Skip to content

[Bug]: GPG lock files not cleaned up #68869

@OrangeDog

Description

@OrangeDog

What happened?

I noticed today that the master's gpg_keydir contains a number of what appear to be old lock files.
This may indicate an error in how Salt interacts with GPG for pillar decryption.
From the dates, this may be something that was fixed mid-2021 (~3003.2), but regressed in 2025 (~3006.9).

drwx------ 4 root root  4096 Apr  1 15:22 .
-rw-r--r-- 1 root root    25 Apr  1 15:22 .#lk0x00005fead0da9180.salt.2848137
-rw------- 1 root root  1280 Apr  1 12:48 trustdb.gpg
drwx------ 2 root root  4096 Apr  1 12:48 openpgp-revocs.d
-rw-r--r-- 1 root root  2614 Apr  1 12:48 pubring.kbx
drwx------ 2 root root  4096 Apr  1 12:48 private-keys-v1.d
srwx------ 1 root root     0 Apr  1 12:48 S.gpg-agent
-rw-r--r-- 1 root root    25 Apr  1 12:43 .#lk0x00005eaf17e32180.salt.2622883
srwx------ 1 root root     0 Mar 31 12:01 S.gpg-agent.browser
srwx------ 1 root root     0 Mar 31 12:01 S.gpg-agent.extra
srwx------ 1 root root     0 Mar 31 12:01 S.gpg-agent.ssh
-rw-r--r-- 1 root root    25 Mar 14 17:53 .#lk0x0000646b8d501180.salt.3455748
-rw-r--r-- 1 root root    25 Mar 14 17:53 .#lk0x00005d335afde180.salt.3455746
-rw-r--r-- 1 root root    25 Mar  8 17:53 .#lk0x00005cfc62a1c180.salt.4096703
-rw-r--r-- 1 root root    25 Feb  9 09:33 .#lk0x00005ed4c3efc180.salt.1486619
-rw-r--r-- 1 root root    25 Feb  9 09:28 .#lk0x000064017d6e4180.salt.1481958
drwxr-xr-x 7 root root  4096 Feb  9 09:28 ..
-rw-r--r-- 1 root root    25 Feb  1 10:36 .#lk0x000064a308b01180.salt.2693049
-rw-r--r-- 1 root root    25 Jan 20 10:36 .#lk0x000061afb9b38180.salt.464720
-rw-r--r-- 1 root root    25 Jan 14 10:36 .#lk0x0000592088083180.salt.1334015
-rw-r--r-- 1 root root    25 Dec 31 09:41 .#lk0x00005ddef450c180.salt.3402252
-rw-r--r-- 1 root root    25 Dec 25 09:41 .#lk0x000055e588762180.salt.101802
-rw-r--r-- 1 root root    25 Nov 21 16:15 .#lk0x0000616c8d106180.salt.203364
-rw-r--r-- 1 root root    25 Sep 24  2025 .#lk0x0000577e98172180.salt.492057
-rw-r--r-- 1 root root    25 Sep 24  2025 .#lk0x0000620fedf89180.salt.443354
-rw-r--r-- 1 root root    25 Sep 24  2025 .#lk0x000065378770b180.salt.443349
-rw-r--r-- 1 root root    25 Sep 17  2025 .#lk0x000061a997e9c180.salt.38688
-rw-r--r-- 1 root root    25 Sep 15  2025 .#lk0x000062e85a903180.salt.507764
-rw-r--r-- 1 root root    25 Sep  7  2025 .#lk0x000062298a537180.salt.2709096
-rw-r--r-- 1 root root    25 Sep  7  2025 .#lk0x0000597402427180.salt.2709092
-rw-r--r-- 1 root root    25 Sep  4  2025 .#lk0x00005ef3a3f98180.salt.1330760
-rw-r--r-- 1 root root    25 Aug 30  2025 .#lk0x00006451d7170180.salt.1195684
-rw-r--r-- 1 root root    25 Aug 12  2025 .#lk0x0000595f555aa180.salt.1180804
-rw-r--r-- 1 root root    25 Aug  9  2025 .#lk0x00006201d203f180.salt.4006745
-rw-r--r-- 1 root root    25 Jun 16  2025 .#lk0x000061b2f0830180.salt.2652759
-rw-r--r-- 1 root root    25 Jun  4  2025 .#lk0x00005ad1d9e98180.salt.3444869
-rw-r--r-- 1 root root    25 May 30  2025 .#lk0x00005b7f9b48d180.salt.965296
-rw-r--r-- 1 root root    25 May  6  2025 .#lk0x000062a05b01c180.salt.1873046
-rw-r--r-- 1 root root    25 Feb 26  2025 .#lk0x00005a0cdb040180.salt.785560
-rw-r--r-- 1 root root    25 Feb 20  2025 .#lk0x0000638d5a73c180.salt.1165803
-rw-r--r-- 1 root root    25 Feb 17  2025 .#lk0x00005744f15f3180.salt.3546249
-rw-r--r-- 1 root root    25 Jul 19  2021 .#lk0x000055dfb242a550.salt.1042076
-rw-r--r-- 1 root root    25 Feb 23  2021 .#lk0x00005601f7ccff40.salt.2168209
-rw-r--r-- 1 root root    25 Feb 23  2021 .#lk0x00005638df858f20.salt.2168109
-rw-r--r-- 1 root root 49152 Feb 23  2021 tofu.db
-rw-r--r-- 1 root root    25 Nov 17  2020 .#lk0x000055fb8acf8550.salt.3663457

Type of salt install

Official deb

Major version

3006.x

What supported OS are you seeing the problem on? Can select multiple. (If bug appears on an unsupported OS, please open a GitHub Discussion instead)

ubuntu-24.04

salt --versions-report output

Salt Version:
          Salt: 3006.20

Python Version:
        Python: 3.10.19 (main, Feb  5 2026, 07:05:38) [GCC 11.2.0]

Dependency Versions:
          cffi: 1.17.1
      cherrypy: 18.10.0
  cryptography: 42.0.5
      dateutil: 2.8.1
     docker-py: Not Installed
         gitdb: Not Installed
     gitpython: Not Installed
        Jinja2: 3.1.6
       libgit2: 1.9.1
  looseversion: 1.0.2
      M2Crypto: Not Installed
          Mako: Not Installed
       msgpack: 1.0.2
  msgpack-pure: Not Installed
  mysql-python: Not Installed
     packaging: 24.0
     pycparser: 2.21
      pycrypto: Not Installed
  pycryptodome: 3.19.1
        pygit2: 1.18.2
  python-gnupg: 0.4.8
        PyYAML: 6.0.1
         PyZMQ: 23.2.0
        relenv: 0.22.3
         smmap: Not Installed
       timelib: 0.3.0
       Tornado: 4.5.3
           ZMQ: 4.3.4

System Versions:
          dist: ubuntu 24.04.4 noble
        locale: utf-8
       machine: x86_64
       release: 6.8.0-106-generic
        system: Linux
       version: Ubuntu 24.04.4 noble

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugbroken, incorrect, or confusing behaviorneeds-triage

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions