Terraform devcontainer feature v1.3.4 gpg error

[f0o]

0.410 ===========================================================================
0.410 Feature       : Terraform, tflint, and TFGrunt
0.410 Description   : Installs the Terraform CLI and optionally TFLint and Terragrunt. Auto-detects latest version and installs
[2023-09-09T17:26:31.353Z]  needed dependencies.
0.410 Id            : ghcr.io/devcontainers/features/terraform
0.410 Version       : 1.3.4
0.410 Documentation : https://github.com/devcontainers/features/tree/main/src/terraform
0.410 Options       :
0.410     VERSION="latest"
0.410     TFLINT="latest"
0.410     TERRAGRUNT="latest"
0.410     INSTALLSENTINEL="false"
0.410     INSTALLTFSEC="false"
0.410     INSTALLTERRAFORMDOCS="false"
0.410     HTTPPROXY=""
0.410 ===========================================================================
0.863 TERRAFORM_VERSION=1.5.7
1.285 TFLINT_VERSION=0.48.0
1.760 TERRAGRUNT_VERSION=0.50.14
1.762 Downloading terraform...
2.451 (*) Downloading GPG key...
2.549 gpg: keyserver receive failed: Server indicated a failure
2.551 (*) Failed getting key, retring in 10s...
12.55 (*) Downloading GPG key...
12.62 gpg: keyserver receive failed: Server indicated a failure
12.62 (*) Failed getting key, retring in 10s...
22.62 (*) Downloading GPG key...
22.69 gpg: keyserver receive failed: Server indicated a failure
22.69 (*) Failed getting key, retring in 10s...
32.70 (*) Downloading GPG key...
32.78 gpg: keyserver receive failed: Server indicated a failure
32.78 (*) Failed getting key, retring in 10s...
42.78 (*) Downloading GPG key...
42.85 gpg: keyserver receive failed: Server indicated a failure
42.85 (*) Failed getting key, retring in 10s...
52.86 (!) Failed to get gpg key.
52.86 ERROR: Feature "Terraform, tflint, and TFGrunt" (ghcr.io/devcontainers/features/terraform) failed to install! Look at the documentation at https://github.com/devcontainers/features/tree/main/src/terraform for help troubleshooting this error.
------

how to go from here?

[samruddhikhandale]

Hi 👋

Does your machine use a proxy environment? If so, you would need to update the httpProxy Feature option with the proxy, which will then create a successful connection with the key server.

[f0o]

No Proxies @samruddhikhandale

[samruddhikhandale]

Interesting, terraform Feature with the options specified in the logs works fine for me. @f0o can you provide a sample dev container config for reproducing this issue? Thanks!

[f0o]

I tried rerunning it today and it worked, I guess gpg-servers had a boo-boo?

Anyway the devconfig was:

// For format details, see https://aka.ms/devcontainer.json. For config options, see the
// README at: https://github.com/devcontainers/templates/tree/main/src/go
{
	"name": "Go",
	// Or use a Dockerfile or Docker Compose file. More info: https://containers.dev/guide/dockerfile
	"image": "mcr.microsoft.com/devcontainers/go:1-1.21-bullseye",
	"features": {
		"ghcr.io/devcontainers/features/terraform:1": {}
	}

	// Features to add to the dev container. More info: https://containers.dev/features.
	// "features": {},

	// Use 'forwardPorts' to make a list of ports inside the container available locally.
	// "forwardPorts": [],

	// Use 'postCreateCommand' to run commands after the container is created.
	// "postCreateCommand": "go version",

	// Configure tool-specific properties.
	// "customizations": {},

	// Uncomment to connect as root instead. More info: https://aka.ms/dev-containers-non-root.
	// "remoteUser": "root"
}

Closing the issue as no longer reproducible; Thanks!

