[arch-general] Pacman makepkg and signatures

Myra Nelson myra.nelson at hughes.net
Mon Oct 24 00:10:10 EDT 2011


Since I don't listen in on irc conversations and haven't picked up on
this being discussed on the mailing list, I thought I would go ahead
and ask a seemingly dumb question. When building a pacakge from core,
extra, or community with makepkg should I locate the signature key for
the source tarball and import it into the pacman-key database, or will
there be a mechanism for this in the future, or since the same package
is used by the devs is it completely unnecessry for me to worry about?
Obviously the build completes after issuing the warning about a
problem with signature verification and being sure you trust the
package so it's not a problem, I'm just trying to stay ahead of the
curve.

Myra
-- 
Life's fun when your sick and psychotic!


More information about the arch-general mailing list