[gentoo-dev] Problem signing manifests for ebuilds

[gentoo-dev] Problem signing manifests for ebuilds

[Bjarke Istrup Pedersen]

I'm having a problem signing manifests from time to time (it's random
if it works or not).

When I run repoman commit, sometimes it asks for my password, and
signs it just fine.
But sometimes it just fails silently with the following error:

You need a passphrase to unlock the secret key for
user: "Bjarke Istrup Pedersen <gurligebis@gentoo.org>"
1024-bit DSA key, ID 14576049, created 2008-08-20

gpg: cancelled by user
gpg: no default secret key: Operation cancelled
gpg: ./Manifest: clearsign failed: Operation cancelled
!!! !!! gpg exited with '512' status
!!! Disabled FEATURES='sign'

Does anyone have an idea of why it fails to sign it randomly?

/Bjarke

Re: [gentoo-dev] Problem signing manifests for ebuilds

[Markos Chandras]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 07/07/2011 10:57 ??, Bjarke Istrup Pedersen wrote:
> I'm having a problem signing manifests from time to time (it's random
> if it works or not).
> 
> When I run repoman commit, sometimes it asks for my password, and
> signs it just fine.
> But sometimes it just fails silently with the following error:
> 
> You need a passphrase to unlock the secret key for
> user: "Bjarke Istrup Pedersen <gurligebis@gentoo.org>"
> 1024-bit DSA key, ID 14576049, created 2008-08-20
> 
> gpg: cancelled by user
> gpg: no default secret key: Operation cancelled
> gpg: ./Manifest: clearsign failed: Operation cancelled
> !!! !!! gpg exited with '512' status
> !!! Disabled FEATURES='sign'
> 
> Does anyone have an idea of why it fails to sign it randomly?
> 
> /Bjarke
> 
What happens if you edit your ~/.gnupg/gpg.conf and add

default-key 14576049 ?

- -- 
Regards,
Markos Chandras / Gentoo Linux Developer / Key ID: B4AFF2C2
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (GNU/Linux)
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=YlcA
-----END PGP SIGNATURE-----

Re: [gentoo-dev] Problem signing manifests for ebuilds

[Bjarke Istrup Pedersen]

2011/7/7 Markos Chandras <hwoarang@gentoo.org>:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> On 07/07/2011 10:57 ??, Bjarke Istrup Pedersen wrote:
>> I'm having a problem signing manifests from time to time (it's random
>> if it works or not).
>>
>> When I run repoman commit, sometimes it asks for my password, and
>> signs it just fine.
>> But sometimes it just fails silently with the following error:
>>
>> You need a passphrase to unlock the secret key for
>> user: "Bjarke Istrup Pedersen <gurligebis@gentoo.org>"
>> 1024-bit DSA key, ID 14576049, created 2008-08-20
>>
>> gpg: cancelled by user
>> gpg: no default secret key: Operation cancelled
>> gpg: ./Manifest: clearsign failed: Operation cancelled
>> !!! !!! gpg exited with '512' status
>> !!! Disabled FEATURES='sign'
>>
>> Does anyone have an idea of why it fails to sign it randomly?
>>
>> /Bjarke
>>
> What happens if you edit your ~/.gnupg/gpg.conf and add
>
> default-key 14576049 ?

I'll try that, lets see what happens next time I commit something, if
it happens again :)

Best regards,
Bjarke

>
> - --
> Regards,
> Markos Chandras / Gentoo Linux Developer / Key ID: B4AFF2C2
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.17 (GNU/Linux)
>
> iQIcBAEBCgAGBQJOFYf1AAoJEPqDWhW0r/LCCNYP/1HdKsl1zNjGZ+RQRufdUYA6
> 0DRHcRc4wz1nnMGPZ3yD+01dJYszULZvec9zDAt72SacZXvPh6IhnNHm3B6kya3f
> E/IuzU8nqIcZJQPPTMePK6mvVDUmxccBg+tfju+Wa5PHKWdjDPSe/r6InOVwMx6U
> miwbJevVvg4Np2fhdA3Ad27i+ctfUH6MC0Cxm1eGMoEGtL/P5SqATuM7BthiCTOx
> jwh7LT4nK+30WoBORi4Y1IRpl0qmZErOibFiC1PTej3yBl8Q/IXr3v5IJ8C2b2eG
> njSV9f+lLQcnvvYNNKP2ybNEqFQrP2tKjge2TDymVjCofEtZI2Ag8tiNwqohNUfG
> E4vNurgGOhiZPRFgPXlIEm+0M8M0TdrEZUuwUK+ROorQ1Wx7ppycPhEYmNIdeeD7
> RgjF6EO7OwOAK3kBcBKxdCw1tI0vCuj51tKbp3RHmLMqL3TA7CZxokqyr2vW5tEY
> iNhvVVvkVMowwe9Yj6wUaqcTR0HdlzFJ7OgqBmD7hfAGQkC3t7bvDqLyS7SPFRz+
> ZJWM5wlDEgzHek1bn2Q0MH6qevMRAT6oBO89abVfR7SJCF9gWQmTsDo2J6x7Jn3w
> bPeDqyYeBl+PWrjinhCkOnMBExvLpcwqUUOuVzbF8jmVbMElkCNQ4O4uJ0o+ALrF
> 6ior3A/OHc0xGyLiILtV
> =YlcA
> -----END PGP SIGNATURE-----
>
>

