René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Automated tests fail due to ha.pool.sks-keyservers.net unavailability","articleBody":"#### Environment details\r\n\r\n  - OS type and version: n/a\r\n  - Python version: `python --version`: n/a\r\n  - pip version: `pip --version`: n/a\r\n  - `google-cloud-compute` version: `pip show google-cloud-compute`: n/a\r\n\r\n#### Steps to reproduce\r\n\r\n  1. Try to make a Pull Request, so kokoro tries to build like, just like: https://github.com/googleapis/python-compute/pull/78\r\n  2. The docs-presubmit test fails during its setup.\r\n\r\n#### Code example\r\n\r\nNone needed.\r\n\r\n#### Stack trace\r\n\r\nFrom the test output:\r\n```\r\nStep 6/8 : RUN set -ex     \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\"     \u0026\u0026 echo \"disable-ipv6\" \u003e\u003e \"${GNUPGHOME}/dirmngr.conf\"     \u0026\u0026 /tmp/fetch_gpg_keys.sh     \u0026\u0026 for PYTHON_VERSION in 3.7.8 3.8.5; do         wget --no-check-certificate -O python-${PYTHON_VERSION}.tar.xz \"https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz\"         \u0026\u0026 wget --no-check-certificate -O python-${PYTHON_VERSION}.tar.xz.asc \"https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc\"         \u0026\u0026 gpg --batch --verify python-${PYTHON_VERSION}.tar.xz.asc python-${PYTHON_VERSION}.tar.xz         \u0026\u0026 rm -r python-${PYTHON_VERSION}.tar.xz.asc         \u0026\u0026 mkdir -p /usr/src/python-${PYTHON_VERSION}         \u0026\u0026 tar -xJC /usr/src/python-${PYTHON_VERSION} --strip-components=1 -f python-${PYTHON_VERSION}.tar.xz         \u0026\u0026 rm python-${PYTHON_VERSION}.tar.xz         \u0026\u0026 cd /usr/src/python-${PYTHON_VERSION}         \u0026\u0026 ./configure             --enable-shared             --enable-unicode=ucs4             --with-system-ffi             --without-ensurepip         \u0026\u0026 make -j$(nproc)         \u0026\u0026 make install         \u0026\u0026 ldconfig   ; done   \u0026\u0026 rm -rf \"${GNUPGHOME}\"   \u0026\u0026 rm -rf /usr/src/python*   \u0026\u0026 rm -rf ~/.cache/\r\n ---\u003e Running in 39d592cf26a8\r\n+ mktemp -d\r\n+ export GNUPGHOME=/tmp/tmp.vjBaqEwlHa\r\n+ echo disable-ipv6\r\n+ /tmp/fetch_gpg_keys.sh\r\ngpg: keybox '/tmp/tmp.vjBaqEwlHa/pubring.kbx' created\r\ngpg: keyserver receive failed: No name\r\ncommand failed, retrying\r\ngpg: keyserver receive failed: No name\r\ncommand failed, retrying\r\ngpg: keyserver receive failed: No name\r\ncommand failed, retrying\r\ngpg: keyserver receive failed: No name\r\ncommand failed, retrying\r\ngpg: keyserver receive failed: No name\r\ncommand failed, retrying\r\ngpg: keyserver receive failed: No name\r\ncommand failed, retrying\r\nThe command '/bin/sh -c set -ex     \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\"     \u0026\u0026 echo \"disable-ipv6\" \u003e\u003e \"${GNUPGHOME}/dirmngr.conf\"     \u0026\u0026 /tmp/fetch_gpg_keys.sh     \u0026\u0026 for PYTHON_VERSION in 3.7.8 3.8.5; do         wget --no-check-certificate -O python-${PYTHON_VERSION}.tar.xz \"https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz\"         \u0026\u0026 wget --no-check-certificate -O python-${PYTHON_VERSION}.tar.xz.asc \"https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc\"         \u0026\u0026 gpg --batch --verify python-${PYTHON_VERSION}.tar.xz.asc python-${PYTHON_VERSION}.tar.xz         \u0026\u0026 rm -r python-${PYTHON_VERSION}.tar.xz.asc         \u0026\u0026 mkdir -p /usr/src/python-${PYTHON_VERSION}         \u0026\u0026 tar -xJC /usr/src/python-${PYTHON_VERSION} --strip-components=1 -f python-${PYTHON_VERSION}.tar.xz         \u0026\u0026 rm python-${PYTHON_VERSION}.tar.xz         \u0026\u0026 cd /usr/src/python-${PYTHON_VERSION}         \u0026\u0026 ./configure             --enable-shared             --enable-unicode=ucs4             --with-system-ffi             --without-ensurepip         \u0026\u0026 make -j$(nproc)         \u0026\u0026 make install         \u0026\u0026 ldconfig   ; done   \u0026\u0026 rm -rf \"${GNUPGHOME}\"   \u0026\u0026 rm -rf /usr/src/python*   \u0026\u0026 rm -rf ~/.cache/' returned a non-zero code: 1\r\n```\r\n\r\nBasically, those two commands are failing:\r\n```\r\ngpg --keyserver ha.pool.sks-keyservers.net --recv-keys 0D96DF4D4110E5C43FBFB17F2D347EA6AA65421D\r\ngpg --keyserver ha.pool.sks-keyservers.net --recv-keys E3FF2839C048B25C084DEBE9B26995E310250568\r\n```\r\n\r\nI checked that `ha.pool.sks-keyservers.net` fails to resolve. Do we really want to validate python build like this? Isn't there a better, more reliable way?\r\n\r\nAs we can see at: https://sks-keyservers.net/overview-of-pools.php\r\n```\r\nThis service is deprecated. This means it is no longer maintained, and new HKPS certificates will not be issued. Service reliability should not be expected.\r\n\r\nUpdate 2021-06-21: Due to even more GDPR takedown requests, the DNS records for the pool will no longer be provided at all.\r\n```","author":{"url":"https://github.com/m-strzelczyk","@type":"Person","name":"m-strzelczyk"},"datePublished":"2021-07-19T13:41:46.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":2},"url":"https://github.com/79/python-compute/issues/79"}