Comments: Mitigate and prevent GPGME error when syncing your system

[linux-aarhus]

@alven

So the issue comes only after we added Sublime’s text or merge apps repos into ours /etc/pacman.conf you qouted [sublime-text] \n Server = ... and that produces brand new db of sublime-text.db file, right?

No.

@alven

OK, and alongside with other unsigned databases produces the situation of issue, and your tutorial article tells how to fix that issue, right?

No

@alven

SigLevel = Required DatabaseNever will be safe to use, right?

Yes - but it well not be default. I am certain you are aware that all kinds of stories are spread about Manjaro - if the default was changed to accomodate your wish - it would just add another item to the FUD machine.

@alven

what the reason to have default DatabaseOptional if not to use database signatures at all?

Because it allows for future signing of databases - without requiring several 100000s of users to change their pacman.conf - should it become important.

@alven

Why not to use AUR and to chose a bit harder ways?

Answered by @Yochanan - it is the official way to keep up-to-date with 2 outstanding developoer applications (I have been a licensend user of Sublime Text predating my Manjaro usage) and supporting Sublime Merge was a nobrainer - it is better than any git gui I have previously used.

---

I have a very clear understanding of how and why this issue comes up from time to time as I have been troubleshooting the issue when I was a mirror provider. The troubleshooting process is documented in the following issue I created when investigating.

Pacman looking for database signature files

I have a weird issue with pacman and database signatures. The default pacman.conf reads (partially) - in fact I cannot remember it has been different # By default, pacman accepts packages signed by keys that its local keyring # trusts (see pacman-key and its man page), as well as unsigned packages. SigLevel = Optional DatabaseOptional LocalFileSigLevel = Optional #RemoteFileSigLevel = Required In the repo there is no .db.sig file so the file cannot be downloaded from the mirror but for som…