Re: [gentoo-dev] Problem signing manifests for ebuilds

[Bjarke Istrup Pedersen]

2011/7/7 Markos Chandras <hwoarang@gentoo.org>:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> On 07/07/2011 10:57 ??, Bjarke Istrup Pedersen wrote:
>> I'm having a problem signing manifests from time to time (it's random
>> if it works or not).
>>
>> When I run repoman commit, sometimes it asks for my password, and
>> signs it just fine.
>> But sometimes it just fails silently with the following error:
>>
>> You need a passphrase to unlock the secret key for
>> user: "Bjarke Istrup Pedersen <gurligebis@gentoo.org>"
>> 1024-bit DSA key, ID 14576049, created 2008-08-20
>>
>> gpg: cancelled by user
>> gpg: no default secret key: Operation cancelled
>> gpg: ./Manifest: clearsign failed: Operation cancelled
>> !!! !!! gpg exited with '512' status
>> !!! Disabled FEATURES='sign'
>>
>> Does anyone have an idea of why it fails to sign it randomly?
>>
>> /Bjarke
>>
> What happens if you edit your ~/.gnupg/gpg.conf and add
>
> default-key 14576049 ?

Hey again,

Nope, that doesn't do it, it still fails with the error:

gpg: cancelled by user
gpg: no default secret key: Operation cancelled
gpg: ./Manifest: clearsign failed: Operation cancelled

What puzzles me is why it is random if it asks for my password and
signs it or not.

>
> - --
> Regards,
> Markos Chandras / Gentoo Linux Developer / Key ID: B4AFF2C2
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.17 (GNU/Linux)
>
> iQIcBAEBCgAGBQJOFYf1AAoJEPqDWhW0r/LCCNYP/1HdKsl1zNjGZ+RQRufdUYA6
> 0DRHcRc4wz1nnMGPZ3yD+01dJYszULZvec9zDAt72SacZXvPh6IhnNHm3B6kya3f
> E/IuzU8nqIcZJQPPTMePK6mvVDUmxccBg+tfju+Wa5PHKWdjDPSe/r6InOVwMx6U
> miwbJevVvg4Np2fhdA3Ad27i+ctfUH6MC0Cxm1eGMoEGtL/P5SqATuM7BthiCTOx
> jwh7LT4nK+30WoBORi4Y1IRpl0qmZErOibFiC1PTej3yBl8Q/IXr3v5IJ8C2b2eG
> njSV9f+lLQcnvvYNNKP2ybNEqFQrP2tKjge2TDymVjCofEtZI2Ag8tiNwqohNUfG
> E4vNurgGOhiZPRFgPXlIEm+0M8M0TdrEZUuwUK+ROorQ1Wx7ppycPhEYmNIdeeD7
> RgjF6EO7OwOAK3kBcBKxdCw1tI0vCuj51tKbp3RHmLMqL3TA7CZxokqyr2vW5tEY
> iNhvVVvkVMowwe9Yj6wUaqcTR0HdlzFJ7OgqBmD7hfAGQkC3t7bvDqLyS7SPFRz+
> ZJWM5wlDEgzHek1bn2Q0MH6qevMRAT6oBO89abVfR7SJCF9gWQmTsDo2J6x7Jn3w
> bPeDqyYeBl+PWrjinhCkOnMBExvLpcwqUUOuVzbF8jmVbMElkCNQ4O4uJ0o+ALrF
> 6ior3A/OHc0xGyLiILtV
> =YlcA
> -----END PGP SIGNATURE-----
>
>