[JDubbTX]

Confirmed this is still happening. Windows 11, WSL UBUNTU, No proxies, nothing

0.810 TERRAFORM_VERSION=1.5.7
1.087 TFLINT_VERSION=0.48.0
1.415 TERRAGRUNT_VERSION=0.50.17
1.417 Downloading terraform...
3.301 (*) Downloading GPG key...
33.36 gpg: keyserver receive failed: Server indicated a failure
33.36 (*) Failed getting key, retring in 10s...
43.36 (*) Downloading GPG key...
73.41 gpg: keyserver receive failed: Server indicated a failure
73.41 (*) Failed getting key, retring in 10s...
83.41 (*) Downloading GPG key...
113.5 gpg: keyserver receive failed: Server indicated a failure
113.5 (*) Failed getting key, retring in 10s...
123.5 (*) Downloading GPG key...
153.5 gpg: keyserver receive failed: Server indicated a failure
153.5 (*) Failed getting key, retring in 10s...
163.5 (*) Downloading GPG key...
193.5 gpg: keyserver receive failed: Server indicated a failure
193.6 (*) Failed getting key, retring in 10s...
203.6 (!) Failed to get gpg key.
203.6 ERROR: Feature "Terraform, tflint, and TFGrunt" (ghcr.io/devcontainers/features/terraform) failed to install! Look at the documentation at https://github.com/devcontainers/features/tree/main/src/terraform for help troubleshooting this error.
------
Dockerfile.extended:24
--------------------
  23 |     
  24 | >>> RUN --mount=type=bind,from=dev_containers_feature_content_source,source=terraform_0,target=/tmp/build-features-src/terraform_0 \
  25 | >>>     cp -ar /tmp/build-features-src/terraform_0 /tmp/dev-container-features \
  26 | >>>  && chmod -R 0755 /tmp/dev-container-features/terraform_0 \
  27 | >>>  && cd /tmp/dev-container-features/terraform_0 \
  28 | >>>  && chmod +x ./devcontainer-features-install.sh \
  29 | >>>  && ./devcontainer-features-install.sh \
  30 | >>>  && rm -rf /tmp/dev-container-features/terraform_0
  31 |     
--------------------
ERROR: failed to solve: process "/bin/sh -c cp -ar /tmp/build-features-src/terraform_0 /tmp/dev-container-features  && chmod -R 0755 /tmp/dev-container-features/terraform_0  && cd /tmp/dev-container-features/terraform_0  && chmod +x ./devcontainer-features-install.sh  && ./devcontainer-features-install.sh  && rm -rf /tmp/dev-container-features/terraform_0" did not complete successfully: exit code: 1
[268092 ms] Error: Command failed: docker buildx build --load --build-context dev_containers_feature_content_source=/tmp/devcontainercli-jweirich/container-features/0.51.1-1694838573983 --build-arg _DEV_CONTAINERS_BASE_IMAGE=mcr.microsoft.com/devcontainers/go:1-1.21-bullseye --build-arg _DEV_CONTAINERS_IMAGE_USER=root --build-arg _DEV_CONTAINERS_FEATURE_CONTENT_SOURCE=dev_container_feature_content_temp --target dev_containers_target_stage -t vsc-jenkins-ec2-terraform-74663f5398b6bdab6d4d0b2e62c22d13ac622c82d66011d36915c69c6e88f704-features -f /tmp/devcontainercli-jweirich/container-features/0.51.1-1694838573983/Dockerfile.extended /tmp/devcontainercli-jweirich/empty-folder
[268092 ms]     at gAA (/home/jweirich/.vscode-remote-containers/dist/dev-containers-cli-0.309.0/dist/spec-node/devContainersSpecCLI.js:462:1066)
[268092 ms]     at FK (/home/jweirich/.vscode-remote-containers/dist/dev-containers-cli-0.309.0/dist/spec-node/devContainersSpecCLI.js:462:1002)
[268092 ms]     at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
[268093 ms]     at async FAA (/home/jweirich/.vscode-remote-containers/dist/dev-containers-cli-0.309.0/dist/spec-node/devContainersSpecCLI.js:479:3660)
[268093 ms]     at async GC (/home/jweirich/.vscode-remote-containers/dist/dev-containers-cli-0.309.0/dist/spec-node/devContainersSpecCLI.js:479:4775)
[268093 ms]     at async VeA (/home/jweirich/.vscode-remote-containers/dist/dev-containers-cli-0.309.0/dist/spec-node/devContainersSpecCLI.js:611:12240)
[268093 ms]     at async WeA (/home/jweirich/.vscode-remote-containers/dist/dev-containers-cli-0.309.0/dist/spec-node/devContainersSpecCLI.js:611:11981)
[268099 ms] Exit code 1
[268103 ms] Command failed: /home/jweirich/.vscode-server/bin/8b617bd08fd9e3fc94d14adb8d358b56e3f72314/node /home/jweirich/.vscode-remote-containers/dist/dev-containers-cli-0.309.0/dist/spec-node/devContainersSpecCLI.js up --container-session-data-folder /tmp/devcontainers-4285b364-d5bb-40d2-a1a1-f81dc3fab5951694838570610 --workspace-folder /home/jweirich/projects/jenkins-ec2-terraform --workspace-mount-consistency cached --id-label devcontainer.local_folder=\\wsl.localhost\Ubuntu\home\jweirich\projects\jenkins-ec2-terraform --id-label devcontainer.config_file=/home/jweirich/projects/jenkins-ec2-terraform/.devcontainer/devcontainer.json --log-level debug --log-format json --config /home/jweirich/projects/jenkins-ec2-terraform/.devcontainer/devcontainer.json --default-user-env-probe loginInteractiveShell --mount type=volume,source=vscode,target=/vscode,external=true --mount type=bind,source=/run/user/1000/wayland-0,target=/tmp/vscode-wayland-ba08150a-0827-42fd-abb5-c07c65572656.sock --skip-post-create --update-remote-user-uid-default on --mount-workspace-git-root true

