andreyv / sbupdate

Generate and sign kernel images for UEFI Secure Boot on Arch Linux
GNU General Public License v3.0
225 stars 20 forks source link

Missing AUR keys #39

Closed robcollins55 closed 2 years ago

robcollins55 commented 3 years ago

Hi. With my dual-boot windows/archlinux machine I'm having to look into dealing with secure boot (with imminent windows 11 release almost upon us requiring secure boot) which has led me here to sbupdate. I'm having trouble installing sbupdate however..... Trying to install this via Pamac GUI ends with "sbupdate git repo ... FAILED (unknown public key F6532C30466E8B3E) ==> ERROR: One or more PGP signatures could not be verified! Failed to build sbupdate-git" Digging around on the net gave a few work around hints which I tried as follows. First I tried at the CLI : "curl https://github.com/andreyv.gpg | gpg --import" which returned : "gpg: key F6532C30466E8B3E: 2 signatures not checked due to missing keys". I then also tried "gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys F6532C30466E8B3E | gpg --import" which gave: gpg: key F6532C30466E8B3E: "Andrey Vihrov andrey.vihrov@gmail.com" gpg: Total number processed: 1 gpg: unchanged: 1 gpg: no valid OpenPGP data found. gpg: Total number processed: 0

All of these attempts seem to point to one thing - missing keys which seems to be a showstopper for building and installing. Can anyone help? Cheers.

andreyv commented 3 years ago

I think "2 signatures not checked due to missing keys" is not an error, and that they key was imported. The second command gives output not in the form gpg --import needs, and already shows gpg: unchanged: 1, meaning that the key exists.

Can you check with gpg --list-key F6532C30466E8B3E? It should display the imported key. It is ok if trust level is unknown.

robcollins55 commented 3 years ago

Believe me I've been trying with this for an hour trying different things which is the reason for gpg: unchanged: 1 :frowning_face: - my Arch Linux install is not finding keys: $ gpg --list-key F6532C30466E8B3E gpg: error reading key: No public key In addition to the Pamac GUI I have also tried Pamac and Paru at the CLI......results are as follows: Pamac CLI $ pamac checkupdates -a Your system is up-to-date. rob@hpelitebook850g2:~ $ pamac install sbupdate-git Warning: sbupdate-git is only available from AUR Preparing... Cloning sbupdate-git build files... Checking sbupdate-git dependencies... Resolving dependencies... Checking inter-conflicts... To build (1): sbupdate-git 0.r113.4e6d106-1 AUR Edit build files : [e] Apply transaction ? [e/y/N] y Building sbupdate-git... ==> Making package: sbupdate-git 0.r113.4e6d106-1 (Tue 29 Jun 2021 11:03:41) ==> Checking runtime dependencies... ==> Checking buildtime dependencies... ==> Retrieving sources... -> Updating sbupdate git repo...Fetching origin ==> Validating source files with sha256sums...sbupdate ... Skipped ==> Verifying source file signatures with gpg...sbupdate git repo ... FAILED (unknown public key F6532C30466E8B3E) ==> ERROR: One or more PGP signatures could not be verified! Error: Failed to build sbupdate-git Paru $ paru [sudo] password for rob:********* :: Synchronising package databases... core is up to date extra is up to date community is up to date multilib is up to date chaotic-aur 1181.6 KiB 369 KiB/s 00:03 [------------] 100% :: Starting full system upgrade... there is nothing to do :: Looking for AUR upgrades :: Looking for devel upgrades :: Packages not in the AUR: lib32-libnm-glib libalpm12 libnm-glib python2-astral there is nothing to do rob@hpelitebook850g2:~ $ paru install sbupdate-git no packages match search

andreyv commented 3 years ago

Sorry, I'm not sure what is happening here. I suggest to run gpg --import again and carefully check for any errors, and otherwise to ask in Arch Linux forums or the IRC channel.

robcollins55 commented 3 years ago

Thanks for your kind help Andrey. I'll definitely do as you suggest and perhaps chase this up in the comments section over at https://aur.archlinux.org/packages/sbupdate-git/ EDIT: I just tried the following again and this time it worked! Crazy world we live in ay? Thanks again curl https://github.com/andreyv.gpg | gpg --import pamac install sbupdate-git