Re: [gentoo-dev] Problem signing manifests for ebuilds

[Markos Chandras]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 08/07/2011 10:08 ??, Bjarke Istrup Pedersen wrote:
> 2011/7/7 Markos Chandras <hwoarang@gentoo.org>:
> On 07/07/2011 10:57 ??, Bjarke Istrup Pedersen wrote:
>>>> I'm having a problem signing manifests from time to time (it's random
>>>> if it works or not).
>>>>
>>>> When I run repoman commit, sometimes it asks for my password, and
>>>> signs it just fine.
>>>> But sometimes it just fails silently with the following error:
>>>>
>>>> You need a passphrase to unlock the secret key for
>>>> user: "Bjarke Istrup Pedersen <gurligebis@gentoo.org>"
>>>> 1024-bit DSA key, ID 14576049, created 2008-08-20
>>>>
>>>> gpg: cancelled by user
>>>> gpg: no default secret key: Operation cancelled
>>>> gpg: ./Manifest: clearsign failed: Operation cancelled
>>>> !!! !!! gpg exited with '512' status
>>>> !!! Disabled FEATURES='sign'
>>>>
>>>> Does anyone have an idea of why it fails to sign it randomly?
>>>>
>>>> /Bjarke
>>>>
> What happens if you edit your ~/.gnupg/gpg.conf and add
> 
> default-key 14576049 ?
> 
>> Hey again,
> 
>> Nope, that doesn't do it, it still fails with the error:
> 
>> gpg: cancelled by user
>> gpg: no default secret key: Operation cancelled
>> gpg: ./Manifest: clearsign failed: Operation cancelled
> 
>> What puzzles me is why it is random if it asks for my password and
>> signs it or not.
> 
> 
>>
>>
You can try to setup keychain[1] so you only have to type your password once

[1]http://www.gentoo.org/doc/en/keychain-guide.xml
- -- 
Regards,
Markos Chandras / Gentoo Linux Developer / Key ID: B4AFF2C2
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (GNU/Linux)

iQIcBAEBCgAGBQJOFrfTAAoJEPqDWhW0r/LCYhwQALCPT6+j3K4/YxlpgR16IBwm
2tu9OCvPqXzhiirNyfjUGZBjyufwRiAq0EIyohKjrFuPXV5MOd+kBT5nxxM7ptlQ
3lrnYobm7ccIPDXRuNfwg176nzJEa9r+dhoWBFi3x3vzBuWDVDJ2nyH9QLhGm+0G
wrxpNn5twu4kfrfXW1iCSxD+rHFzmdVawEBMPJMflxquInH4DT+qIRZGTk20BXQz
KvxS2F+5QWhSCfg7uo0M+hB+yRau41jE4vuGRD7sl2xclw1emldP8RJ/020RYj85
b3ZdsMWK8MUfgoR7gtL3eVR8Lk/HWrCK1QoczT9rcXx1Guei9nGlkc6673pNfphl
PGE+MiH0EKS80oUW57beT0VqnryTdyDfGOtrE58nw4nm9WyDEbnJTZRBAIPFNGBA
1d7OPaM/XiuvyIv37x/5Z5zjqSgvJMkmcxf1AtQz1rpXoeEU6kEcP2pwcSx3fi1m
uIiYm2MGS1oCzFEPN8F/ZZ0/Pt3GGWsqukNPf4bC/6VLLVsMxbHBzmurma22oB9B
T/3ESOglow3kS7Cqvzj55rt+GIZynLNSCPyvh8NCzanSNdlZUktpEpmAj9TmKSRM
XUUZv/reR1TXrFcQUkHtLczrerroqcq/fP30qqqABsckxtDJRwnAY/LPA0YMcy6H
cYuRRDC4UPlLtb3PF9PM
=1IbZ
-----END PGP SIGNATURE-----

Re: [gentoo-dev] Problem signing manifests for ebuilds

[Bjarke Istrup Pedersen]

