I'm trying to install
ncurses5-compat-libs on Arch Linux with
But I get this error:
==> ERROR: One or more PGP signatures could not be verified!
How can I fix it?
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It only takes a minute to sign up.Sign up to join this community
You should stick to a manual installation using
makepkg and understand how the compilation and installation process from the AUR works before using an AUR helper.
Anyway, you have to import the PGP signature of the package before you install it. You can install the package without verifying its PGP signature but you shouldn't do it. You can import the PGP signature of
ncurses5-compat-libs by using this command:
gpg --keyserver pgp.mit.edu --recv-keys F7E48EDB
makepkg man page and this article before installing another package from the AUR.
I would like to extend the answer a bit.
==> Verifying source file signatures with gpg... datamash-1.1.1.tar.gz ... FAILED (unknown public key 0A11B61D3657B901) ==> ERROR: One or more PGP signatures could not be verified! ==> ERROR: Makepkg was unable to build datamash.
Yes you need to add the key.
That won't work until you have created your own gpg key.
You only need to generate your own key once.
Then you can import the key that is holding up the build process.
gpg --recv-key 0A11B61D3657B901 gpg --lsign 0A11B61D3657B901
If you want to understand what is going on here is some reading
as well as the arch wiki.
It is also important to keep the
archlinux-keyring-package and the system up-to-date - especially
A not up-to-date
archlinux-keyring-package can cause PGP signatures to be missing and thus problems with the PGP signatures.
As a quick and dirty fix this was proposed on the archbang forum:
Warning: Following these instructions chould damage yours and others system with dangerous malware!
Installation without (!) integrity check:
packer -S --skipinteg <package>