keyserver.ubuntu.com has no IPv6 connectivity

Asked by dnmvisser on 2012-02-28

Was about to install a custom package on my IPv6 only Lucid system.
This involved adding a new key to apt, but that failed:

root@testdev:~# apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 7C1A977926535DB3
Executing: gpg --ignore-time-conflict --no-options --no-default-keyring --secret-keyring /etc/apt/secring.gpg --trustdb-name /etc/apt/trustdb.gpg --keyring /etc/apt/trusted.gpg --primary-keyring /etc/apt/trusted.gpg --keyserver keyserver.ubuntu.com --recv-keys 7C1A977926535DB3
gpg: requesting key 26535DB3 from hkp server keyserver.ubuntu.com
gpgkeys: HTTP fetch error 7: Failed to connect to 91.189.89.49: Network is unreachable
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0

I guess this hosts sits in the same network as ntp.ubuntu.com, which also lacks IPv6 support.
Any idea when these important boxes will get IPv6 connectivity?

Question information

Language:
English Edit question
Status:
Answered
For:
Launchpad itself Edit question
Assignee:
No assignee Edit question
Last query:
2012-02-28
Last reply:
2012-02-28
Laura Czajkowski (czajkowski) said : #1

At present there isn't support for IPV6 but we are looking to change this in the future.

Ryan Rawdon (flieslikeabrick) said : #2

Hello,

IPv6 has now been added to other official Canonical resources including archive.ubuntu.com and security.ubuntu.com, amongst other repositories, since the last time this question was updated.

It appears that these are hosted on or very close to the same network as the key server -- can this be raised for some discussion? Ubuntu/Canonical made great progress on v6 in the last 18 months, it would be great to carry some momentum from it.

The keyserver is something which is not mirrored (or mirrorable, to my knowledge/understanding)and can block some administration tasks on IPv6-only machines/clusters/environments. It would be great to see this kind of critical infrastructure gain IPv6 connectivity.

William Grant (wgrant) said : #3

keyserver.ubuntu.com is actually just a part of the replicated sks-keyservers.net network. pool.sks-keyservers.net has AAAAs.

Wido den Hollander (wido) said : #4

I would really like to see IPv6 support for the keyserver.

We are deploying multiple IPv6 only servers which require keys from the Ubuntu keyserver.

Could you please add the AAAA-record?

William Grant (wgrant) said : #5

An AAAA will be added to keyserver.ubuntu.com eventually, but it's not currently top priority because IPv6-only hosts can easily use pool.sks-keyservers.net in its place, and that has AAAAs.

Can you help with this problem?

Provide an answer of your own, or ask dnmvisser for more information if necessary.

To post a message you must log in.