2011/7/8 Markos Chandras <hwoarang@gentoo.org>:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> On 08/07/2011 10:08 ??, Bjarke Istrup Pedersen wrote:
>> 2011/7/7 Markos Chandras <hwoarang@gentoo.org>:
>> On 07/07/2011 10:57 ??, Bjarke Istrup Pedersen wrote:
>>>>> I'm having a problem signing manifests from time to time (it's random
>>>>> if it works or not).
>>>>>
>>>>> When I run repoman commit, sometimes it asks for my password, and
>>>>> signs it just fine.
>>>>> But sometimes it just fails silently with the following error:
>>>>>
>>>>> You need a passphrase to unlock the secret key for
>>>>> user: "Bjarke Istrup Pedersen <gurligebis@gentoo.org>"
>>>>> 1024-bit DSA key, ID 14576049, created 2008-08-20
>>>>>
>>>>> gpg: cancelled by user
>>>>> gpg: no default secret key: Operation cancelled
>>>>> gpg: ./Manifest: clearsign failed: Operation cancelled
>>>>> !!! !!! gpg exited with '512' status
>>>>> !!! Disabled FEATURES='sign'
>>>>>
>>>>> Does anyone have an idea of why it fails to sign it randomly?
>>>>>
>>>>> /Bjarke
>>>>>
>> What happens if you edit your ~/.gnupg/gpg.conf and add
>>
>> default-key 14576049 ?
>>
>>> Hey again,
>>
>>> Nope, that doesn't do it, it still fails with the error:
>>
>>> gpg: cancelled by user
>>> gpg: no default secret key: Operation cancelled
>>> gpg: ./Manifest: clearsign failed: Operation cancelled
>>
>>> What puzzles me is why it is random if it asks for my password and
>>> signs it or not.
>>
>>
>>>
>>>
> You can try to setup keychain[1] so you only have to type your password once
>
> [1]http://www.gentoo.org/doc/en/keychain-guide.xml
> - --

I've tried that, it still does not work.
Even if I just login as myself and do something like this:

gurligebis@raven ~ $ echo "blah" > test
gurligebis@raven ~ $ gpg -n --sign test

You need a passphrase to unlock the secret key for
user: "Bjarke Istrup Pedersen <gurligebis@gentoo.org>"
1024-bit DSA key, ID 14576049, created 2008-08-20

gpg: cancelled by user
gpg: no default secret key: Operation cancelled
gpg: signing failed: Operation cancelled

I cannot figure out why gpg insists that I have cancelled anything,
when it by itself fails silently.
Any ideas? :)

> Regards,
> Markos Chandras / Gentoo Linux Developer / Key ID: B4AFF2C2
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.17 (GNU/Linux)
>
> iQIcBAEBCgAGBQJOFrfTAAoJEPqDWhW0r/LCYhwQALCPT6+j3K4/YxlpgR16IBwm
> 2tu9OCvPqXzhiirNyfjUGZBjyufwRiAq0EIyohKjrFuPXV5MOd+kBT5nxxM7ptlQ
> 3lrnYobm7ccIPDXRuNfwg176nzJEa9r+dhoWBFi3x3vzBuWDVDJ2nyH9QLhGm+0G
> wrxpNn5twu4kfrfXW1iCSxD+rHFzmdVawEBMPJMflxquInH4DT+qIRZGTk20BXQz
> KvxS2F+5QWhSCfg7uo0M+hB+yRau41jE4vuGRD7sl2xclw1emldP8RJ/020RYj85
> b3ZdsMWK8MUfgoR7gtL3eVR8Lk/HWrCK1QoczT9rcXx1Guei9nGlkc6673pNfphl
> PGE+MiH0EKS80oUW57beT0VqnryTdyDfGOtrE58nw4nm9WyDEbnJTZRBAIPFNGBA
> 1d7OPaM/XiuvyIv37x/5Z5zjqSgvJMkmcxf1AtQz1rpXoeEU6kEcP2pwcSx3fi1m
> uIiYm2MGS1oCzFEPN8F/ZZ0/Pt3GGWsqukNPf4bC/6VLLVsMxbHBzmurma22oB9B
> T/3ESOglow3kS7Cqvzj55rt+GIZynLNSCPyvh8NCzanSNdlZUktpEpmAj9TmKSRM
> XUUZv/reR1TXrFcQUkHtLczrerroqcq/fP30qqqABsckxtDJRwnAY/LPA0YMcy6H
> cYuRRDC4UPlLtb3PF9PM
> =1IbZ
> -----END PGP SIGNATURE-----
>
>

[gentoo-dev] Re: Problem signing manifests for ebuilds

[Jonathan Callen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Bjarke Istrup Pedersen wrote:
> I've tried that, it still does not work.
> Even if I just login as myself and do something like this:
> 
> gurligebis@raven ~ $ echo "blah" > test
> gurligebis@raven ~ $ gpg -n --sign test
> 
> <snip>
> 
> I cannot figure out why gpg insists that I have cancelled anything,
> when it by itself fails silently.
> Any ideas? :)
> 

Are you doing this from within an X11 session? If so, is DISPLAY set
properly?  If not, does the output of `eselect pinentry show` indicate that
a non-X11 pinentry client is selected?

