AUR package fails to verify PGP/GPG key: "One or more PGP signatures could not be verified!"

faq

#1

Summary

If you get

llvm-5.0.1.src.tar.xz … FAILED (unknown public key 8F0871F202119294)

then

gpg --recv-key 8F0871F202119294

and try again. Enter the key ID as appropriate.

Detail

Many AUR packages contain lines to enable validating downloaded packages though the use of a PGP key. This establishes a level of trust between the software author and anyone who downloads the software - if you trust the key, and the download validates against the key, then you can trust the download.

Pacman has its own keyring for system packages in the repos. This means pacman will trust Manjaro and Arch packager keys.

Your user starts with an empty keyring. That is, you trust noone’s keys. When you run makepkg you run it as your normal user, so if the PKGBUILD file contains a PGP key validation will fail because you don’t trust the key - you have to import the key into your keyring first.

This is easy. Open a terminal and type:

gpg --recv-key $KEYID

where $KEYID is the ID of the key you want to import.

Now when you run makepkg (directly or via your AUR helper) the downloaded file will be validated and all will be well.

If validation still fails then the file is invalid.


(SOLVED) ==> ERROR: One or more PGP signatures could not be verified!
Update Phonon und kdebase-runtime
How to install VMware workstation pro 14.1.2?
Ncurses5-compat-libs have some installation problems related to gpg public key
Install error L2TP plugin network manager
Cannot Install Gatling - PGP unknown public key
Pyqt4-common and python2-pyqt4 update 24-10-2018
Libevent-compat cannot be installed because of gpg failure
[Stable Update] 2018-06-01 - Kernels, Pamac, Pacman 5.1, QT 5.11, Deepin, Browsers
AUR update incomplete - PGP signature incorrect
Having trouble with Discord under Trizen
Install aurman with error output
[Testing Update] 2018-09-23 - Kernels, Gnome 3.30, Cinnamon, Deepin, LibreOffice
What it is this error? ICA-CLIENT
Amarok - problem with database
Unable to install Tor Browser - PGP signatures could not be verified
[SOLVED] Cant install application from aur because 'pgp key could not be verified' how can i install
Missing PGP Keys into Discord installation
Runescape NXT Client
Latest testing iso [Solved]
Unable to connect to any device via bluetooth, Manjaro 18 XFCE
#3

Hi and many many many thanks for your help! Solved!!!


#5

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.