I installed the Rofi window switcher with pacman this morning on a clean install of Arch linux. During the install it paused and prompted me to import a PGP key as it was searching for keys. Is this legit? I’ve never seen this before with pacman. I was unable to find the developer’s name in Arch’s developer directory. I took a picture of the screen and attached the photo.

Screenshot of GPG prompt

Why did this happen?

  • Please don't paste text as images – Jeff Schaller Oct 29 '17 at 11:15
  • Hello. At the time I was doing a clean install and had no computer. I made that post with my iPhone. Furthermore, including the picture gave me a degree of comfort because my inquiry involved the name and email of an Arch maintainer. An image provided at least some form of a safety barrier. – justinnoor.io Oct 30 '17 at 16:14
  • Understood; it would have been a little typing test to re-type that GPG key. I've re-imported the photo; just keep in mind that photos aren't searchable, so it's hard for others to find out if they have the same problem as you did. (Or to be able to read the photo to answer the question). – Jeff Schaller Oct 30 '17 at 17:54

Morten was only recently elected as a Trusted User, so in order to install packages that he maintains in [community], you will need to add his key to the keyring.

In other words, what you are seeing is business as usual.

He has been added to the TU list on the website, where you can compare his key.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.