- -- 
Jonathan Callen
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (GNU/Linux)
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=08xS
-----END PGP SIGNATURE-----

Re: [gentoo-dev] Re: Problem signing manifests for ebuilds

[Bjarke Istrup Pedersen]

2011/7/11 Jonathan Callen <abcd@gentoo.org>:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Bjarke Istrup Pedersen wrote:
>> I've tried that, it still does not work.
>> Even if I just login as myself and do something like this:
>>
>> gurligebis@raven ~ $ echo "blah" > test
>> gurligebis@raven ~ $ gpg -n --sign test
>>
>> <snip>
>>
>> I cannot figure out why gpg insists that I have cancelled anything,
>> when it by itself fails silently.
>> Any ideas? :)
>>
>
> Are you doing this from within an X11 session? If so, is DISPLAY set
> properly?  If not, does the output of `eselect pinentry show` indicate that
> a non-X11 pinentry client is selected?
>
> - --
> Jonathan Callen

Hey,

No, I was doing it inside a SSH session (using putty from another machine).
It seems to have been fixed by adding my user to the tty group, though
it doesn't seems to explain why.

/Bjarke

> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.17 (GNU/Linux)
>
> iQIcBAEBCgAGBQJOGufnAAoJELHSF2kinlg4KCUP/Rz5Y4QuM1G6aBDgoy6HG/Y2
> FFf7E4XT+BRp74KanLAsYSlMaHqyVULHCwosuDdlCEa2NvqYUUhVUUtPB4kN3B1a
> HpFVqZcOAF7Vt8+c2+P217h+6Bp7k+u8Ju8/JK7LOpY9E3oO5Rtld5KEoT1hy/fv
> oVLckbxPQbyHnMet0OTT1vL0JfbQ2Mua/zE9h6Gn7ZTEyD58oWr0vxeaUS/JdNrf
> Rd5N3M2hl6O1gIbeD8C/rQTCEAsdKB3UwZ9H7HU7XlL75/A8oancbhINGI8wmEvJ
> 49D3KoY2kZVIqhqtg53EmduGdGAP8cjnJ2BxefoKJVc6LBQ0f9UhylUyY6kTZXRk
> oLXVv3+jmIXXsv63AtKzAT+6xjMvo2x5s48IzjI45+516y7sCdeVWI5asXiA2zh1
> gpK8x2EmTZO0BEwgzhHq7W1UfbXMoVLLXmy6jRyJMjgnwuuqivY8y1pOKeFbmTh+
> N2vjBsJBoxg29QEm59NmfB54Szin0XtJSasgyb9Vgnyxa+utY7l0z18hTIWcStnW
> 2E3sK7/xeZuLdv08Ub9yyPkeLuRh0LwuHtaka8ilT6mD8XoKjEqZcfsXZmCbwYue
> W/BXVSOfESfWXijKHzglJCTnxO8DiU/5w2ybxisKAJU6HlBdVgLN6YJxcSWVmTZR
> DQbDZEuF4liEuxdCeFnJ
> =08xS
> -----END PGP SIGNATURE-----
>
>

Re: [gentoo-dev] Re: Problem signing manifests for ebuilds

[Stanislav Ochotnicky]

[-- Attachment #1: Type: text/plain, Size: 1474 bytes --]


Excerpts from Bjarke Istrup Pedersen's message of Mon Jul 11 17:07:14 +0200 2011:
> 2011/7/11 Jonathan Callen <abcd@gentoo.org>:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA512
> >
> > Bjarke Istrup Pedersen wrote:
> >> I've tried that, it still does not work.
> >> Even if I just login as myself and do something like this:
> >>
> >> gurligebis@raven ~ $ echo "blah" > test
> >> gurligebis@raven ~ $ gpg -n --sign test
> >>
> >> <snip>
> >>
> >> I cannot figure out why gpg insists that I have cancelled anything,
> >> when it by itself fails silently.
> >> Any ideas? :)
> >>
> >
> > Are you doing this from within an X11 session? If so, is DISPLAY set
> > properly?  If not, does the output of `eselect pinentry show` indicate that
> > a non-X11 pinentry client is selected?
> >
> > - --
> > Jonathan Callen
> 
> Hey,
> 
> No, I was doing it inside a SSH session (using putty from another machine).
> It seems to have been fixed by adding my user to the tty group, though
> it doesn't seems to explain why.

