Arch Linux

keepitsimpleengineer

Member

From: San Joaquin Valley, CA

Registered: 2012-06-25

Posts: 382

[SOLVED] PGP signature fail with makepkg with AUR packages

Note: recent '/home' directory restore had some files missing

gpg reports key "not changed"

[--ljohnson{11:11:45}qpdfview]$ makepkg -i
==> Making package: qpdfview 0.5.0-2 (Tue 20 Jun 2023 11:20:21 AM PDT)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Found qpdfview-0.5.tar.gz
  -> Found qpdfview-0.5.tar.gz.asc
==> Validating source files with sha512sums...
    qpdfview-0.5.tar.gz ... Passed
    qpdfview-0.5.tar.gz.asc ... Skipped
==> Verifying source file signatures with gpg...
    qpdfview-0.5.tar.gz ... FAILED (unknown public key F4928C4DD24D4DF8)
==> ERROR: One or more PGP signatures could not be verified!
[--ljohnson{11:20:29}qpdfview]$ sudo gpg --recv-keys  F4928C4DD24D4DF8
gpg: key F4928C4DD24D4DF8: "Adam Reichold <adam.reichold@t-online.de>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1

I am lost when attempting to debug this anomaly.

Also happens with https://aur.archlinux.org/spotify.git

Last edited by keepitsimpleengineer (2023-06-20 23:39:04)

---

Al Einstein: "Man soll die Dinge so einfach machen wie möglich ~ aber nicht einfacher." (Things should be as simple as possible ~ but not too simple.) ~ Al (Einstein) war ein Cousin von Albert, "Al" ist die Abkürzung für Aloysius

loqs

Member

Registered: 2014-03-06

Posts: 18,954

Re: [SOLVED] PGP signature fail with makepkg with AUR packages

sudo gpg --recv-keys  F4928C4DD24D4DF8

Which users keyring does that add the key to?  Is that the same user you are running makepkg as?
Edit:
https://bbs.archlinux.org/viewtopic.php?id=285664

Last edited by loqs (2023-06-20 19:14:32)

keepitsimpleengineer

Member

From: San Joaquin Valley, CA

Registered: 2012-06-25

Posts: 382

Re: [SOLVED] PGP signature fail with makepkg with AUR packages

The solution is the same as in solution at https://bbs.archlinux.org/viewtopic.php?id=285664 .

Thanks loqs for the gentle reminder, at 80 years of age memory slips.

It seems that deleting '~/.gnupg' for each use of makepkg in aur.linux.org updates will be required.

---

Al Einstein: "Man soll die Dinge so einfach machen wie möglich ~ aber nicht einfacher." (Things should be as simple as possible ~ but not too simple.) ~ Al (Einstein) war ein Cousin von Albert, "Al" ist die Abkürzung für Aloysius

V1del

Forum Moderator

Registered: 2012-10-16

Posts: 25,245

Re: [SOLVED] PGP signature fail with makepkg with AUR packages

You can probably avoid that by not running gpgp --recv-keys with sudo in the first place.

keepitsimpleengineer

Member

From: San Joaquin Valley, CA

Registered: 2012-06-25

Posts: 382

Re: [SOLVED] PGP signature fail with makepkg with AUR packages

VIdel...

Since I no longer run

gpgp --recv-keys

as superuser and deleting '~/.gnupg' for each use of makepkg is still required, is there another way of avoiding this?

Thx

---

Al Einstein: "Man soll die Dinge so einfach machen wie möglich ~ aber nicht einfacher." (Things should be as simple as possible ~ but not too simple.) ~ Al (Einstein) war ein Cousin von Albert, "Al" ist die Abkürzung für Aloysius

loqs

Member

Registered: 2014-03-06

Posts: 18,954

Re: [SOLVED] PGP signature fail with makepkg with AUR packages

deleting '~/.gnupg' for each use of makepkg is still required

Why is it required?