Skip to content

Failure to verify gpg-signed source (SIGNATURE NOT FOUND) #966

Open
@kgizdov

Description

@kgizdov

For some reason, when I try to build a package with aura, I get this error, but when I build it directly with makepkg, everything works. Here's the log with aura:

$ sudo aura -Aua
aura :: Fetching package information...
aura :: Comparing package versions...
aura :: AUR packages to upgrade:
 youtube-dl             :: 2021.12.17-3     -> 2021.12.17-4
aura :: Determining dependencies...
aura :: AUR packages:
 youtube-dl
aura :: Proceed? [Y/n]
aura :: Saved package state.
aura :: Preparing build directories...
aura :: Building youtube-dl...
==> Making package: youtube-dl 2021.12.17-4 (Sun 05 Jan 2025 00:43:02 EET)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Found youtube-dl-2021.12.17.tar.gz
  -> Found youtube-dl-2021.12.17.tar.gz.sig
==> Validating source files with sha256sums...
    youtube-dl-2021.12.17.tar.gz ... Passed
    youtube-dl-2021.12.17.tar.gz.sig ... Skipped
==> Verifying source file signatures with gpg...
    youtube-dl-2021.12.17.tar.gz ... SIGNATURE NOT FOUND
FAILED
==> ERROR: One or more PGP signatures could not be verified!
aura :: Package failed to build, citing:

  makepkg failed.

aura :: Continue building other packages? [Y/n] n
aura :: Action cancelled.

However, with makepkg:

$ makepkg -fCod
==> Making package: youtube-dl 2021.12.17-4 (Sun 05 Jan 2025 00:43:24 EET)
==> WARNING: Skipping dependency checks.
==> Retrieving sources...
  -> Found youtube-dl-2021.12.17.tar.gz
  -> Found youtube-dl-2021.12.17.tar.gz.sig
==> Validating source files with sha256sums...
    youtube-dl-2021.12.17.tar.gz ... Passed
    youtube-dl-2021.12.17.tar.gz.sig ... Skipped
==> Verifying source file signatures with gpg...
    youtube-dl-2021.12.17.tar.gz ... Passed
==> Removing existing $srcdir/ directory...
==> Extracting sources...
  -> Extracting youtube-dl-2021.12.17.tar.gz with bsdtar
==> Starting prepare()...
==> Sources are ready.
$ makepkg -sri
==> Making package: youtube-dl 2021.12.17-4 (Sun 05 Jan 2025 00:43:31 EET)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Found youtube-dl-2021.12.17.tar.gz
  -> Found youtube-dl-2021.12.17.tar.gz.sig
==> Validating source files with sha256sums...
    youtube-dl-2021.12.17.tar.gz ... Passed
    youtube-dl-2021.12.17.tar.gz.sig ... Skipped
==> Verifying source file signatures with gpg...
    youtube-dl-2021.12.17.tar.gz ... Passed
==> Extracting sources...
  -> Extracting youtube-dl-2021.12.17.tar.gz with bsdtar
==> Starting prepare()...
==> Starting build()...
running build
running build_py
creating build/lib/youtube_dl
copying youtube_dl/utils.py -> build/lib/youtube_dl
...
==> Tidying install...
  -> Removing libtool files...
  -> Purging unwanted files...
  -> Removing static library files...
  -> Stripping unneeded symbols from binaries and libraries...
  -> Compressing man and info pages...
==> Checking for packaging issues...
==> Creating package "youtube-dl"...
  -> Generating .PKGINFO file...
  -> Generating .BUILDINFO file...
  -> Generating .MTREE file...
  -> Compressing package...
==> Leaving fakeroot environment.
==> Finished making: youtube-dl 2021.12.17-4 (Sun 05 Jan 2025 00:43:45 EET)
==> Installing package youtube-dl with pacman -U...

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions