search

doctorfree / MusicPlayerPlus

Featureful ncurses based MPD client inspired by ncmpc with integration for Beets, spectrum visualization,Bandcamp/Soundcloud, asciimatics, cantata, and more
https://musicplayerplus.dev
MIT License
69 stars 1 forks source link

[BUG] Arch package installs using the *.zst release asset URL fail with missing signature #14

Closed doctorfree closed 1 year ago

doctorfree commented 1 year ago

MusicPlayerPlus 3 has moved some package installs to mppinit and these installs utilize the release asset URL. These installs fail with "package missing required signature". This issue is restricted to Arch Linux.

A workaround exists. The mpcplus, mpplus-essentia, and mpplus-bliss Arch packages must be downloaded and installed locally using pacman.

Alternatively, the MusicPlayerPlus package can be installed using the PKGBUILD in the Arch community repository which adds the signature to the keyring.

Distributed Arch *.zst packages somehow need to add the signature to the keyring.

doctorfree commented 1 year ago

Remote installation of Arch Linux packages in mppinit has been fixed in v3.0.1r1. In this release Arch packages are downloaded and installed locally, thus avoiding the signature check. Future releases should investigate signing and adding the signature to the key ring.