[aur-general] validpgpkeys

Ralf Mardorf ralf.mardorf at alice-dsl.net
Mon Dec 12 08:05:36 UTC 2016

On Mon, 12 Dec 2016 08:56:55 +0100, Ralf Mardorf wrote:
>On Sun, 11 Dec 2016 13:54:08 -0600, Doug Newgard wrote:
>>No, there is no reason to avoid it. The argument that people don't
>>understand isn't a valid one with Arch.  
>Full ACK.
>If they want to use a helper without taking care about anything on
>their own, they could configure their helper to skip the PGP check.
>At least yaourt provides an option.
>$ man yaourtrc | grep MAKEPKG -A1
>       MAKEPKG="makepkg"
>           Specify the makepkg binary to use with yaourt
>I don't know if it's possible to use
>       MAKEPKG="makepkg --skippgpcheck"
>but at least using a wrapper
>       MAKEPKG="makepkg-skip-pgp-chek-wrapper"
>would be possible.

Let alone that a makepkg wrapper skript could check the PKGBUILD and
download all required keys automatically. This doesn't require
programming skills, just a simple script. I'm against downloading keys
automatically, but this perhaps would be better, than to skip PGP

More information about the aur-general mailing list