Dropbox "One or more PGP signatures could not be verified"

[fhins]

I’m installing Dropbox on a new computer via AUR, and getting a signature could not be verified error. I tried a few things, but it didn’t work. How can I fix this?

Here’s the entire message:
Verifying source file signatures with gpg…
dropbox-lnx.x86_64-104.4.175.tar.gz … FAILED (unknown public key FC918B335044912E)
==> ERROR: One or more PGP signatures could not be verified!

[bill_t]

Follow the instructions provided in the pinned comment in the AUR page of dropbox here:
https://aur.archlinux.org/packages/dropbox#pinned-676597

Run the mentioned command to import the key and then try to install the package again.

More information about the error you’re getting can be found here:

AUR package fails to verify PGP/GPG key: “unknown public key”, “One or more PGP signatures could not be verified!”

Summary If you get llvm-5.0.1.src.tar.xz … FAILED (unknown public key 8F0871F202119294) then gpg --recv-key 8F0871F202119294 and try again. Enter the key ID as appropriate. Detail Many AUR packages contain lines to enable validating downloaded packages though the use of a PGP key. This establishes a level of trust between the software author and anyone who downloads the software - if you trust the key, and the download validates against the key, then you can trust the download. Pacman has …

[fhins]

I received this error when I entered this key in the link:
gpg --recv-keys 1C61A2656FB57B7E4DE0F4C1FC918B335044912E

“gpg: keyserver receive failed: General error”

[xabbu]

Use a different Keyserver. It is described on the same page that @bill_t already linked in the previous post.

[Lolix]

Same as here:

Dropbox and key problems

Using gpg --recv-keys 1C61A2656FB57B7E4DE0F4C1FC918B335044912E failed for me too, while downloading the .asc worked wget https://linux.dropbox.com/fedora/rpm-public-key.asc gpg --import rpm-public-key.asc

wget https://linux.dropbox.com/fedora/rpm-public-key.asc
gpg --import rpm-public-key.asc

---

Moving to AUR subcategory and removing kde flag

[fhins]

That worked!
Thanks everyone,

[fhins]

Any idea as to why Manjaro doesn’t make the “dropbox” an official repository since it’ so common?

[xabbu]

@fhins

make the “dropbox” an official repository since it’ so common?

Dropbox inc. does not allow it. The company prevents redistribution of the client.

[fhins]

Then how does KDE neon or Kubuntu get a way with it, as it’s available in discover?

[sawdoctor]

Is it a flatpak version? You can install flatpak Dropbox on manjaro so maybe they use flatpak version

[bill_t]

Dropbox was part of the community repo at some point, but was dropped to the AUR not only for the reason @xabbu mentioned above, but because it tries to auto-update by installing a binary in the user’s home directory.
See here the discussion:

Manjaro-specific packages which need an update

More information on how to prevent automatic updates can be found in the Arch Wiki:
https://wiki.archlinux.org/index.php/Dropbox#Prevent_automatic_updates

[fhins]

I’m clear now. That make sense. Thanks for the info.