[sethbacon]

@samruddhikhandale can you please re-open. I'm also getting similar error to @JDubbTX

[samruddhikhandale]

We were seeing similar issues (see #323) which were fixed with https://github.com/devcontainers/features/pull/353/files. However, it seemed like for some folks keyserver hkp://keyserver.ubuntu.com works, but for others keyserver hkp://keyserver.ubuntu.com:80 does. Wondering if that's the case with you?

@sethbacon @JDubbTX can you pin the terraform Feature to v1.1.0 and see if it helps?

[sethbacon]

@samruddhikhandale
Got slightly farther...
0.292 ===========================================================================
0.292 Feature : Terraform, tflint, and TFGrunt
0.292 Description : Installs the Terraform CLI and optionally TFLint and Terragrunt. Auto-detects latest version and installs needed dependencies.
0.292 Id : ghcr.io/devcontainers/features/terraform
0.292 Version : 1.1.0
0.292 Documentation : https://github.com/devcontainers/features/tree/main/src/terraform
0.292 Options :
0.292 VERSION="latest"
0.292 TFLINT="latest"
0.292 TERRAGRUNT="none"
0.292 INSTALLTFSEC="false"
0.292 INSTALLTERRAFORMDOCS="true"
0.292 INSTALLSENTINEL="true"
0.292 ===========================================================================
0.815 TERRAFORM_VERSION=1.5.7
1.178 TFLINT_VERSION=0.48.0
1.179 Downloading terraform...
3.135 TERRAFORM_GPG_KEY=72D7468F
3.137 GPG_KEY_SERVERS=keyserver hkps://keyserver.ubuntu.com
3.137 keyserver hkps://keys.openpgp.org
3.137 keyserver hkps://keyserver.pgp.com
3.140 (*) Downloading GPG key...
4.066 gpg: Signature made Thu 07 Sep 2023 06:40:30 PM UTC
4.066 gpg: using RSA key 374EC75B485913604A831CC7C820C6D5CD27AB87
4.067 gpg: Good signature from "HashiCorp Security (hashicorp.com/security) security@hashicorp.com" [unknown]
4.068 gpg: WARNING: This key is not certified with a trusted signature!
4.068 gpg: There is no indication that the signature belongs to the owner.
4.068 Primary key fingerprint: C874 011F 0AB4 0511 0D02 1055 3436 5D94 72D7 468F
4.068 Subkey fingerprint: 374E C75B 4859 1360 4A83 1CC7 C820 C6D5 CD27 AB87
4.165 terraform_1.5.7_linux_amd64.zip: OK
4.166 Archive: terraform_1.5.7_linux_amd64.zip
4.166 inflating: terraform
4.621 Downloading tflint...
17.82 TFLINT_GPG_KEY_URI=https://raw.githubusercontent.com/terraform-linters/tflint/master/8CE69160EB3F2FE9.key
18.09 gpg: no valid OpenPGP data found.
18.09 ERROR: Feature "Terraform, tflint, and TFGrunt" (ghcr.io/devcontainers/features/terraform) failed to install! Look at the documentation at https://github.com/devcontainers/features/tree/main/src/terraform for help troubleshooting this error.

I should mention, no proxy and I've disconnected VPN.

