vmware-archive / salt-pack

Salt Package Builder
Apache License 2.0
55 stars 23 forks source link

gpg-agent on clean Debian 9.5 not functioning, issue with Standard Socket availability if root on AWS #609

Closed dmurphy18 closed 5 years ago

dmurphy18 commented 5 years ago

Issue with AWS and Debian 9 where gpp-agent does not function correctly if root, get root@ip-10-27-41-150:/home/admin# ps -ef | grep -v grep | grep gpg-agent root 647 1 0 21:37 ? 00:00:00 gpg-agent --homedir /root/.gnupg --allow-preset-passphrase --max-cache-ttl 300 -vvvv --daemon

whereas non-root is correct: admin@ip-10-27-41-150:~$ ps -ef | grep -v grep | grep gpg-agent admin 633 608 0 21:37 ? 00:00:00 /usr/bin/gpg-agent --supervised

This is not an issue on Debian 9.2 with a clean install on VirtualBox, however with a Debian 9.5 clean install on VirtualBox it is.

Tried loading a Raw Image of Debian 9.2 from VirtualBox up to AWS, but the import fails with the following error message: david@david-XPS-15-9530:~/isos/debian/deb92_ova$ aws ec2 describe-import-image-tasks { "ImportImageTasks": [ { "Description": "Debian 9.2 AMD64 Raw Image", "ImportTaskId": "import-ami-084a939fa7f50ff32", "LicenseType": "BYOL", "SnapshotDetails": [ { "Description": "Debian 9.2 AMD64 Raw Image", "DiskImageSize": 32212254720.0, "Format": "RAW", "Status": "completed", "UserBucket": { "S3Bucket": "dgm-gen-bkt", "S3Key": "deb921t.raw" } } ], "Status": "deleting", "StatusMessage": "ClientError: Unsupported kernel version 4.9.0-4-amd64" } ] }

dmurphy18 commented 5 years ago

Tried with older AMI images for Debian 9.1 and Debian 9.0 and no success. Believe this is not solvable in a satisfactory manner since will encounter the same going forward for the upcoming Buster release (Debian 10).

Hence closing this and moving on to attempting to get Debian building / signing with a non-root user. Essentially perform all building but make gpg-agent non-root and alter build product on disk to allow non-root signing.