No valid OpenPGP data found

[cabbirolo]

Hello,

I've seen similar issues related to OpenPGP, and this is also happening using the terraform feature (ghcr.io/devcontainers/features/terraform:1) with the image mcr.microsoft.com/vscode/devcontainers/base:ubuntu

[2025-07-22T20:52:23.575Z] Processing triggers for man-db (2.12.0-4build2) ...
[2025-07-22T20:52:24.013Z] TERRAFORM_VERSION=1.12.2
[2025-07-22T20:52:24.331Z] TFLINT_VERSION=0.58.1
[2025-07-22T20:52:24.670Z] TERRAGRUNT_VERSION=0.83.2
[2025-07-22T20:52:24.672Z] Downloading terraform...
[2025-07-22T20:52:26.830Z] () Downloading GPG key...
[2025-07-22T20:52:27.690Z] gpg: no valid OpenPGP data found.
[2025-07-22T20:52:27.691Z] () Failed getting key, retrying in 10s...
[2025-07-22T20:52:37.695Z] () Downloading GPG key...
[2025-07-22T20:52:38.480Z] gpg: no valid OpenPGP data found.
[2025-07-22T20:52:38.481Z] () Failed getting key, retrying in 10s...
[2025-07-22T20:52:48.483Z] () Downloading GPG key...
[2025-07-22T20:52:49.275Z] gpg: no valid OpenPGP data found.
[2025-07-22T20:52:49.277Z] () Failed getting key, retrying in 10s...
[2025-07-22T20:52:59.279Z] () Downloading GPG key...
[2025-07-22T20:53:00.074Z] gpg: no valid OpenPGP data found.
[2025-07-22T20:53:00.075Z] () Failed getting key, retrying in 10s...
[2025-07-22T20:53:10.078Z] () Downloading GPG key...
[2025-07-22T20:53:10.867Z] gpg: no valid OpenPGP data found.
[2025-07-22T20:53:10.869Z] () Failed getting key, retrying in 10s...
[2025-07-22T20:53:20.872Z] () Resolving GPG keyserver IP address...
[2025-07-22T20:53:20.903Z] () GPG keyserver IP address 185.125.188.27
() Downloading GPG key...
[2025-07-22T20:53:20.926Z] gpg: keyserver receive failed: No keyserver available
[2025-07-22T20:53:20.928Z] () Failed getting key, retrying in 10s...
[2025-07-22T20:53:30.931Z] () Downloading GPG key...
[2025-07-22T20:53:30.938Z] gpg: keyserver receive failed: No keyserver available
[2025-07-22T20:53:30.939Z] () Failed getting key, retrying in 10s...
[2025-07-22T20:53:40.941Z] () Downloading GPG key...
[2025-07-22T20:53:40.949Z] gpg: keyserver receive failed: No keyserver available
[2025-07-22T20:53:40.950Z] () Failed getting key, retrying in 10s...
[2025-07-22T20:53:50.953Z] (!) Failed to get gpg key.
ERROR: Feature "Terraform, tflint, and TFGrunt" (ghcr.io/devcontainers/features/terraform) failed to install! Look at the documentation at https://github.com/devcontainers/features/tree/main/src/terraform for help troubleshooting this error.
[2025-07-22T20:53:59.600Z] Error: building at STEP "RUN --mount=type=bind,from=dev_containers_feature_content_source,source=terraform_9,target=/tmp/build-features-src/terraform_9 cp -ar /tmp/build-features-src/terraform_9 /tmp/dev-container-features && chmod -R 0755 /tmp/dev-container-features/terraform_9 && cd /tmp/dev-container-features/terraform_9 && chmod +x ./devcontainer-features-install.sh && ./devcontainer-features-install.sh && rm -rf /tmp/dev-container-features/terraform_9": while running runtime: exit status 1

[jflatten]

This seems to be because the tflint URL is no longer valid.

From the https://raw.githubusercontent.com/microsoft/vscode-dev-containers/main/script-library/shared/settings.env I see the environment variable is set to:

TFLINT_GPG_KEY_URI="https://raw.githubusercontent.com/terraform-linters/tflint/master/8CE69160EB3F2FE9.key"

That URL results in 404: Not Found.

I have not been able to find a replacement URL, but it looks like the tflint project migrated away from utilizing GPG keys for validate in favor of GH Cosign.

The GPG key signed signature attached to TFLint releases has been deprecated. This signature will not be added to releases after May 1, 2023. Please migrate to verification with Cosign.

Any suggestions for a fix?

[Kaniska244]

Hello @cabbirolo ,

Could you please check and confirm if this feature works for you using ubuntu jammy (22.04), focal (20.04) or debian bookworm (12)?

