GPG signature verification failed for '/usr/local/rvm/archives/rvm-1.29.12.tgz’- curl gpg 에러 해결하기

GPG signature verification failed for '/usr/local/rvm/archives/rvm-1.29.12.tgz’- curl gpg 에러 해결하기

 

curl로 rvm을 설치하는 중 다음과 같은 에러가 발생했다.

root@LYJ:/# curl -k -sSL <https://get.rvm.io> | bash -s stable
Downloading <https://github.com/rvm/rvm/archive/1.29.12.tar.gz>
Downloading <https://github.com/rvm/rvm/releases/download/1.29.12/1.29.12.tar.gz.asc>
gpg: directory `/root/.gnupg' created
gpg: new configuration file `/root/.gnupg/gpg.conf' created
gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run
gpg: keyring `/root/.gnupg/pubring.gpg' created
gpg: Signature made 2021년 01월 15일 (금)  using RSA key ID 39499BDB
gpg: Can't check signature: public key not found
GPG signature verification failed for '/usr/local/rvm/archives/rvm-1.29.12.tgz' - '<https://github.com/rvm/rvm/releases/download/1.29.12/1.29.12.tar.gz.asc>'! Try to install GPG v2 and then fetch the public key:

    gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3 7D2BAF1CF37B13E2069D6956105BD0E739499BDB

or if it fails:

    command curl -sSL <https://rvm.io/mpapis.asc> | gpg --import -
    command curl -sSL <https://rvm.io/pkuczynski.asc> | gpg --import -

In case of further problems with validation please refer to <https://rvm.io/rvm/security>

원인은 public key를 찾을 수 없어 발생한 것이다.

 

 

gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3 7D2BAF1CF37B13E2069D6956105BD0E739499BDB

 

해당 내용을 복사하여 그대로 사용하면 된다.

root@LYJ:/# gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3 7D2BAF1CF37B13E2069D6956105BD0E739499BDB
gpg: keyring `/root/.gnupg/secring.gpg' created
gpg: requesting key D39DC0E3 from hkp server keyserver.ubuntu.com
gpg: requesting key 39499BDB from hkp server keyserver.ubuntu.com
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key D39DC0E3: public key "Michal Papis (RVM signing) <mpapis@gmail.com>" imported
gpg: key 39499BDB: public key "Piotr Kuczynski <piotr.kuczynski@gmail.com>" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 2
gpg:               imported: 2  (RSA: 2)

 

 

key 생성 후, 다시 실행하면 정상적으로 성공한다.

root@LYJ:/# curl -k -sSL <https://get.rvm.io> | bash -s stable 
Downloading <https://github.com/rvm/rvm/archive/1.29.12.tar.gz>
Downloading <https://github.com/rvm/rvm/releases/download/1.29.12/1.29.12.tar.gz.asc>
gpg: Signature made 2021년 01월 15일 (금)  using RSA key ID 39499BDB
gpg: Good signature from "Piotr Kuczynski <piotr.kuczynski@gmail.com>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 7D2B AF1C F37B 13E2 069D  6956 105B D0E7 3949 9BDB
GPG verified '/usr/local/rvm/archives/rvm-1.29.12.tgz'
Creating group 'rvm'
Installing RVM to /usr/local/rvm/
Installation of RVM in /usr/local/rvm/ is almost complete:
</piotr.kuczynski@gmail.com>

gpg가 없으면 apt-get install gpg2로 설치해준다.