GPG hang on Fedora Silverblue 39

Problem

After upgrading the system using rpm-ostree upgrade, the gpg command started to hang.

When I noticed this issue for the first time, I was using git commit -S with other arguments, I ran rpm-ostree upgrade again, and it seems like has upgraded some packages.

I rebooted after it finished, and ran gpg --list-keys, this time it showed the following:

gpg: waiting for lock (held by 20) ...
gpg: waiting for lock (held by 20) ...
gpg: waiting for lock (held by 20) ...
gpg: waiting for lock (held by 20) ...
gpg: waiting for lock (held by 20) ...

It’s bizarre because pid 20 seems like a Kernel process for the CPU

So I rebooted again, but this time still had the same error message. I looked into the ~/.gnupg/ directory and found there is a file called gnupg_spawn_keyboxd_sentinel.lock, and I removed it.

Well after removing that lock file (I think), the gpg --list-keys no longer displaying lock file is held by pid 20, this time it just decided to hang, no output, just pure silence.

Here is gpg --list-keys --verbose output:

❯ gpg --list-keys --verbose
gpg: enabled compatibility flags:
gpg: using pgp trust model

rpm-ostree status -v:

State: idle
AutomaticUpdates: disabled
Deployments:
● fedora:fedora/39/x86_64/silverblue (index: 0)
                  Version: 39.20240127.0 (2024-01-27T01:03:37Z)
               BaseCommit: c6d6e3a8421312fab2cab62d46e61e8efdaeb67a720435a01e8241f6aba717c2
                           β”œβ”€ repo-0 (2023-11-01T00:12:39Z)
                           β”œβ”€ repo-1 (2024-01-27T00:17:15Z)
                           └─ repo-2 (2024-01-27T00:24:26Z)
                   Commit: 91469a9e2c9ed623f4eb5181cc44b5bbad1b8116b7ffd399c690d29fecf37d2a
                           β”œβ”€ code (2024-01-27T00:31:33Z)
                           β”œβ”€ copr:copr.fedorainfracloud.org:phracek:PyCharm (2023-08-10T15:35:19Z)
                           β”œβ”€ fedora (2023-11-01T00:12:39Z)
                           β”œβ”€ fedora-cisco-openh264 (2023-03-14T10:57:01Z)
                           β”œβ”€ google-chrome (2024-01-25T17:53:42Z)
                           β”œβ”€ rpmfusion-free (2023-11-04T16:49:08Z)
                           β”œβ”€ rpmfusion-free-updates (2024-01-25T08:35:03Z)
                           β”œβ”€ rpmfusion-nonfree (2023-11-04T17:26:32Z)
                           β”œβ”€ rpmfusion-nonfree-nvidia-driver (2024-01-25T09:11:40Z)
                           β”œβ”€ rpmfusion-nonfree-steam (2023-08-10T16:27:35Z)
                           β”œβ”€ rpmfusion-nonfree-updates (2024-01-25T08:53:33Z)
                           β”œβ”€ tailscale-stable (2024-01-25T19:17:01Z)
                           β”œβ”€ updates (2024-01-27T01:20:05Z)
                           └─ updates-archive (2024-01-27T01:55:30Z)
                   Staged: no
                StateRoot: fedora
             GPGSignature: 1 signature
                           Signature made Sat 27 Jan 2024 09:04:59 CST using RSA key ID 75CF5AC418B8E74C
                           Good signature from "Fedora <fedora-39-primary@fedoraproject.org>"
          LayeredPackages: 'g++' akmods appstream-compose blivet-gui code distrobox gnome-tweaks gstreamer1-plugin-openh264 htop ibus-chewing ibus-rime libappstream-glib libgda libgda-sqlite lzip mozilla-openh264 neovim nvtop openssl
                           sassc syncthing tailscale waydroid zsh
            LocalPackages: rpmfusion-free-release-39-1.noarch rpmfusion-nonfree-release-39-1.noarch vesktop-1.5.0-1.x86_64

  fedora:fedora/39/x86_64/silverblue (index: 1)
                  Version: 39.20240121.0 (2024-01-21T00:40:42Z)
               BaseCommit: c222759cc742b6855e767f96921ba0a43817ed46e78460daac05e6507f828002
                           β”œβ”€ repo-0 (2023-11-01T00:12:39Z)
                           β”œβ”€ repo-1 (2024-01-21T00:16:37Z)
                           └─ repo-2 (2024-01-21T00:22:35Z)
                   Commit: c97dba9932d72cb39da63ad13d71b707a64366b20c430428e41fe7882aaab7b5
                StateRoot: fedora
             GPGSignature: 1 signature
                           Signature made Sun 21 Jan 2024 08:51:07 CST using RSA key ID 75CF5AC418B8E74C
                           Good signature from "Fedora <fedora-39-primary@fedoraproject.org>"
          LayeredPackages: 'g++' akmods appstream-compose blivet-gui code distrobox gnome-tweaks gstreamer1-plugin-openh264 htop ibus-chewing ibus-rime libappstream-glib libgda libgda-sqlite lzip mozilla-openh264 neovim nvtop openssl
                           sassc syncthing tailscale waydroid zsh
            LocalPackages: rpmfusion-free-release-39-1.noarch rpmfusion-nonfree-release-39-1.noarch vesktop-1.5.0-1.x86_64

Cause

Not yet known.

Related Issues

No idea, every post on the internet is talking about gpg-agent issue, but I tried killing it but still having same issue.
Even using gpg --list-keys in TTY instead of Gnome terminal has the same issue
Gnome β€œPassword and keys” app just hang when I tried to open it.

Workarounds

None yet.

This might be GPG Support stopps working from time to time Β· Issue #508 Β· fedora-silverblue/issue-tracker Β· GitHub.

Not sure that this is a common issue however.

From Proposed Common Issues to Ask Fedora

Hi,
I had the same problem (if I remember correctly) and to fix it I commented out use-keyboxd in .gnupg/common.conf.

1 Like

Well, this does solve my problem, cheers!