Arch Linux User Repository

# Bug reports can be filed at https://bugs.square-r00t.net/index.php?project=3
# News updates for packages can be followed at https://devblog.square-r00t.net

(If you want an RSS-feed only pertaining to my AUR packages, you can subscribe to https://devblog.square-r00t.net/rss/?category=aur in your favourite RSS reader.)

Note that you should still use the AUR web interface for flagging packages as out-of-date if a new version is released; the aforementioned bug tracker is to aid in issues with building/packaging/the PKGBUILD formats/etc. specifically.

GPG signature "errors" are explained here:
https://devblog.square-r00t.net/articles/a-note-on-using-gpg-signatures-in-pkgbuilds

Please read; it's not a bug.


Thanks!

ArthurBorsboom-

This is not an error of this package. This is your packaging wrapper/AUR helper.

[bts@cylon python-pyqrcode]$ grep -- '--pkg' *
[bts@cylon python-pyqrcode]$

note the error message:

makepkg: invalid option '--pkg' ==> ERROR: Makepkg was unable to build python-pyqrcode.

that means the error is in the makepkg command. that's something executed by you on your machine, not anything having to do with me.

makepkg: invalid option '--pkg' ==> ERROR: Makepkg was unable to build python-pyqrcode.

strongly disagree.

bts@archdev:~$ which yaourt which: no yaourt in (/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/bin/site_perl:/usr/bin/vendor_perl:/usr/bin/core_perl) 1 bts@archdev:~$ [ -f /etc/yaourtrc ] || echo "No yaourtrc" && curl -sL https://aur.archlinux.org/cgit/aur.git/snapshot/yaourt.tar.gz | tar -xzf - && cd yaourt && makepkg > /dev/null 2>&1 && echo "yaourt built successfully" No yaourtrc yaourt built successfully bts@archdev:~/yaourt$ sudo pacman -U --noconfirm yaourt-1.9-1-any.pkg.tar.xz [sudo] password for bts: loading packages... resolving dependencies... looking for conflicting packages...

Package (1) New Version Net Change

yaourt 1.9-1 0.53 MiB

Total Installed Size: 0.53 MiB

:: Proceed with installation? [Y/n] (1/1) checking keys in keyring [########################################################################################] 100% (1/1) checking package integrity [########################################################################################] 100% (1/1) loading package files [########################################################################################] 100% (1/1) checking for file conflicts [########################################################################################] 100% (1/1) checking available disk space [########################################################################################] 100% :: Processing package changes... (1/1) installing yaourt [########################################################################################] 100% Optional dependencies for yaourt aurvote: vote for favorite packages from AUR customizepkg: automatically modify PKGBUILD during install/upgrade [installed] rsync: retrieve PKGBUILD from official repositories [installed] :: Running post-transaction hooks... (1/1) Arming ConditionNeedsUpdate... bts@archdev:~/yaourt$ gpg -k bts@archdev:~/yaourt$ gpg --recv-key 8C004C2F93481F6B gpg: key 8C004C2F93481F6B: 3 duplicate signatures removed gpg: key 8C004C2F93481F6B: 63 signatures not checked due to missing keys gpg: key 8C004C2F93481F6B: public key "Brent Timothy Saner brent.saner@gmail.com" imported gpg: no ultimately trusted keys found gpg: Total number processed: 1 gpg: imported: 1 bts@archdev:~/yaourt$ sudo sh -c "echo EDITFILES=0 >> /etc/yaourtrc" bts@archdev:~/yaourt$ yaourt -S --noconfirm python-pyqrcode > /dev/null 2>&1 && python -c "import pyqrcode" && echo "See? Works fine." See? Works fine.

EDIT: wow, that got mangled.

https://pastebin.com/QHLqDQTs

As shown, it installs just fine simply by importing the key.

Check your configuration and that you don't have a broken gpg-agent, a broken keyring, or a broken package manager.

EDIT2:

hah, nevermind- just saw your edit. glad it's working!

Ah got it, my ~/gpg/trustdb.gpg was corrupted. The error message was only shown when I ran gpg --verify PyQRCode-1.2.1.tar.gz.sig manually.

As there were no keys in it anyways, I just deleted it, ran gpg --recv-keys again, and it's working now.

No, still doesn't work. git cloning and running makepgk doesn't work either...

@nilsw-

AH, so, I don't know if it matters, but --recv isn't actually a gpg command.

--recv-key, however, is.

even weirder, is it does seem to have fetched the correct key (by the way, you oughtn't need to specify an explicit keyserver these days).

i tried reproducing with a freshly-installed yaourt and while i can reproduce the initial issue, when i run:

gpg --recv-key 8C004C2F93481F6B

as the non-root user i'm running yaourt as and then run the yaourt command to install it (yaourt -S python-pyqrcode), it works fine for me.

I don't believe yaourt runs it as anybody else (no yaourt user on my system, no sudo-prompt, and all yaourt files in /tmp/ are owned by me)

@nilsw -

did you do the gpg command as the user yaourt runs makepkg as or as your own user?

$ LANG=en_US gpg --keyserver pool.sks-keyservers.net --recv 8C004C2F93481F6B
gpg: key 8C004C2F93481F6B: 3 duplicate signatures removed
gpg: key 8C004C2F93481F6B: 63 signatures not checked due to missing keys
gpg: key 8C004C2F93481F6B: "Brent Timothy Saner <brent.saner@gmail.com>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1

and then

$ LANG=en_US yaourt -S python2-pyqrcode
[...]
==> Building and installing package
==> Making package: python-pyqrcode 1.2.1-4 (Sun Feb  4 11:01:04 CET 2018)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
-> Downloading PyQRCode-1.2.1.tar.gz...
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                             Dload  Upload   Total   Spent    Left  Speed
0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100 36989  100 36989    0     0    99k      0 --:--:-- --:--:-- --:--:--  950k
-> Found LICENSE
-> Found PyQRCode-1.2.1.tar.gz.sig
-> Found LICENSE.sig
==> Validating source files with sha512sums...
PyQRCode-1.2.1.tar.gz ... Passed
LICENSE ... Passed
PyQRCode-1.2.1.tar.gz.sig ... Skipped
LICENSE.sig ... Skipped
==> Verifying source file signatures with gpg...
PyQRCode-1.2.1.tar.gz ... FAILED
LICENSE ... FAILED
==> ERROR: One or more PGP signatures could not be verified!
==> ERROR: Makepkg was unable to build python-pyqrcode.

@nilsw can you copy-paste them in here?