I suspect this is probably happening only in ubuntu noble (24.04) as it has stricter GPG validation and different default keyserver behavior compared to Jammy/Focal and in that case obviously a fix would be needed from devcontainers for this which we are working on.

With Regards,
Kaniska

[cabbirolo]

Hello @Kaniska244

You're right, using ubuntu jammy (22.04) works fine.

--> 7daddf948adc
[3/3] STEP 18/24: RUN --mount=type=bind,from=dev_containers_feature_content_source,source=terraform_9,target=/tmp/build-features-src/terraform_9     cp -ar /tmp/build-features-src/terraform_9 /tmp/dev-container-features  && chmod -R 0755 /tmp/dev-container-features/terraform_9  && cd /tmp/dev-container-features/terraform_9  && chmod +x ./devcontainer-features-install.sh  && ./devcontainer-features-install.sh  && rm -rf /tmp/dev-container-features/terraform_9
===========================================================================
Feature       : Terraform, tflint, and TFGrunt
Description   : Installs the Terraform CLI and optionally TFLint and Terragrunt. Auto-detects latest version and installs needed dependencies.
Id            : ghcr.io/devcontainers/features/terraform
Version       : 1.4.0
Documentation : https://github.com/devcontainers/features/tree/main/src/terraform
Options       :
    VERSION="latest"
    TFLINT="latest"
    TERRAGRUNT="latest"
    INSTALLSENTINEL="false"
    INSTALLTFSEC="false"
    INSTALLTERRAFORMDOCS="false"
    HTTPPROXY=""
    CUSTOMDOWNLOADSERVER=""
===========================================================================
find: '/var/lib/apt/lists/*': No such file or directory
Running apt-get update...
<OMMITTED>
Processing triggers for man-db (2.10.2-1) ...
TERRAFORM_VERSION=1.12.2
TFLINT_VERSION=0.58.1
TERRAGRUNT_VERSION=0.83.2
Downloading terraform...
(*) Downloading GPG key...
gpg: WARNING: unacceptable HTTP redirect from server was cleaned up
gpg: WARNING: unacceptable HTTP redirect from server was cleaned up
gpg: Signature made Wed Jun 11 10:34:29 2025 UTC
gpg:                using RSA key 374EC75B485913604A831CC7C820C6D5CD27AB87
gpg: Good signature from "HashiCorp Security (hashicorp.com/security) <security@hashicorp.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: C874 011F 0AB4 0511 0D02  1055 3436 5D94 72D7 468F
     Subkey fingerprint: 374E C75B 4859 1360 4A83  1CC7 C820 C6D5 CD27 AB87
terraform_1.12.2_linux_amd64.zip: OK
Archive:  terraform_1.12.2_linux_amd64.zip
  inflating: LICENSE.txt             
  inflating: terraform               
Downloading tflint...
Installing cosign...
COSIGN_VERSION=2.5.3
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100 59.5M  100 59.5M    0     0  20.4M      0  0:00:02  0:00:02 --:--:-- 25.6M
Selecting previously unselected package cosign.
(Reading database ... 92120 files and directories currently installed.)
Preparing to unpack /tmp/cosign_2.5.3_amd64.deb ...
Unpacking cosign (2.5.3) ...
Setting up cosign (2.5.3) ...
  ______   ______        _______. __    _______ .__   __.
 /      | /  __  \      /       ||  |  /  _____||  \ |  |
|  ,----'|  |  |  |    |   (----`|  | |  |  __  |   \|  |
|  |     |  |  |  |     \   \    |  | |  | |_ | |  . `  |
|  `----.|  `--'  | .----)   |   |  | |  |__| | |  |\   |
 \______| \______/  |_______/    |__|  \______| |__| \__|
cosign: A tool for Container Signing, Verification and Storage in an OCI registry.

GitVersion:    v2.5.3
GitCommit:     488ef8ceed5ab5d77379e9077a124a0d0df41d06
GitTreeState:  clean
BuildDate:     2025-07-17T19:56:47Z
GoVersion:     go1.24.5
Compiler:      gc
Platform:      linux/amd64

setting TUF refresh period to 24h0m0s
Verified OK
2fea1af8e8602d4d9e4253a588ac66f17bf36152cafb51f4d929b8bc6335e740  tflint_linux_amd64.zip
tflint_linux_amd64.zip: OK
Archive:  /tmp/tf-downloads/tflint_linux_amd64.zip
  inflating: tflint                  
Downloading Terragrunt...
./install.sh: line 455: warning: command substitution: ignored null byte in input
terragrunt_linux_amd64: OK
Done!
--> a70974536a58

[Kaniska244]

Closing this issue as PR has been merged.