I got this message when initially downloading the artifacts: Downloading https://dist.apache.org/repos/dist/dev/lucene/lucene-9.4.2-RC1-rev-858d9b437047a577fa9457089afff43eefa461db/lucene/lucene-9.4.2-src.tgz.asc File: /tmp/smoke_lucene_9.4.2_858d9b437047a577fa9457089afff43eefa461db/lucene.lucene-9.4.2-src.tgz.gpg.verify.log verify trust GPG: gpg: WARNING: This key is not certified with a trusted signature!
is it related? On Fri, Nov 18, 2022 at 8:43 AM Uwe Schindler <u...@thetaphi.de> wrote: > > The problem is: it is working like this since years - the 9.4.1 release > worked fine. No change! > > And I can't configure this because GPG uses its own home directory setup by > smoke tester (see paths below). So it should not look anywhere else? In > addition "gpg: no ultimately trusted keys found" is just a warning, it should > not cause gpg to exit. > > Also why does it only happens at the time of Maven? It checks signatures > before, too. This is why I restarted the build: > https://jenkins.thetaphi.de/job/Lucene-Release-Tester/25/console (still > running) > > Uwe > > Am 18.11.2022 um 14:21 schrieb Adrien Grand: > > Uwe, the error message suggests that Policeman Jenkins is not ultimately > trusting any of the keys. Does it work if you configure it to ultimately > trust your "Uwe Schindler (CODE SIGNING KEY) <uschind...@apache.org>" key > (which I assume you would be ok with)? > > On Fri, Nov 18, 2022 at 2:18 PM Uwe Schindler <u...@thetaphi.de> wrote: >> >> I am restarting the build, maybe it was some hickup. Interestingly it only >> failed for the Maven dependencies. P.S.: Why does it import the key file >> over and over? It would be enough to do this once at beginning of smoker. >> >> Uwe >> >> Am 18.11.2022 um 14:12 schrieb Uwe Schindler: >> >> Hi, >> >> I get a failure because your key is somehow rejected by GPG (Ubuntu 22.04): >> >> https://jenkins.thetaphi.de/job/Lucene-Release-Tester/24/console >> >> verify maven artifact sigs command "gpg --homedir >> /home/jenkins/workspace/Lucene-Release-Tester/smoketmp/lucene.gpg --import >> /home/jenkins/workspace/Lucene-Release-Tester/smoketmp/KEYS" failed: gpg: >> keybox >> '/home/jenkins/workspace/Lucene-Release-Tester/smoketmp/lucene.gpg/pubring.kbx' >> created gpg: >> /home/jenkins/workspace/Lucene-Release-Tester/smoketmp/lucene.gpg/trustdb.gpg: >> trustdb created gpg: key B83EA82A0AFCEE7C: public key "Yonik Seeley >> <yo...@apache.org>" imported gpg: can't connect to the agent: IPC connect >> call failed gpg: key E48025ED13E57FFC: public key "Upayavira >> <u...@odoko.co.uk>" imported [...] gpg: key 051A0FAF76BC6507: public key >> "Adrien Grand (CODE SIGNING KEY) <jpou...@apache.org>" imported [...] gpg: >> key 32423B0E264B5CBA: public key "Julie Tibshirani (New code signing key) >> <juliet...@apache.org>" imported gpg: Total number processed: 62 gpg: >> imported: 62 gpg: no ultimately trusted keys found >> It looks like for others it succeeds? No idea why. Maybe Ubuntu 22.04 has a >> too-new GPG or it needs to use gpg2? >> >> -1 to release until this is sorted out. >> >> Uwe >> >> Am 17.11.2022 um 15:18 schrieb Adrien Grand: >> >> Please vote for release candidate 1 for Lucene 9.4.2 >> >> The artifacts can be downloaded from: >> https://dist.apache.org/repos/dist/dev/lucene/lucene-9.4.2-RC1-rev-858d9b437047a577fa9457089afff43eefa461db >> >> You can run the smoke tester directly with this command: >> >> python3 -u dev-tools/scripts/smokeTestRelease.py \ >> https://dist.apache.org/repos/dist/dev/lucene/lucene-9.4.2-RC1-rev-858d9b437047a577fa9457089afff43eefa461db >> >> The vote will be open for at least 72 hours i.e. until 2022-11-20 15:00 UTC. >> >> [ ] +1 approve >> [ ] +0 no opinion >> [ ] -1 disapprove (and reason why) >> >> Here is my +1. >> >> -- >> Adrien >> >> -- >> Uwe Schindler >> Achterdiek 19, D-28357 Bremen >> https://www.thetaphi.de >> eMail: u...@thetaphi.de >> >> -- >> Uwe Schindler >> Achterdiek 19, D-28357 Bremen >> https://www.thetaphi.de >> eMail: u...@thetaphi.de > > > > -- > Adrien > > -- > Uwe Schindler > Achterdiek 19, D-28357 Bremen > https://www.thetaphi.de > eMail: u...@thetaphi.de --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For additional commands, e-mail: dev-h...@lucene.apache.org