Looks like https://raw.githubusercontent.com/terraform-linters/tflint/master/8CE69160EB3F2FE9.key gives a 404

[sethbacon]

and now setting it back to latest worked...I hate networking issues. Thanks for your help @samruddhikhandale !

[JDubbTX]

tried specifying terraform feature 1.1.0 and no difference for me. also tried HTTPPROXY set to hkp://keyserver.ubuntu.com. Still hangs on the gpg key download. This is my personal laptop, no vpn involved.

> [dev_containers_target_stage 5/5] RUN --mount=type=bind,from=dev_containers_feature_content_source,source=terraform_0,target=/tmp/build-features-src/terraform_0     cp -ar /tmp/build-features-src/terraform_0 /tmp/dev-container-features  && chmod -R 0755 /tmp/dev-container-features/terraform_0  && cd /tmp/dev-container-features/terraform_0  && chmod +x ./devcontainer-features-install.sh  && ./devcontainer-features-install.sh  && rm -rf /tmp/dev-container-features/terraform_0:
0.363 ===========================================================================
0.363 Feature       : Terraform, tflint, and TFGrunt
0.363 Description   : Installs the Terraform CLI and optionally TFLint and Terragrunt. Auto-detects latest version and installs needed dependencies.
0.363 Id            : ghcr.io/devcontainers/features/terraform
0.363 Version       : 1.3.4
[2023-09-19T23:15:28.293Z] 0.363 Documentation : https://github.com/devcontainers/features/tree/main/src/terraform
0.363 Options       :
0.363     VERSION="1.1.0"
0.363     TFLINT="latest"
0.363     TERRAGRUNT="latest"
0.363     INSTALLSENTINEL="false"
0.363     INSTALLTFSEC="false"
0.363     INSTALLTERRAFORMDOCS="false"
0.363     HTTPPROXY=""
0.363 ===========================================================================
0.848 TERRAFORM_VERSION=1.1.0
1.250 TFLINT_VERSION=0.48.0
1.745 TERRAGRUNT_VERSION=0.51.3
1.750 Downloading terraform...
3.424 (*) Downloading GPG key...
33.49 gpg: keyserver receive failed: Server indicated a failure
33.49 (*) Failed getting key, retring in 10s...
43.50 (*) Downloading GPG key...
73.55 gpg: keyserver receive failed: Server indicated a failure
73.55 (*) Failed getting key, retring in 10s...
83.56 (*) Downloading GPG key...
113.6 gpg: keyserver receive failed: Server indicated a failure
113.6 (*) Failed getting key, retring in 10s...
123.6 (*) Downloading GPG key...
153.7 gpg: keyserver receive failed: Server indicated a failure
153.7 (*) Failed getting key, retring in 10s...
163.7 (*) Downloading GPG key...
193.7 gpg: keyserver receive failed: Server indicated a failure
193.7 (*) Failed getting key, retring in 10s...
203.7 (!) Failed to get gpg key.
203.7 ERROR: Feature "Terraform, tflint, and TFGrunt" (ghcr.io/devcontainers/features/terraform) failed to install! Look at the documentation at https://github.com/devcontainers/features/tree/main/src/terraform for help troubleshooting this error.
------
[2023-09-19T23:15:28.293Z] Dockerfile.extended:24
--------------------
  23 |     
  24 | >>> RUN --mount=type=bind,from=dev_containers_feature_content_source,source=terraform_0,target=/tmp/build-features-src/terraform_0 \
  25 | >>>     cp -ar /tmp/build-features-src/terraform_0 /tmp/dev-container-features \
  26 | >>>  && chmod -R 0755 /tmp/dev-container-features/terraform_0 \
  27 | >>>  && cd /tmp/dev-container-features/terraform_0 \
  28 | >>>  && chmod +x ./devcontainer-features-install.sh \
  29 | >>>  && ./devcontainer-features-install.sh \
  30 | >>>  && rm -rf /tmp/dev-container-features/terraform_0
  31 |     
--------------------
ERROR: failed to solve: process "/bin/sh -c cp -ar /tmp/build-features-src/terraform_0 /tmp/dev-container-features  && chmod -R 0755 /tmp/dev-container-features/terraform_0  && cd /tmp/dev-container-features/terraform_0  && chmod +x ./devcontainer-features-install.sh  && ./devcontainer-features-install.sh  && rm -rf /tmp/dev-container-features/terraform_0" did not complete successfully: exit code: 1
[2023-09-19T23:15:28.308Z] Stop (205845 ms): Run: docker buildx build --load --build-context dev_containers_feature_content_source=/tmp/devcontainercli-jweirich/container-features/0.51.1-1695165121132 --build-arg _DEV_CONTAINERS_BASE_IMAGE=mcr.microsoft.com/devcontainers/base:ubuntu --build-arg _DEV_CONTAINERS_IMAGE_USER=root --build-arg _DEV_CONTAINERS_FEATURE_CONTENT_SOURCE=dev_container_feature_content_temp --target dev_containers_target_stage -t vsc-jenkins-ec2-terraform-74663f5398b6bdab6d4d0b2e62c22d13ac622c82d66011d36915c69c6e88f704-features -f /tmp/devcontainercli-jweirich/container-features/0.51.1-1695165121132/Dockerfile.extended /tmp/devcontainercli-jweirich/empty-folder
