
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Description
On
Focalstaging environment, if we submit any document or message, the server throwsinternal error.Steps to Reproduce
molecule converge -s libvirt-staging-focal -- --tags grsecurityExpected Behavior
Actual Behavior
Shows error on the source interface.
The error message in the log shows
But, the files/message are actually shows in
/var/lib/securedrop/storein proper encrypted form.Comments
Suggestions to fix, any other relevant information.
The text was updated successfully, but these errors were encountered: