gpg: Can't check signature: public key not found #4573

knzudgt · 2019-01-06T14:45:48Z

Description

I installed rvm in 2014 into Ubuntu 14.04 LTS with the following commands:

$ gpg --keyserver hkp://keys.gnupg.net --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3
$ \curl -L https://get.rvm.io | bash -s stable --rails --autolibs=enable

I never upgraded rvm, but today I was warned that I was using an older version of rvm while installing a new ruby. So I decided to upgrade. This is what happened:

marco@SATELLITE-L50-A-161:~ $ rvm get stable
Downloading https://get.rvm.io
Downloading https://raw.githubusercontent.com/rvm/rvm/master/binscripts/rvm-installer.asc
Verifying /home/marco/.rvm/archives/rvm-installer.asc
gpg: Signature made dom 30 dic 2018 11:44:46 CET using RSA key ID 39499BDB
gpg: Can't check signature: public key not found
Warning, RVM 1.26.0 introduces signed releases and automated check of signatures when GPG software found. Assuming you trust Michal Papis import the mpapis public key (downloading the signatures).

GPG signature verification failed for '/home/marco/.rvm/archives/rvm-installer' - 'https://raw.githubusercontent.com/rvm/rvm/master/binscripts/rvm-installer.asc'! Try to install GPG v2 and then fetch the public key:

gpg2 --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3

or if it fails:

command curl -sSL https://rvm.io/mpapis.asc | gpg --import -

the key can be compared with:

https://rvm.io/mpapis.asc
https://keybase.io/mpapis

NOTE: GPG version 2.1.17 have a bug which cause failures during fetching keys from remote server. Please downgrade or upgrade to newer version (if available) or use the second method described above.

I read #3110 but I did not install rvm as root user and I am not using rvm as root user.
I have gpg installed:

marco@SATELLITE-L50-A-161:~ $ gpg --version
gpg (GnuPG) 1.4.16

Steps to reproduce

Install rvm version '1.29.3'. with the afore mentioned commands
Try to upgrade rvm with rvm get stable
upgrade fails

Expected behavior

rvm should upgrade

Actual behavior

rvm does not upgrade

Environment info (note that I uninstalled ruby 2.6.0)

marco@SATELLITE-L50-A-161:~ $ rvm info

ruby-2.6.0:

system:
uname: "Linux SATELLITE-L50-A-161 4.4.0-141-generic #167~14.04.1-Ubuntu SMP Mon Dec 10 13:20:24 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux"
name: "Ubuntu"
version: "14.04"
architecture: "x86_64"
bash: "/bin/bash => GNU bash, version 4.3.11(1)-release (x86_64-pc-linux-gnu)"
zsh: " => not installed"
remote_path: "ubuntu/14.04/x86_64"

rvm:
version: "1.29.3 (master)"
updated: "8 months 28 days 30 minutes 38 seconds ago"
path: "/home/marco/.rvm"
autolibs: "[enable] Allow RVM to use package manager if found, install missing dependencies, install package manager (only OS X)."

ruby:
interpreter: "ruby"
version: "1.9.3p484"
date: "2013-11-22"
platform: "x86_64-linux"
patchlevel: "2013-11-22 revision 43786"
full_version: "ruby 1.9.3p484 (2013-11-22 revision 43786) [x86_64-linux]"

homes:
gem: "/home/marco/.rvm/gems/ruby-2.6.0"
ruby: "/home/marco/.rvm/rubies/ruby-2.6.0"

binaries:
ruby: "/usr/bin/ruby"
irb: "/usr/bin/irb"
gem: "/usr/bin/gem"
rake: ""

environment:
PATH: "/home/marco/.rvm/gems/ruby-2.6.0/bin:/home/marco/.rvm/gems/ruby-2.6.0@global/bin:/home/marco/.rvm/rubies/ruby-2.6.0/bin:/home/marco/.rvm/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/home/marco/bin:/usr/local/heroku/bin:/home/marco/bin"
GEM_HOME: "/home/marco/.rvm/gems/ruby-2.6.0"
GEM_PATH: "/home/marco/.rvm/gems/ruby-2.6.0:/home/marco/.rvm/gems/ruby-2.6.0@global"
MY_RUBY_HOME: "/home/marco/.rvm/rubies/ruby-2.6.0"
IRBRC: "/home/marco/.rvm/rubies/ruby-2.6.0/.irbrc"
RUBYOPT: ""
gemset: ""

The text was updated successfully, but these errors were encountered:

wakkowarner · 2019-01-07T15:57:09Z

Try
gpg --keyserver hkp://keys.gnupg.net --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3 7D2BAF1CF37B13E2069D6956105BD0E739499BDB
seems like @pkuczynski took over the signing.

knzudgt · 2019-01-08T15:08:19Z

Thanks @wakkowarner , it worked!
Now rvm says:

