AUR install is broken about wob

[francma]

I've sent key to keys.gnupg.net, it should be working now.

Thanks 🙂

[y0ast]

yay now installs wob and adds the key without complaining! 👍

Thanks @francma

[eoli3n]

+1

[francma]

I think that is how it is supposed to work. You don't have the PGP key which is used to sign the source files so it fails.

https://wiki.archlinux.org/index.php/Makepkg#Signature_checking

[eoli3n]

I confirm that we can't import the gpg key, as @y0ast showed you

❯ LANG=C trizen -S wob
:: Pulling AUR changes: wob

=>> Edit wob/PKGBUILD? [y/N]:

Repository      : AUR
Name            : wob
Version         : 0.8-1
Maintainer      : francma
URL             : https://github.com/francma/wob
AUR URL         : https://aur.archlinux.org/packages.php?ID=702848
License         : ISC
Votes           : 4
Popularity      : 0.065%
Installed       : No
Out Of Date     : No
Depends On      : wayland
Make Deps       : meson
                  wayland-protocols
                  scdoc
Check Deps      : None
Optional Deps   : None
Provides        : wob
Conflicts With  : wob
Replaces        : None
Package Base    : wob
Last Update     : Sun Mar  1 12:38:29 2020
Description     : A lightweight overlay volume/backlight/progress/anything bar for Wayland

==> Making package: wob 0.8-1 (Wed May  6 23:34:57 2020)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Found wob-0.8.tar.gz
  -> Found wob-0.8.tar.gz.sig
==> Validating source files with sha512sums...
    wob-0.8.tar.gz ... Passed
    wob-0.8.tar.gz.sig ... Skipped
==> Verifying source file signatures with gpg...
    wob-0.8.tar.gz ... FAILED (unknown public key F4B432D5D67990E3)
==> ERROR: One or more PGP signatures could not be verified!
:: Unable to build wob - makepkg exited with code: 1
=>> Try again? [y/N]:
=>> Exit now? [Y/n]:

❯ LANG=C gpg --recv-keys F4B432D5D67990E3
gpg: keyserver receive failed: No data

[francma]

What keyservers are you using?

[eoli3n]

❯ grep '^keyserver' ~/.gnupg/gpg.conf
keyserver hkp://keys.gnupg.net

[y0ast]

Does not seem to be working just yet:

$ gpg --keyserver keys.gnupg.net --receive-keys 5C6DA024DDE27178073EA103F4B432D5D67990E3
gpg: keyserver receive failed: No data

This is the default in arch:

$ gpg -v --receive-keys 5C6DA024DDE27178073EA103F4B432D5D67990E3
gpg: data source: https://82.148.229.254:443
gpg: keyserver receive failed: No data

Many users will install your package using yay or equivalents, which automatically imports (after asking...) the pgp key for AUR packages.

[francma]

Hmm, this time I used their web upload form instead of gpg --send-keys. Seems to be working in clean docker image.

[root@703454d6ca40 /]# gpg --keyserver keys.gnupg.net --receive-keys 5C6DA024DDE27178073EA103F4B432D5D67990E3
gpg: directory '/root/.gnupg' created
gpg: keybox '/root/.gnupg/pubring.kbx' created
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key F4B432D5D67990E3: public key "Martin Franc <[email protected]>" imported
gpg: Total number processed: 1
gpg:               imported: 1
[root@703454d6ca40 /]# gpg --receive-keys F4B432D5D67990E3
gpg: key F4B432D5D67990E3: "Martin Franc <[email protected]>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1

http://keys.gnupg.net/pks/lookup?search=0x5C6DA024DDE27178073EA103F4B432D5D67990E3&fingerprint=on&op=index

[eoli3n]

It worked for me, thx