[arch-general] aur/solr: Unknown PGP key

Ralf Mardorf silver.bullet at zoho.com
Fri Jul 27 23:28:45 UTC 2018


On Fri, 2018-07-27 at 08:10 +0100, Ralph Corderoy wrote:
> Hi Ralf,
> 
> Eli wrote:
> > > It's a hint that not every user likes 'auto-key-retrieve', but
> > > instead only manually retrieve keys, if it makes sense to the user
> > > to retrieve a key.
> 
> Thanks, I found it on topic, given Peter explicitly mentioned the
> option, and very helpful.  I've added a note to the suggestion in
> https://wiki.archlinux.org/index.php/GnuPG#Use_a_keyserver

Thank you Ralph, for editing the Wiki.

> > > I don't see a valid reason, to e.g. retrieve the keys that belong to
> > > an unknown signature of an email send via a mailing list, just to
> > > get automatically keys when building something from AUR.
> 
> Me neither, but
> https://wiki.archlinux.org/index.php/Pacman/Package_signing doesn't
> suggest `auto-key-retrieve'.

I didn't read all related Wiki pages, but seemingly non, including 
https://wiki.archlinux.org/index.php/makepkg mention Eli's hint, to use

echo 'GNUPGHOME="$HOME"/.gnupg-makepkg' >> "$HOME"/.config/pacman/makepkg.conf

Fortunately the manpage does.

$ man makepkg | grep GNUPGHOME
       GNUPGHOME="/path/to/directory"

I'm short in time and apart from this I'm uncertain, if it's worth to
add this to the Arch Wiki.

Regards,
Ralf


More information about the arch-general mailing list