Keyserver receive failed when run a basic install.

WinterM

Hi guys.

I'm trying to install RetroPie in my RaspberryPi3B and it failed with some key verification while installing packages.

Here are the result when I want to get the key manually.

sudo gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys DC9D77FF8208FFC51D8F50CCF1B030906A3B0D31
gpg: keyserver receive failed: Server indicated a failure

And it turns out "Not Found" when I try to find DC9D77FF8208FFC51D8F50CCF1B030906A3B0D31 in keyserver.ubuntu.com.
I searched in the documents but nothing found.
Does anyone have some ideas?

mitu

Looks like an issue with your connection to the keyserver, same command works fine for me. When using the web interface, you need to add 0x to the key hash: http://keyserver.ubuntu.com/pks/lookup?search=0xDC9D77FF8208FFC51D8F50CCF1B030906A3B0D31&fingerprint=on&op=index

Please add some info about your setup, as detailed in https://retropie.org.uk/forum/topic/3/read-this-first.

WinterM

Hi @mitu

Thanks for your reply!
I can access the url you gave also with curl, but not with gpg.

pi@raspberrypi3:~ $ curl 'http://keyserver.ubuntu.com/pks/lookup?search=0xDC9D77FF8208FFC51D8F50CCF1B030906A3B0D31&fingerprint=on&op=index'
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd" >
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Search results for '0xDC9D77FF8208FFC51D8F50CCF1B030906A3B0D31'</title>
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
<link href='/assets/css/pks.min.css' rel='stylesheet' type='text/css'>
<style type="text/css">
 
 .uid { color: green; text-decoration: underline; }
 .warn { color: red; font-weight: bold; }
 
</style></head><body><h1>Search results for '0xDC9D77FF8208FFC51D8F50CCF1B030906A3B0D31'</h1><pre>Type bits/keyID            cr. time   exp time   key expir
</pre>


<hr /><pre><strong>pub</strong> <a href="/pks/lookup?op=get&search=0xdc9d77ff8208ffc51d8f50ccf1b030906a3b0d31">rsa4096/dc9d77ff8208ffc51d8f50ccf1b030906a3b0d31</a> 2020-09-01T22:55:19Z
         Hash=<a href="/pks/lookup?op=hget&search=1062bedbddb051e547d93e5f733a67d7">1062bedbddb051e547d93e5f733a67d7</a>

<strong>uid</strong> <span class="uid">RetroPie Project &lt;retropieproject@gmail.com&gt;</span>
sig  sig  <a href="/pks/lookup?op=get&search=0xf1b030906a3b0d31">f1b030906a3b0d31</a> 2020-09-01T22:55:19Z ____________________ ____________________ <a href="/pks/lookup?op=vindex&search=0xf1b030906a3b0d31">[selfsig]</a>



<strong>sub</strong> rsa4096/5fbb011304154b0db091261f73654972de310615 2020-09-01T22:55:19Z            
sig sbind <a href="/pks/lookup?op=get&search=0xf1b030906a3b0d31">f1b030906a3b0d31</a> 2020-09-01T22:55:19Z ____________________ ____________________ <a href="/pks/lookup?op=vindex&search=0x"f1b030906a3b0d31>[]</a>


</pre>

</body></html>

pi@raspberrypi3:~ $ sudo gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys DC9D77FF8208FFC51D8F50CCF1B030906A3B0D31
gpg: keyserver receive failed: Server indicated a failure

mitu

@winterm said in Keyserver receive failed when run a basic install.:

I can access the url you gave also with curl, but not with gpg.

Why would you try to access it with gpg ? I was just pointing out that the GPG key is available on keyserver.ubuntu.com. gpg has its own HTTP-like protocol to search/find keys (hkp), which is not working in your case, that's why I asked for more info about your setup.

WinterM

Hi @mitu

Sorry for lack of information.
Here is my environment.

Pi Model or other hardware: Raspberry Pi 3 Model B
Power Supply used: Apple pad power supply (5V2A)
RetroPie Version Used (eg 3.6, 3.8.1, 4.1 - do not write latest): Linux raspberrypi3 5.4.51-v7+ #1333 SMP Mon Aug 10 16:45:19 BST 2020 armv7l GNU/Linux
Built From: Raspberry Pi OS Lite Release date: August 20th 2020
USB Devices connected: Yes
Controller used: Yes
Error messages received: As above
Verbose log (if relevant): As above
Guide used: Official docs
File: /home/pi/RetroPie-Setup/scriptmodules/system.sh
Emulator: N/a
Attachment of config files: N/a
How to replicate the problem: As above

Thanks

WinterM

@mitu

Because the error message I got here is the same with the message when I run a basic install.

gpg: keyserver receive failed: Server indicated a failure

And I think it is caused by this code in /home/pi/RetroPie-Setup/scriptmodules/system.sh
https://github.com/RetroPie/RetroPie-Setup/blob/4.7.1/scriptmodules/system.sh#L77-L80

    if ! gpg --list-keys "$__gpg_signing_key" &>/dev/null; then
        gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys DC9D77FF8208FFC51D8F50CCF1B030906A3B0D31
    fi

mitu

@winterm said in Keyserver receive failed when run a basic install.:

And I think it is caused by this code in /home/pi/RetroPie-Setup/scriptmodules/system.sh

Indeed, that's what's triggering the issue. The problem is why is this not working in your environment. Do you have any firewall in place, any web filtering application that may be altering or blocking the traffic from your Pi to the keyserver ?

WinterM

@mitu

And because of the issue above, I got this error.
![[5CYNZI0FKVOJ`W4J5[JLB.png

There's no firewall or web filtering application in my home and I use a DNS server 8.8.8.8.
If there are some, even this could not success.

pi@raspberrypi3:~ $ curl 'http://keyserver.ubuntu.com/pks/lookup?search=0xDC9D77FF8208FFC51D8F50CCF1B030906A3B0D31&fingerprint=on&op=index'
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd" >
...

mitu

Can you run, from the command line:

gpg --debug-level guru --verbose --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys DC9D77FF8208FFC51D8F50CCF1B030906A3B0D31

and post the output on pastebin.com ?

WinterM

@mitu

Oh! I found a setting miss in /etc/resolv.conf
My bad, and sorry for bothering.

By the way, I got this log by your command with a wrong setting.

Thanks for your information.

retronaff

@mitu I'm having this same issue.

I've ran sudo ufw disable to disable my linux firewall.

I'm thinking that the issue is with my OPNSENSE router.

Which ports should I forward to my retropie server?