[aur-general] validpgpkeys

[Ralf Mardorf]

On Mon, 12 Dec 2016 09:05:36 +0100, Ralf Mardorf wrote:
>On Mon, 12 Dec 2016 08:56:55 +0100, Ralf Mardorf wrote:
>>On Sun, 11 Dec 2016 13:54:08 -0600, Doug Newgard wrote:  
>>>No, there is no reason to avoid it. The argument that people don't
>>>understand isn't a valid one with Arch.    
>>
>>Full ACK.
>>
>>If they want to use a helper without taking care about anything on
>>their own, they could configure their helper to skip the PGP check.
>>
>>At least yaourt provides an option.
>>
>>$ man yaourtrc | grep MAKEPKG -A1
>>       MAKEPKG="makepkg"
>>           Specify the makepkg binary to use with yaourt
>>
>>I don't know if it's possible to use
>>
>>       MAKEPKG="makepkg --skippgpcheck"
>>
>>but at least using a wrapper
>>
>>       MAKEPKG="makepkg-skip-pgp-chek-wrapper"
>>
>>would be possible.  
>
>Let alone that a makepkg wrapper skript could check the PKGBUILD and
>download all required keys automatically. This doesn't require
>programming skills, just a simple script. I'm against downloading keys
>automatically, but this perhaps would be better, than to skip PGP
>verification.

PPS:

Or perhaps

.gnupg/gpg.conf

keyserver-options auto-key-retrieve