Podman errors and solutions

The following errors may occur during container signing.

Common errors

The gpg-agent running as root is unable to read Software Trust Manager environment variables.

Attempting to pull an image with no signatures available will result in errors.

Execute this command before attempting to sign using ssm-scd:

systemctl --user import-environment

To sign container images with Podman and GPG, ensure that:

A valid private GPG key is required on the signing machine and corresponding public keys are required on every system that pulls the image.
A web server must run somewhere that has access to the signature storage.
The web server must be configured in any /etc/containers/registries.d/*.yaml file.
Every image pulling system must be configured to contain the enforcing policy configuration via policy.conf.

When you encounter an error while signing a container, follow the procedure below to check the PKCS11 logs:

To set the log level to TRACE, run the command:
exemplo 1. Windows
```
set SM_LOG_LEVEL=TRACE
```
exemplo 2. Linux
```
export SM_LOG_LEVEL=TRACE
```
exemplo 3. macOS
```
export SM_LOG_LEVEL=TRACE
```
Run the signing command that failed again.
To identify where your logs are located, run:
```
echo %USERPROFILE%/.signingmanager/logs
```
Copy the output of the command to navigate to the logs location.
Open the smpkcs11.log file.
To identify the the most recent event, scroll to the end of the logs.
The last few lines should explain why the error occurred.
If you are unable to resolve the error based on the information provided, contact Support and provide the log file.

Nesta secção: