flatpak install failure - erroreous install messages

[wwalker]

Problem description:

Attempts to install an already installed flatpak, error with :

Error: GPG verification enabled, but no signatures found (use gpg-verify=false in remote config to disable)
error: Failed to install bundle fr.handbrake.ghb: GPG verification enabled, but no signatures found (use gpg-verify=false in remote config to disable)

HandBrake version (e.g., 1.3.0):

1.3.3

Flatpak version

@$ flatpak --version
Flatpak 1.8.3

Operating system and version

Fedora 32 up to date as of now.

Error message text and/or screenshot:

Error: GPG verification enabled, but no signatures found (use gpg-verify=false in remote config to disable)

HandBrake Activity Log:

flatpak install (build?) problem, HandBrake hasn't been run yet

Steps to reproduce

• Install flatpak.
• Forget that you installed it.
• Try to install it again.
• Spend hours trying to figure out the non-existant GPG problem.

This does Not happen with other flatpaks, only with the HandBrake flatpak.

2021-01-03 11:35:12 wwalker@plutonium:~/Downloads ✓
@$ flatpak install --user HandBrake-1.3.3-x86_64.flatpak

fr.handbrake.ghb permissions:
    ipc     wayland     x11     dri     file access [1]     dbus access [2]

    [1] host, xdg-run/dconf, xdg-run/gvfs, ~/.config/dconf:ro
    [2] ca.desrt.dconf, org.gtk.vfs.*

        ID                       Branch         Op         Remote          Download
 1. [✗] fr.handbrake.ghb         stable         i          flathub         0 bytes

Error: GPG verification enabled, but no signatures found (use gpg-verify=false in remote config to disable)
error: Failed to install bundle fr.handbrake.ghb: GPG verification enabled, but no signatures found (use gpg-verify=false in remote config to disable)
2021-01-03 11:35:29 wwalker@plutonium:~/Downloads ✘
@$ flatpak uninstall --user HandBrake-1.3.3-x86_64.flatpak
error: HandBrake-1.3.3-x86_64.flatpak/*unspecified*/*unspecified* not installed
2021-01-03 11:35:39 wwalker@plutonium:~/Downloads ✘
@$ flatpak uninstall --user HandBrake
Found installed ref ‘app/fr.handbrake.ghb/x86_64/stable’ (user). Is this correct? [Y/n]:

        ID                             Branch        Op
 1. [-] fr.handbrake.ghb               stable        r
 2. [-] fr.handbrake.ghb.Locale        stable        r

Uninstall complete.
2021-01-03 11:35:55 wwalker@plutonium:~/Downloads ✓
@$ flatpak install --user HandBrake-1.3.3-x86_64.flatpak

fr.handbrake.ghb permissions:
    ipc     wayland     x11     dri     file access [1]     dbus access [2]

    [1] host, xdg-run/dconf, xdg-run/gvfs, ~/.config/dconf:ro
    [2] ca.desrt.dconf, org.gtk.vfs.*

        ID                        Branch          Op         Remote             Download
 1. [✓] fr.handbrake.ghb          stable          i          ghb-origin         0 bytes

Installation complete.
2021-01-03 11:38:46 wwalker@plutonium:~/Downloads ✓
@$

[wwalker]

Seems to be related to this: flatpak/flatpak#388

[sr55]

Had a quick look. I'm unable to reproduce this.

On a fresh Fedora 33 Install:

Seems to go through without any issues.

Seems like a common problem as I see quite a few posts about it but lack of any answers as to what causes it other than it being a mis-leading error message. Going to guess it's some kind of upstream issue here as you've pointed out.

Will close this for now, but if anyone else has the issue, please let us know

[simon-liebehenschel]

In case if someone will search for a solution:\ This error happens when another HandBrake version is installed. The solution is to uninstall an older version, and then install a new one.

[mdPlusPlus]

I wasn't able to update 1.6.1 to 1.7.0, so I tried uninstalling it and installing directly from the provided file. I've imported the gpg key and have the .sig file in the same directory as the .flatpak. Still, I can not get 1.7.0 to get installed on Ubuntu 23.04.

$ flatpak install --gpg-file=handbrake.gpg ./HandBrake-1.7.0-x86_64.flatpak

fr.handbrake.ghb permissions:
    ipc              fallback-x11            wayland                 x11
    devices          file access [1]         dbus access [2]         system dbus access [3]

    [1] host, xdg-config/gtk-3.0, xdg-run/gvfs, xdg-run/gvfsd
    [2] org.gtk.vfs.*
    [3] org.freedesktop.UPower, org.freedesktop.login1

        ID                        Branch          Op         Remote              Download
 1. [?] fr.handbrake.ghb          stable          i          ghb1-origin         0 bytes

Error: Error installing bundle: GPG verification enabled, but no signatures found (use gpg-verify=false in remote config to disable)

Edit: I've manually edited /var/lib/flatpak/repo/config to have gpg-verify-summary=false and gpg-verify=false for both [remote "ghb-origin"] and [remote "ghb1-origin"]. I then tried again with $ flatpak install ./HandBrake-1.7.0-x86_64.flatpak and this time it worked.

[robouden]

Thanks for sharing your trick with set up the "gpg-verify=false". Worked for me to, to get Handbrake updated with a .flatpak file.

Regards, Rob Oudendijk

[mdPlusPlus]

Unfortunately flatpak update will not update Handbrake then. You should be able to fix that by running $ flatpak install flathub fr.handbrake.ghb --reinstall

[robouden]

Does not to pick the update...from Flatpak maybe it will do that later. Any way, I know now how to get the latest Handbrake.. :)

[CaptainMorgan12]

I wasn't able to update 1.6.1 to 1.7.0, so I tried uninstalling it and installing directly from the provided file. I've imported the gpg key and have the .sig file in the same directory as the .flatpak. Still, I can not get 1.7.0 to get installed on Ubuntu 23.04.

....

Error: Error installing bundle: GPG verification enabled, but no signatures found (use gpg-verify=false in remote config to disable)

**Edit:** I've manually edited `/var/lib/flatpak/repo/config` to have `gpg-verify-summary=false` and `gpg-verify=false` for both `[remote "ghb-origin"]` and `[remote "ghb1-origin"]`. I then tried again with `$ flatpak install ./HandBrake-1.7.0-x86_64.flatpak` and this time it worked.

Setting the "gpg-verify to false" did the trick for me, I assume that would be done temporarily I was trying to install the stylepak https://github.com/refi64/stylepak for system and it failed, worked only for the user:

sudo nano /var/lib/flatpak/repo/config

`[core] repo_version=1 mode=bare-user-only min-free-space-size=500MB

[remote "flathub"] url=https://dl.flathub.org/repo/ xa.title=Flathub gpg-verify=false gpg-verify-summary=true xa.comment=Central repository of Flatpak applications xa.description=Central repository of Flatpak applications xa.icon=https://dl.flathub.org/repo/logo.svg xa.homepage=https://flathub.org/ `