主页 / ubuntu / 问题 / 719865
Accepted
k0pernikus
Asked: 2016-01-12 08:15:20 +0800 CST

即使应该已导入，如何修复丢失的 gpg 密钥？

  • 772

正如这里指出的那样，我正在改变我在一堆机器上安装 docker 的方式。它在一个上运行良好，但是这个行为很奇怪。

我已经导入了密钥：

sudo apt-key adv --keyserver hkp://pgp.mit.edu:80 --recv-keys 58118E89F3A912897C070ADBF76221572C52609D
Executing: gpg --ignore-time-conflict --no-options --no-default-keyring --homedir /tmp/tmp.uUGtmucAUd --no-auto-check-trustdb --trust-model always --keyring /etc/apt/trusted.gpg --primary-keyring /etc/apt/trusted.gpg --keyring /etc/apt/trusted.gpg.d/atareao-telegram.gpg --keyring /etc/apt/trusted.gpg.d/neovim-ppa-unstable.gpg --keyring /etc/apt/trusted.gpg.d/nilarimogard-webupd8.gpg --keyring /etc/apt/trusted.gpg.d/ondrej-php-7_0.gpg --keyring /etc/apt/trusted.gpg.d/shutter-ppa.gpg --keyring /etc/apt/trusted.gpg.d/trustdb.gpg --keyring /etc/apt/trusted.gpg.d/trusted.gpg --keyring /etc/apt/trusted.gpg.d/vincent-c-ponysay.gpg --keyring /etc/apt/trusted.gpg.d/webupd8team-y-ppa-manager.gpg --keyring /etc/apt/trusted.gpg.d/xorg-edgers-ppa.gpg --keyserver hkp://pgp.mit.edu:80 --recv-keys 58118E89F3A912897C070ADBF76221572C52609D
gpg: requesting key 2C52609D from hkp server pgp.mit.edu
gpg: [don't know]: invalid packet (ctb=01)
gpg: keydb_get_keyblock failed: eof
gpg: key 2C52609D: public key "Docker Release Tool (releasedocker) <[email protected]>" imported
gpg: Total number processed: 1
gpg:               imported: 1  (RSA: 1)

但仍然sudo apt-get update因缺少密钥而失败：

w: GPG error: https://apt.dockerproject.org ubuntu-trusty Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY F76221572C52609D

我错过了什么？

我也尝试了当前提供的答案，但是在删除trusted.gpg 文件后，我无法添加密钥

root@fluttershy:/etc/apt# rm trusted.gpg
root@fluttershy:/etc/apt# apt-key update
gpg: [don't know]: invalid packet (ctb=01)
gpg: keydb_get_keyblock failed: eof
gpg: key 437D05B5: public key "Ubuntu Archive Automatic Signing Key <[email protected]>" imported
gpg: [don't know]: invalid packet (ctb=01)
gpg: keydb_get_keyblock failed: eof
gpg: key FBB75451: public key "Ubuntu CD Image Automatic Signing Key <[email protected]>" imported
gpg: [don't know]: invalid packet (ctb=01)
gpg: keydb_get_keyblock failed: eof
gpg: key C0B21F32: public key "Ubuntu Archive Automatic Signing Key (2012) <[email protected]>" imported
gpg: [don't know]: invalid packet (ctb=01)
gpg: keydb_get_keyblock failed: eof
gpg: key EFE21092: public key "Ubuntu CD Image Automatic Signing Key (2012) <[email protected]>" imported
gpg: Total number processed: 4
gpg:               imported: 4  (RSA: 2)
root@fluttershy:/etc/apt#
apt

2 个回答

  1. Best Answer

    gpg 因invalid packet (ctb=01)/失败keydb_get_keyblock failed: eof。这通常意味着您的 GPG 密钥环已损坏。解决问题的最快方法是删除它，或从备份中恢复它。

    以下是一些方便的命令：

    • 列出当前 APT 密钥环中的所有密钥：

      apt-key list

    • trusted.gpg从 APT 自动备份恢复：

      cp /etc/apt/trusted.gpg{~,}

    • 要使用 Ubuntu 存档的密钥删除trusted.gpg并重新创建它：

      rm /etc/apt/trusted.gpg
apt-key update

    在我使用过的所有命令中/etc/apt/trusted.gpg，但要注意里面可能还有其他的钥匙圈/etc/apt/trusted.gpg.d/。

    APT 同时使用所有密钥环，您可以通过检查输出看到：

    Executing: gpg [...] \
  --keyring /etc/apt/trusted.gpg \
  --primary-keyring /etc/apt/trusted.gpg \
  --keyring /etc/apt/trusted.gpg.d/atareao-telegram.gpg \
  --keyring /etc/apt/trusted.gpg.d/neovim-ppa-unstable.gpg \
  --keyring /etc/apt/trusted.gpg.d/nilarimogard-webupd8.gpg \
  [...]

    拥有一个损坏的密钥环会让 GPG 感到难过，并且没有一个密钥环（即使是好的密钥环）是可信的。结果，没有考虑任何键。

    • 7

  2. 具体来说，对于 Docker 密钥环58118E89F3A912897C070ADBF76221572C52609D添加密钥服务器：

    sudo apt-key adv --keyserver hkp://p80.pool.sks-keyservers.net:80 --recv-keys 58118E89F3A912897C070ADBF76221572C52609D
    • 4

相关问题