Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#80200 - [alacritty] missing public gpg key

Attached to Project: Arch Linux
Opened by trclst (trclst) - Wednesday, 08 November 2023, 16:54 GMT
Last edited by Daniel M. Capella (polyzen) - Wednesday, 08 November 2023, 19:14 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To No-one
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

git clone https://gitlab.archlinux.org/archlinux/packaging/packages/alacritty
cd alacritty
gpg --import keys/pgp/4DAA67A9EA8B91FCC15B699C85CDAE3C164BA7B4.asc
gpg --import keys/pgp/A56EF308A9F1256C25ACA3807EA8F8B94622A6A9.asc
makepkg -fscC
alacritty git repo ... FAILED (unknown public key E803FF4B6CE71BCB)


Additional info:
* pkgbuild version: https://gitlab.archlinux.org/archlinux/packaging/packages/alacritty/-/commit/893b81ea0f8291be71135200a4b1409783ab6ce3
* pkgbuild upstream url: https://github.com/alacritty/alacritty/releases/tag/v0.12.3

The missing key with the git tag was signed:
kchibisov
Kirill Chibisov
GPG key ID: E803FF4B6CE71BCB

How could the archlinux package be built in the first place?
Was the verification simply skipped?

Solution:
gpg --recv-keys E803FF4B6CE71BCB
gpg --export --armor E803FF4B6CE71BCB > E803FF4B6CE71BCB.asc
This task depends upon

Closed by  Daniel M. Capella (polyzen)
Wednesday, 08 November 2023, 19:14 GMT
Reason for closing:  None
Additional comments about closing:  https://gitlab.archlinux.org/archlinux/d evtools/-/issues/93
Comment by Doug Newgard (Scimmia) - Wednesday, 08 November 2023, 17:08 GMT
The key being in the repo is convenience, nothing more.
Comment by loqs (loqs) - Wednesday, 08 November 2023, 17:09 GMT
https://gitlab.archlinux.org/archlinux/devtools/-/issues/93

Loading...