[GH-ISSUE #2242] Arch linux needs extra options in gpg profile #1504

New issue

Closed

opened 2026-05-05 08:10:16 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented

2026-05-05 08:10:16 -06:00

Owner

Originally created by @ghost on GitHub (Nov 5, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2242

Hi, seeing two issues with the current gpg profile from git master. The first is that gpg never exits cleanly in CLI. This seems to be caused by shell none. The second issue only shows on Arch, which has a package called archlinux-keyring, vital for pacman's functioning.

$ sudo pacman -S archlinux-keyring
warning: archlinux-keyring-20181018-1 is up to date -- reinstalling
resolving dependencies...
looking for conflicting packages...

Packages (1) archlinux-keyring-20181018-1

Total Download Size: 0,60 MiB
Total Installed Size: 0,84 MiB
Net Upgrade Size: 0,00 MiB

:: Proceed with installation? [Y/n]
:: Retrieving packages...
archlinux-keyring-20181018... 615,8 KiB 1400K/s 00:00 [###############################] 100%
(1/1) checking keys in keyring [###############################] 100%
(1/1) checking package integrity [###############################] 100%
(1/1) loading package files [###############################] 100%
(1/1) checking for file conflicts [###############################] 100%
:: Processing package changes...
(1/1) reinstalling archlinux-keyring [###############################] 100%
==> Appending keys from archlinux.gpg...
gpg: error writing keyring '/etc/pacman.d/gnupg/pubring.gpg': Read-only file system
gpg: can't connect to the agent: IPC connect call failed
gpg: error reading '/usr/share/pacman/keyrings/archlinux.gpg': Read-only file system
gpg: import from '/usr/share/pacman/keyrings/archlinux.gpg' failed: Read-only file system
==> Locally signing trusted keys in keyring...
...
==> Importing owner trust values...
gpg: Note: trustdb not writable
==> Disabling revoked keys in keyring...
...
==> Updating trust database...
gpg: Note: trustdb not writable

These issues are easily fixed, but it might be nice to add a note to the profile for Arch users, as adding read-write /etc/pacman.d/gnupg + read-write /usr/share/pacman/keyrings makes dealing with archlinux-keyring extremely slow.

Regards.

Originally created by @ghost on GitHub (Nov 5, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2242 Hi, seeing two issues with the current `gpg` profile from git master. The first is that gpg never exits cleanly in CLI. This seems to be caused by `shell none`. The second issue only shows on Arch, which has a package called `archlinux-keyring`, vital for pacman's functioning. $ sudo pacman -S archlinux-keyring warning: archlinux-keyring-20181018-1 is up to date -- reinstalling resolving dependencies... looking for conflicting packages... Packages (1) archlinux-keyring-20181018-1 Total Download Size: 0,60 MiB Total Installed Size: 0,84 MiB Net Upgrade Size: 0,00 MiB :: Proceed with installation? [Y/n] :: Retrieving packages... archlinux-keyring-20181018... 615,8 KiB 1400K/s 00:00 [###############################] 100% (1/1) checking keys in keyring [###############################] 100% (1/1) checking package integrity [###############################] 100% (1/1) loading package files [###############################] 100% (1/1) checking for file conflicts [###############################] 100% :: Processing package changes... (1/1) reinstalling archlinux-keyring [###############################] 100% ==> Appending keys from archlinux.gpg... gpg: error writing keyring '/etc/pacman.d/gnupg/pubring.gpg': Read-only file system gpg: can't connect to the agent: IPC connect call failed gpg: error reading '/usr/share/pacman/keyrings/archlinux.gpg': Read-only file system gpg: import from '/usr/share/pacman/keyrings/archlinux.gpg' failed: Read-only file system ==> Locally signing trusted keys in keyring... ... ==> Importing owner trust values... gpg: Note: trustdb not writable ==> Disabling revoked keys in keyring... ... ==> Updating trust database... gpg: Note: trustdb not writable These issues are easily fixed, but it might be nice to add a note to the profile for Arch users, as adding `read-write /etc/pacman.d/gnupg` + `read-write /usr/share/pacman/keyrings` makes dealing with `archlinux-keyring` extremely slow. Regards.

gitea-mirror closed this issue

2026-05-05 08:10:18 -06:00

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1504

No description provided.

Rows
Columns