fhins
12 September 2020 17:27
1
I’m installing Dropbox on a new computer via AUR, and getting a signature could not be verified error. I tried a few things, but it didn’t work. How can I fix this?
Here’s the entire message:
Verifying source file signatures with gpg…
dropbox-lnx.x86_64-104.4.175.tar.gz … FAILED (unknown public key FC918B335044912E)
==> ERROR: One or more PGP signatures could not be verified!
bill_t
12 September 2020 17:32
2
Follow the instructions provided in the pinned comment in the AUR page of dropbox
here:
https://aur.archlinux.org/packages/dropbox#pinned-676597
Run the mentioned command to import the key and then try to install the package again.
More information about the error you’re getting can be found here:
Summary
If you get
llvm-5.0.1.src.tar.xz … FAILED (unknown public key 8F0871F202119294)
then
gpg --recv-key 8F0871F202119294
and try again. Enter the key ID as appropriate.
Detail
Many AUR packages contain lines to enable validating downloaded packages though the use of a PGP key. This establishes a level of trust between the software author and anyone who downloads the software - if you trust the key, and the download validates against the key, then you can trust the download.
Pacman has …
fhins
12 September 2020 17:43
3
I received this error when I entered this key in the link:
gpg --recv-keys 1C61A2656FB57B7E4DE0F4C1FC918B335044912E
“gpg: keyserver receive failed: General error”
xabbu
12 September 2020 17:47
4
Use a different Keyserver. It is described on the same page that @bill_t already linked in the previous post.
1 Like
Lolix
12 September 2020 17:50
5
Same as here:
Using gpg --recv-keys 1C61A2656FB57B7E4DE0F4C1FC918B335044912E failed for me too, while downloading the .asc worked
wget https://linux.dropbox.com/fedora/rpm-public-key.asc
gpg --import rpm-public-key.asc
wget https://linux.dropbox.com/fedora/rpm-public-key.asc
gpg --import rpm-public-key.asc
Moving to AUR subcategory and removing kde flag
1 Like
fhins
12 September 2020 18:21
6
That worked!
Thanks everyone,
fhins
12 September 2020 18:22
7
Any idea as to why Manjaro doesn’t make the “dropbox” an official repository since it’ so common?
xabbu
12 September 2020 18:24
8
Dropbox inc. does not allow it. The company prevents redistribution of the client.
1 Like
fhins
12 September 2020 18:38
9
Then how does KDE neon or Kubuntu get a way with it, as it’s available in discover?
Is it a flatpak version? You can install flatpak Dropbox on manjaro so maybe they use flatpak version
bill_t
12 September 2020 19:24
11
Dropbox was part of the community repo at some point, but was dropped to the AUR not only for the reason @xabbu mentioned above, but because it tries to auto-update by installing a binary in the user’s home directory.
See here the discussion:
Wow, I didn't know that at all. How REALLY BAD PRACTICE, Booooo 👎 ! This makes me want to stop maintaining this package inside our repos even more. Shall we drop it back to AUR, what do you guys think?
More information on how to prevent automatic updates can be found in the Arch Wiki:
https://wiki.archlinux.org/index.php/Dropbox#Prevent_automatic_updates
2 Likes
fhins
12 September 2020 20:26
12
I’m clear now. That make sense. Thanks for the info.
1 Like
system
Closed
15 September 2020 20:26
13
This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.