AUR install is broken - Githubissues

y0ast commented 4 years ago

AUR install fails with:

:: Importing keys with gpg......
gpg: keyserver receive failed: No data
==> Error: Problem importing keys

Fix from: https://aur.archlinux.org/packages/wob/

gpg --keyserver keys.openpgp.org --receive-keys 5C6DA024DDE27178073EA103F4B432D5D67990E3

Not sure what causes the gpg import to fail, but it does.

eoli3n commented 4 years ago

+1

francma commented 4 years ago

I think that is how it is supposed to work. You don't have the PGP key which is used to sign the source files so it fails.

https://wiki.archlinux.org/index.php/Makepkg#Signature_checking

eoli3n commented 4 years ago

I confirm that we can't import the gpg key, as @y0ast showed you

❯ LANG=C trizen -S wob
:: Pulling AUR changes: wob

=>> Edit wob/PKGBUILD? [y/N]:

Repository      : AUR
Name            : wob
Version         : 0.8-1
Maintainer      : francma
URL             : https://github.com/francma/wob
AUR URL         : https://aur.archlinux.org/packages.php?ID=702848
License         : ISC
Votes           : 4
Popularity      : 0.065%
Installed       : No
Out Of Date     : No
Depends On      : wayland
Make Deps       : meson
                  wayland-protocols
                  scdoc
Check Deps      : None
Optional Deps   : None
Provides        : wob
Conflicts With  : wob
Replaces        : None
Package Base    : wob
Last Update     : Sun Mar  1 12:38:29 2020
Description     : A lightweight overlay volume/backlight/progress/anything bar for Wayland

==> Making package: wob 0.8-1 (Wed May  6 23:34:57 2020)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Found wob-0.8.tar.gz
  -> Found wob-0.8.tar.gz.sig
==> Validating source files with sha512sums...
    wob-0.8.tar.gz ... Passed
    wob-0.8.tar.gz.sig ... Skipped
==> Verifying source file signatures with gpg...
    wob-0.8.tar.gz ... FAILED (unknown public key F4B432D5D67990E3)
==> ERROR: One or more PGP signatures could not be verified!
:: Unable to build wob - makepkg exited with code: 1
=>> Try again? [y/N]:
=>> Exit now? [Y/n]:

❯ LANG=C gpg --recv-keys F4B432D5D67990E3
gpg: keyserver receive failed: No data

francma commented 4 years ago

What keyservers are you using?

eoli3n commented 4 years ago

❯ grep '^keyserver' ~/.gnupg/gpg.conf
keyserver hkp://keys.gnupg.net

francma commented 4 years ago

I've sent key to keys.gnupg.net, it should be working now.

Thanks :slightly_smiling_face:

y0ast commented 4 years ago

Does not seem to be working just yet:

$ gpg --keyserver keys.gnupg.net --receive-keys 5C6DA024DDE27178073EA103F4B432D5D67990E3
gpg: keyserver receive failed: No data

This is the default in arch:

$ gpg -v --receive-keys 5C6DA024DDE27178073EA103F4B432D5D67990E3
gpg: data source: https://82.148.229.254:443
gpg: keyserver receive failed: No data

Many users will install your package using yay or equivalents, which automatically imports (after asking...) the pgp key for AUR packages.

francma commented 4 years ago

Hmm, this time I used their web upload form instead of gpg --send-keys. Seems to be working in clean docker image.

[root@703454d6ca40 /]# gpg --keyserver keys.gnupg.net --receive-keys 5C6DA024DDE27178073EA103F4B432D5D67990E3
gpg: directory '/root/.gnupg' created
gpg: keybox '/root/.gnupg/pubring.kbx' created
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key F4B432D5D67990E3: public key "Martin Franc <me@martinfranc.eu>" imported
gpg: Total number processed: 1
gpg:               imported: 1
[root@703454d6ca40 /]# gpg --receive-keys F4B432D5D67990E3
gpg: key F4B432D5D67990E3: "Martin Franc <me@martinfranc.eu>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1

http://keys.gnupg.net/pks/lookup?search=0x5C6DA024DDE27178073EA103F4B432D5D67990E3&fingerprint=on&op=index

eoli3n commented 4 years ago

It worked for me, thx

y0ast commented 4 years ago

yay now installs wob and adds the key without complaining! :+1:

Thanks @francma

francma / wob

AUR install is broken #37