[2023-09-19T23:15:28.303Z] Error: Command failed: docker buildx build --load --build-context dev_containers_feature_content_source=/tmp/devcontainercli-jweirich/container-features/0.51.1-1695165121132 --build-arg _DEV_CONTAINERS_BASE_IMAGE=mcr.microsoft.com/devcontainers/base:ubuntu --build-arg _DEV_CONTAINERS_IMAGE_USER=root --build-arg _DEV_CONTAINERS_FEATURE_CONTENT_SOURCE=dev_container_feature_content_temp --target dev_containers_target_stage -t vsc-jenkins-ec2-terraform-74663f5398b6bdab6d4d0b2e62c22d13ac622c82d66011d36915c69c6e88f704-features -f /tmp/devcontainercli-jweirich/container-features/0.51.1-1695165121132/Dockerfile.extended /tmp/devcontainercli-jweirich/empty-folder
[2023-09-19T23:15:28.303Z]     at gAA (/home/jweirich/.vscode-remote-containers/dist/dev-containers-cli-0.309.0/dist/spec-node/devContainersSpecCLI.js:462:1066)
[2023-09-19T23:15:28.304Z]     at FK (/home/jweirich/.vscode-remote-containers/dist/dev-containers-cli-0.309.0/dist/spec-node/devContainersSpecCLI.js:462:1002)
[2023-09-19T23:15:28.304Z]     at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
[2023-09-19T23:15:28.304Z]     at async FAA (/home/jweirich/.vscode-remote-containers/dist/dev-containers-cli-0.309.0/dist/spec-node/devContainersSpecCLI.js:479:3660)
[2023-09-19T23:15:28.305Z]     at async GC (/home/jweirich/.vscode-remote-containers/dist/dev-containers-cli-0.309.0/dist/spec-node/devContainersSpecCLI.js:479:4775)
[2023-09-19T23:15:28.306Z]     at async VeA (/home/jweirich/.vscode-remote-containers/dist/dev-containers-cli-0.309.0/dist/spec-node/devContainersSpecCLI.js:611:12240)
[2023-09-19T23:15:28.306Z]     at async WeA (/home/jweirich/.vscode-remote-containers/dist/dev-containers-cli-0.309.0/dist/spec-node/devContainersSpecCLI.js:611:11981)
[2023-09-19T23:15:28.309Z] Stop (207812 ms): Run in Host: /home/jweirich/.vscode-remote-containers/bin/abd2f3db4bdb28f9e95536dfa84d8479f1eb312d/node /home/jweirich/.vscode-remote-containers/dist/dev-containers-cli-0.309.0/dist/spec-node/devContainersSpecCLI.js up --container-session-data-folder /tmp/devcontainers-c95a211a-c45a-4493-97d7-8b23d42a8f9c1695165118367 --workspace-folder /home/jweirich/projects/jenkins-ec2-terraform --workspace-mount-consistency cached --id-label devcontainer.local_folder=\\wsl.localhost\Ubuntu\home\jweirich\projects\jenkins-ec2-terraform --id-label devcontainer.config_file=/home/jweirich/projects/jenkins-ec2-terraform/.devcontainer/devcontainer.json --log-level debug --log-format json --config /home/jweirich/projects/jenkins-ec2-terraform/.devcontainer/devcontainer.json --default-user-env-probe loginInteractiveShell --mount type=volume,source=vscode,target=/vscode,external=true --mount type=bind,source=/run/user/1000/wayland-0,target=/tmp/vscode-wayland-5d0007d5-add3-443b-ab87-573eddae4a8c.sock --skip-post-create --update-remote-user-uid-default on --mount-workspace-git-root true
[2023-09-19T23:15:28.310Z] Exit code 1
[2023-09-19T23:15:28.323Z] Command failed: /home/jweirich/.vscode-remote-containers/bin/abd2f3db4bdb28f9e95536dfa84d8479f1eb312d/node /home/jweirich/.vscode-remote-containers/dist/dev-containers-cli-0.309.0/dist/spec-node/devContainersSpecCLI.js up --container-session-data-folder /tmp/devcontainers-c95a211a-c45a-4493-97d7-8b23d42a8f9c1695165118367 --workspace-folder /home/jweirich/projects/jenkins-ec2-terraform --workspace-mount-consistency cached --id-label devcontainer.local_folder=\\wsl.localhost\Ubuntu\home\jweirich\projects\jenkins-ec2-terraform --id-label devcontainer.config_file=/home/jweirich/projects/jenkins-ec2-terraform/.devcontainer/devcontainer.json --log-level debug --log-format json --config /home/jweirich/projects/jenkins-ec2-terraform/.devcontainer/devcontainer.json --default-user-env-probe loginInteractiveShell --mount type=volume,source=vscode,target=/vscode,external=true --mount type=bind,source=/run/user/1000/wayland-0,target=/tmp/vscode-wayland-5d0007d5-add3-443b-ab87-573eddae4a8c.sock --skip-post-create --update-remote-user-uid-default on --mount-workspace-git-root true
[2023-09-19T23:15:28.324Z] Exit code 1
[2023-09-19T23:16:21.898Z] Start: Run: wsl -d Ubuntu -e wslpath -u \\wsl.localhost\Ubuntu\home\jweirich\projects\jenkins-ec2-terraform
[2023-09-19T23:16:22.113Z] Stop (215 ms): Run: wsl -d Ubuntu -e wslpath -u \\wsl.localhost\Ubuntu\home\jweirich\projects\jenkins-ec2-terraform