* It looks like some old stuff is laying around RVM, you can cleanup with: rvm cleanup all

Is it safe to run rvm cleanup all? I have never done it before

pkuczynski · 2019-01-08T15:41:29Z

That's correct. I also fixed documentation on rvm.io

techgique · 2019-03-18T17:06:07Z

@pkuczynski Has this been updated in the error message when signatures fail to match? We were updating from 1.29.3 and couldn't figure out what was wrong because the suggested command in the error message didn't include your key:

Downloading https://get.rvm.io
Downloading https://raw.githubusercontent.com/rvm/rvm/master/binscripts/rvm-installer.asc
Verifying /usr/local/rvm/archives/rvm-installer.asc
gpg: Signature made Sun 30 Dec 2018 04:44:46 AM CST using RSA key ID 39499BDB
gpg: Can't check signature: No public key
Warning, RVM 1.26.0 introduces signed releases and automated check of signatures when GPG software found. Assuming you trust Michal Papis import the mpapis public key (downloading the signatures).

GPG signature verification failed for '/usr/local/rvm/archives/rvm-installer' - 'https://raw.githubusercontent.com/rvm/rvm/master/binscripts/rvm-installer.asc'! Try to install GPG v2 and then fetch the public key:

    sudo gpg2 --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3

or if it fails:

    command curl -sSL https://rvm.io/mpapis.asc | sudo gpg2 --import -

the key can be compared with:

    https://rvm.io/mpapis.asc
    https://keybase.io/mpapis

NOTE: GPG version 2.1.17 have a bug which cause failures during fetching keys from remote server. Please downgrade or upgrade to newer version (if available) or use the second method described above.

/usr/local/rvm/scripts/functions/cli: line 243: return: _ret: numeric argument required

Edit: Nevermind, I see you responded to this concern in #3110 (comment)

add new dev key as per rvm/rvm#4573

crifan · 2022-08-16T13:26:55Z

Finally following worked for me:

curl -sSL https://rvm.io/mpapis.asc | gpg --import -
curl -sSL https://rvm.io/pkuczynski.asc | gpg --import -

danielricecodes · 2022-10-05T16:48:52Z

Try gpg --keyserver hkp://keys.gnupg.net --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3 7D2BAF1CF37B13E2069D6956105BD0E739499BDB seems like @pkuczynski took over the signing.

This isn't working in October 2022.

gpg --keyserver hkp://keys.gnupg.net --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3 7D2BAF1CF37B13E2069D6956105BD0E739499BDB

gpg: keyserver receive failed: Server indicated a failure

danielricecodes · 2022-10-05T16:50:57Z

Finally following worked for me:

curl -sSL https://rvm.io/mpapis.asc | gpg --import -
curl -sSL https://rvm.io/pkuczynski.asc | gpg --import -

This did work - thankfully.

pkuczynski closed this as completed Jan 8, 2019

pkuczynski added the duplicate label Jan 8, 2019

pkuczynski added this to the rvm-1.29.8 milestone Jan 8, 2019

sbeaulie pushed a commit to sbeaulie/puppet-rvm that referenced this issue May 13, 2019

Update common.pp

9f56325

add new dev key as per rvm/rvm#4573

sbeaulie mentioned this issue May 13, 2019

Update common.pp puppetlabs-operations/puppet-rvm#2

Merged

This was referenced Sep 1, 2020

public key not found for rvm railsgirls/installation-scripts#60

Closed

fix rvm gpg signature not working for ubuntu and arch railsgirls/installation-scripts#61

Merged

iwasakims mentioned this issue Jun 27, 2021

BIGTOP-3562. Building Logstash is failing due to the unavailability of keyserver. apache/bigtop#791

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

gpg: Can't check signature: public key not found #4573

gpg: Can't check signature: public key not found #4573

knzudgt commented Jan 6, 2019 •

edited

wakkowarner commented Jan 7, 2019

knzudgt commented Jan 8, 2019

pkuczynski commented Jan 8, 2019

techgique commented Mar 18, 2019 •

edited

crifan commented Aug 16, 2022

danielricecodes commented Oct 5, 2022

danielricecodes commented Oct 5, 2022 •

edited

gpg: Can't check signature: public key not found #4573

gpg: Can't check signature: public key not found #4573

Comments

knzudgt commented Jan 6, 2019 • edited

Description

Steps to reproduce

Expected behavior

Actual behavior

Environment info (note that I uninstalled ruby 2.6.0)

wakkowarner commented Jan 7, 2019

knzudgt commented Jan 8, 2019

pkuczynski commented Jan 8, 2019

techgique commented Mar 18, 2019 • edited

crifan commented Aug 16, 2022

danielricecodes commented Oct 5, 2022

danielricecodes commented Oct 5, 2022 • edited

knzudgt commented Jan 6, 2019 •

edited

techgique commented Mar 18, 2019 •

edited

danielricecodes commented Oct 5, 2022 •

edited