Ubuntu 22.04-24.04 LTS: Server & Desktop - keyring failures with azcopy login (Not a duplicate)

[jmealo]

Which version of the AzCopy was used?

10.24.0

Which platform are you using? (ex: Windows, Mac, Linux)

• Ubuntu 24.04 Server
• Ubuntu 24.04 Desktop
• Ubuntu 22.04 Server

Last known working version: Ubuntu 20.04

What command did you run?

snap install azcli
keyctl session
azcopy login

What problem was encountered?

Failed to perform login command: 
failed to get keyring during saving token, operation not permitted

How can we reproduce the problem in the simplest way?

Try to use azcopy login on a fresh copy of Ubuntu 24.04 or Ubuntu 22.04.

Have you found a mitigation/solution?

None. I've tried everything, including the workarounds in:

• Azcopy login fails with failed to get keyring during saving token #1021 (comment)
• azcopy login/logout fails #452 (comment)

I tried directly installing azcopy binaries from Microsoft instead of using the snap package and that did not help.

I tried disabling AppArmor.

[jmealo]

I've tried this on two HP Z420 workstations and a Digital Ocean droplet. Same issue on all of them.

[jmealo]

Related to #1021 #452 but not duplicate. Issue still present with no workarounds.

[jmealo]

This does not happen on Ubuntu 20.04

[raimondasl]

I have the same issue in WSL2. I was told that possibly my keyring is broken and to run seahorse.
However, I get:

seahorse
seahorse-Message: ...: DNS-SD initialization failed: Daemon not running

seahorse popup GUI window says collection is empty.
So possibly it is a keyring issue, but I don't know if there's a way to fix it.

FWIW since my issue is on WSL, I just got Windows azcopy executable and that worked fine.

[andrew-aladjev]

Just installed azcli, tried azcopy login and I am here. Why does aws configure work and azcopy login not? What is Microsoft paying for?

[CIPop]

Same issue after updating today:

Repro on 2 separate machines: Azure VM and a local machine (both Ubuntu 22.04):

lsb_release -a
No LSB modules are available.
Distributor ID:	Ubuntu
Description:	Ubuntu 22.04.5 LTS
Release:	22.04
Codename:	jammy

azcopy version 10.30.1
INFO: azcopy 10.30.1: A newer version 10.31.0 is available to download

Worked perfectly yesterday before the update...

azcopy login

Failed to perform login command:
persistent storage isn't available due to error "couldn't get cache encryption key due to error \"permission denied\""

NOTE: If your credential was created in the last 5 minutes, please wait a few minutes and try again.

azcopy logout also fails:

Error: failed to perform logout command, failed to get keyring during removing cached token, key has been revoked
INFO: azcopy 10.30.1: A newer version 10.31.0 is available to download

Usage:
  azcopy logout [flags]

Flags:
  -h, --help   help for logout

Flags Applying to All Commands:
      --await-continue continue             Used when debugging, to tell AzCopy to await continue on stdin before starting any work.
                                             Assists with debugging AzCopy via attach-to-process
      --await-open open                     Used when debugging, to tell AzCopy to await open on stdin, after scanning but before opening the first file.
                                             Assists with testing cases around file modifications between scanning and usage
      --cap-mbps float                      Caps the transfer rate, in megabits per second.
                                             Moment-by-moment throughput might vary slightly from the cap.
                                             If this option is set to zero, or it is omitted, the throughput isn't capped.
      --debug-skip-files string             Used when debugging, to tell AzCopy to cancel the job midway.
                                             List of relative paths to skip in the STE.
      --log-level string                    Define the log verbosity for the log file,
                                             available levels: DEBUG(detailed trace), INFO(all requests/responses), WARNING(slow responses),
                                             ERROR(only failed requests), and NONE(no output logs). (default 'INFO'). (default "INFO")
      --output-level string                 Define the output verbosity. Available levels: essential, quiet. (default "default")
      --output-type string                  Format of the command's output. The choices include: text, json.
                                             The default value is 'text'. (default "text")
      --skip-version-check                  Do not perform the version check at startup.
                                            Intended for automation scenarios & airgapped use.
      --trusted-microsoft-suffixes string
                                            Specifies additional domain suffixes where Azure Active Directory login tokens may be sent.
                                            The default is '*.core.windows.net;*.core.chinacloudapi.cn;*.core.cloudapi.de;*.core.usgovcloudapi.net;*.storage.azure.net'.
                                             Any listed here are added to the default. For security, you should only put Microsoft Azure domains here.
                                             Separate multiple entries with semi-colons.


failed to perform logout command, failed to get keyring during removing cached token, key has been revoked

[CIPop]

Found a workaround for Ubuntu 22.04

1. Uninstall the APT package
2. On one of the machines (the Azure VM) I had to also sudo rm /usr/local/bin/azcopy for some reason.
3. Download latest DEB package (10.31.0) and install using dpkg -i
azcopy login now works.