[Ponjimon]

I'm getting the same results as @JDubbTX. Is there any way to properly investigate / debug this without having to use a network analyzer like Wireshark or mitmproxy?

Because it would probably help knowing exactly why the "server indicated a failure" or, more specifically, what failure was indicated. I don't know if there was a 404, a 400 or a 500 error, for example.

Manually searching the GPG key on the keyserver yields a successful result anyway...

[JDubbTX]

I'm getting the same results as @JDubbTX. Is there any way to properly investigate / debug this without having to use a network analyzer like Wireshark or mitmproxy?

Because it would probably help knowing exactly why the "server indicated a failure" or, more specifically, what failure was indicated. I don't know if there was a 404, a 400 or a 500 error, for example.

Manually searching the GPG key on the keyserver yields a successful result anyway...

Here is the line it is hanging on if that helps. I tried the other night putting it into my bash shell, substituting what I thought were correct values, and got the same hang, but didn't get any info out other than the same "gpg: keyserver receive failed: Server indicated a failure". Unfortunately I'm not too familiar with these commands - perhaps if I get time to try again I can try and get verbose output.

features/src/terraform/install.sh

Line 73 in 3a22c41

( echo "${keys}" | xargs -n 1 gpg -q ${keyring_args} --recv-keys) 2>&1 && gpg_ok="true"

[Ponjimon]

Well, this is interesting. Still trying to figure out why and how, but I tried testing it with the --keyserver flag.

So basically:

( echo "${keys}" | xargs -n 1 gpg -q ${keyring_args} --recv-keys --keyserver keyserver.ubuntu.com) 2>&1 && gpg_ok="true" 

and that fails. However, if I (within the devcontainer!) do nslookup keyserver.ubuntu.comand then use it's IPv4 address, it works.

( echo "${keys}" | xargs -n 1 gpg -q ${keyring_args} --recv-keys --keyserver 185.125.188.26) 2>&1 && gpg_ok="true" 

Is gpg internally using other DNS servers than the system or something like that? Because clearly, the DNS servers the host or the docker container is using, are working, otherwise I wouldn't have received anything from nslookup.