Maybe you could retry after compiling pinentry with USE="-caps" (I
assume it's enabled). There is a bug in upstream pinentry &
capabilities. Other than that pinentry also has problems with proper
fallback mechanisms when DISPLAY is set but no X (gtk or qt) pinentry is
installed. If it's neither of those problems then I don't know...

-- 
Stanislav Ochotnicky

PGP: 7B087241
jabber: stanislav@ochotnicky.com

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 836 bytes --]

Re: [gentoo-dev] Problem signing manifests for ebuilds

[Bjarke Istrup Pedersen]

2011/7/8 Markos Chandras <hwoarang@gentoo.org>:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> On 08/07/2011 10:08 ??, Bjarke Istrup Pedersen wrote:
>> 2011/7/7 Markos Chandras <hwoarang@gentoo.org>:
>> On 07/07/2011 10:57 ??, Bjarke Istrup Pedersen wrote:
>>>>> I'm having a problem signing manifests from time to time (it's random
>>>>> if it works or not).
>>>>>
>>>>> When I run repoman commit, sometimes it asks for my password, and
>>>>> signs it just fine.
>>>>> But sometimes it just fails silently with the following error:
>>>>>
>>>>> You need a passphrase to unlock the secret key for
>>>>> user: "Bjarke Istrup Pedersen <gurligebis@gentoo.org>"
>>>>> 1024-bit DSA key, ID 14576049, created 2008-08-20
>>>>>
>>>>> gpg: cancelled by user
>>>>> gpg: no default secret key: Operation cancelled
>>>>> gpg: ./Manifest: clearsign failed: Operation cancelled
>>>>> !!! !!! gpg exited with '512' status
>>>>> !!! Disabled FEATURES='sign'
>>>>>
>>>>> Does anyone have an idea of why it fails to sign it randomly?
>>>>>
>>>>> /Bjarke
>>>>>
>> What happens if you edit your ~/.gnupg/gpg.conf and add
>>
>> default-key 14576049 ?
>>
>>> Hey again,
>>
>>> Nope, that doesn't do it, it still fails with the error:
>>
>>> gpg: cancelled by user
>>> gpg: no default secret key: Operation cancelled
>>> gpg: ./Manifest: clearsign failed: Operation cancelled
>>
>>> What puzzles me is why it is random if it asks for my password and
>>> signs it or not.
>>
>>
>>>
>>>
> You can try to setup keychain[1] so you only have to type your password once
>
> [1]http://www.gentoo.org/doc/en/keychain-guide.xml

It seems to be related to my user not being in the tty group - it
still puzzles me why it fails randomly :)

> - --
> Regards,
> Markos Chandras / Gentoo Linux Developer / Key ID: B4AFF2C2
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.17 (GNU/Linux)
>
> iQIcBAEBCgAGBQJOFrfTAAoJEPqDWhW0r/LCYhwQALCPT6+j3K4/YxlpgR16IBwm
> 2tu9OCvPqXzhiirNyfjUGZBjyufwRiAq0EIyohKjrFuPXV5MOd+kBT5nxxM7ptlQ
> 3lrnYobm7ccIPDXRuNfwg176nzJEa9r+dhoWBFi3x3vzBuWDVDJ2nyH9QLhGm+0G
> wrxpNn5twu4kfrfXW1iCSxD+rHFzmdVawEBMPJMflxquInH4DT+qIRZGTk20BXQz
> KvxS2F+5QWhSCfg7uo0M+hB+yRau41jE4vuGRD7sl2xclw1emldP8RJ/020RYj85
> b3ZdsMWK8MUfgoR7gtL3eVR8Lk/HWrCK1QoczT9rcXx1Guei9nGlkc6673pNfphl
> PGE+MiH0EKS80oUW57beT0VqnryTdyDfGOtrE58nw4nm9WyDEbnJTZRBAIPFNGBA
> 1d7OPaM/XiuvyIv37x/5Z5zjqSgvJMkmcxf1AtQz1rpXoeEU6kEcP2pwcSx3fi1m
> uIiYm2MGS1oCzFEPN8F/ZZ0/Pt3GGWsqukNPf4bC/6VLLVsMxbHBzmurma22oB9B
> T/3ESOglow3kS7Cqvzj55rt+GIZynLNSCPyvh8NCzanSNdlZUktpEpmAj9TmKSRM
> XUUZv/reR1TXrFcQUkHtLczrerroqcq/fP30qqqABsckxtDJRwnAY/LPA0YMcy6H
> cYuRRDC4UPlLtb3PF9PM
> =1IbZ
> -----END PGP SIGNATURE-----
>
>