You are not logged in.
- Topics: Active | Unanswered
#1 2013-01-29 02:15:28
- farseerfc
- Member
- From: Osaka
- Registered: 2013-01-29
- Posts: 20
- Website
Should we SyncFirst archlinux-keyring?
I was upgrading when pacman complained about having the wrong signature of some package (i3lock). I ignored that package then the upgrade went smoothly, then I noticed that it also upgraded archlinux-keyring. And then I do a upgrade once again, this time without any complain.
So it occurred to me that should we treat archlinux-keyring the same as pacman itself, i.e. put it in SyncFirst list in /etc/pacman.conf ?
Is it safe for a normal desktop user like me? Considering that I usually installed a lot of software from AUR without actually look deep into the source codes and PKGBUILD file (if everything seems good), I am not much concern about the security issue.
Or is it safe in general for most archlinux users?
Thank you.
Offline
#2 2013-01-29 04:54:25
- anonymous_user
- Member
- Registered: 2009-08-28
- Posts: 3,059
Re: Should we SyncFirst archlinux-keyring?
1. This won't help if your keys become outdated before a new archlinux-keyring package is released. However you can use pacman-key --refresh-keys.
2. I've read pacman 4.1 will do away with SyncFirst.
Offline
#3 2013-01-29 05:19:11
- Allan
- Pacman
- From: Brisbane, AU
- Registered: 2007-06-09
- Posts: 11,385
- Website
Re: Should we SyncFirst archlinux-keyring?
2. I've read pacman 4.1 will do away with SyncFirst.
Correct.
Offline
#4 2013-01-29 06:16:27
- farseerfc
- Member
- From: Osaka
- Registered: 2013-01-29
- Posts: 20
- Website
Re: Should we SyncFirst archlinux-keyring?
1. This won't help if your keys become outdated before a new archlinux-keyring package is released. However you can use pacman-key --refresh-keys.
2. I've read pacman 4.1 will do away with SyncFirst.
Thank you for your advice.
Do it mean that I should always try pacman-key --refresh-keys if I had a signature problem when upgrading?
Offline
#5 2013-01-29 06:19:54
- anonymous_user
- Member
- Registered: 2009-08-28
- Posts: 3,059
Re: Should we SyncFirst archlinux-keyring?
Its worth a shot. If it doesn't help, search first if anyone has reported it. Else submit a bug report.
Offline