Dropbox: package missing required signature

I am following this guide to update AUR packages. This has been working well until a few days ago when I got notified Dropbox needed an update and met package missing required signature.

I removed dropbox before trying again to same result.

Recent changes to my system include:

  1. GPG verification issue, running the script with the --aggressive option
  2. Removing and reinstalling pamac, reverting to default settings
  3. root tip on preventing GPGME errors - editing /etc/pacman.conf file and changing from SigLevel = Required DatabaseOptional to SigLevel = Required DatabaseNever

I don’t know if any of these steps may have interfered with the dropbox package signature, though.

Thankful for any pointers on how to get dropbox working again.

Ever thought about reading the AUR page?

https://aur.archlinux.org/packages/dropbox

Always do that first it will save you time posting here.

PS: the comments.

1 Like

Not sure what you expect me to find in the comments section?

By the way, gpg -k returns the correct key.

The exact solution to your issue, I guess. Maybe post your PKGBUILD it is probably wrong.

Does this mean the output from pamac build dropbox? If not, how do I “post my PKGBUILD”?

Let’s take a shortcut here, if you will:

yay -Syu dropbox

See if it works, if it does then you can remove the package, and explain exactly in details how you install dropbox, give every little details because you’re probably doing it wrong and you are missing files or instructions in your PKGBUILD file.

//EDIT: package builds properly with yay on my side.

  1. pamac is set to ignore AUR updates
  2. I am using this already mentioned script to check for AUR updates. When updates are found I do yay packagename in terminal (in this case yay dropbox) and usually that ‘just works’.

Currently, running yay dropbox or yay -Syu dropbox returns exactly the same:

:: Synchronizing package databases...
 core is up to date
 extra is up to date
 community is up to date
 multilib is up to date
:: Searching AUR for updates...
:: Searching databases for updates...
 -> sane: ignoring package upgrade (1.1.1-2 => 1.2.1-4)
 -> Packages not in AUR: libsidplay  manjaro-documentation-en  manjaro-firmware  muse-hub-bin  noto-fonts-compat  systemd-fsck-silent  webkit2gtk-5.0
 -> Flagged Out Of Date AUR Packages: megasync
 -> libpdfium-nojs: local (5790.r1.c739696a25-1) is newer than AUR (5735.r3.9505810f66-1)
:: 1 package to upgrade/install.
1  aur/dropbox   -> 178.4.4811-1
==> Packages to exclude: (eg: "1 2 3", "1-3", "^4" or repo name)
 -> Excluding packages may cause partial upgrades and break systems
==> 
AUR Explicit (1): dropbox-178.4.4811-1
:: PKGBUILD up to date, skipping download: dropbox
  1 dropbox                                  (Build Files Exist)
==> Packages to cleanBuild?
==> [N]one [A]ll [Ab]ort [I]nstalled [No]tInstalled or (1 2 3, 1-3, ^4)
==> 
  1 dropbox                                  (Build Files Exist)
==> Diffs to show?
==> [N]one [A]ll [Ab]ort [I]nstalled [No]tInstalled or (1 2 3, 1-3, ^4)
==> 
==> Making package: dropbox 178.4.4811-1 (sø. 30. juli 2023 kl. 13.01 +0200)
==> Retrieving sources...
  -> Found DropboxGlyph_Blue.svg
  -> Found terms.txt
  -> Found dropbox.service
  -> Found dropbox@.service
  -> Found dropbox-lnx.x86_64-178.4.4811.tar.gz
  -> Found dropbox-lnx.x86_64-178.4.4811.tar.gz.asc
==> Validating source files with sha256sums...
    DropboxGlyph_Blue.svg ... Passed
    terms.txt ... Passed
    dropbox.service ... Passed
    dropbox@.service ... Passed
==> Validating source_x86_64 files with sha256sums...
    dropbox-lnx.x86_64-178.4.4811.tar.gz ... Passed
    dropbox-lnx.x86_64-178.4.4811.tar.gz.asc ... Skipped
==> Verifying source file signatures with gpg...
    dropbox-lnx.x86_64-178.4.4811.tar.gz ... Passed
:: (1/1) Parsing SRCINFO: dropbox
pub   rsa2048 2010-02-11 [SC]
      1C61A2656FB57B7E4DE0F4C1FC918B335044912E
uid           [ unknown] Dropbox Automatic Signing Key <linux@dropbox.com>

==> Making package: dropbox 178.4.4811-1 (sø. 30. juli 2023 kl. 13.01 +0200)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Found DropboxGlyph_Blue.svg
  -> Found terms.txt
  -> Found dropbox.service
  -> Found dropbox@.service
  -> Found dropbox-lnx.x86_64-178.4.4811.tar.gz
  -> Found dropbox-lnx.x86_64-178.4.4811.tar.gz.asc
==> Validating source files with sha256sums...
    DropboxGlyph_Blue.svg ... Passed
    terms.txt ... Passed
    dropbox.service ... Passed
    dropbox@.service ... Passed
==> Validating source_x86_64 files with sha256sums...
    dropbox-lnx.x86_64-178.4.4811.tar.gz ... Passed
    dropbox-lnx.x86_64-178.4.4811.tar.gz.asc ... Skipped
==> Verifying source file signatures with gpg...
    dropbox-lnx.x86_64-178.4.4811.tar.gz ... Passed
==> Removing existing $srcdir/ directory...
==> Extracting sources...
  -> Extracting dropbox-lnx.x86_64-178.4.4811.tar.gz with bsdtar
==> Starting prepare()...
[dropbox]                         Generating desktop file... ok
==> Sources are ready.
 -> dropbox-178.4.4811-1 already made -- skipping build
==> Making package: dropbox 178.4.4811-1 (sø. 30. juli 2023 kl. 13.01 +0200)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> WARNING: Using existing $srcdir/ tree
==> Sources are ready.
loading packages...
error: '/home/user/.cache/yay/dropbox/dropbox-178.4.4811-1-x86_64.pkg.tar.zst': package missing required signature
 -> error installing: [/home/user/.cache/yay/dropbox/dropbox-178.4.4811-1-x86_64.pkg.tar.zst] - exit status 1

Do a CLEAN BUILD when it asks. See the result.

Same as before.

Also, I deleted /home/user/.cache/yay/dropbox/ in case the local copy was corrupted. No difference, signature still missing.

You’re missing files.

ls -al ~/.cache/yay/dropbox/

Might the “skipped” validation have some impact?

total 217468
drwxr-xr-x  3 user user      4096 juli  30 13:19 .
drwxr-xr-x 16 user user      4096 juli  30 13:13 ..
-rw-r--r--  1 user user 109125730 juli  30 13:19 dropbox-178.4.4811-1-x86_64.pkg.tar.zst
-rw-r--r--  1 user user       605 juli  30 13:13 DropboxGlyph_Blue.svg
-rw-r--r--  1 user user 113484884 juli  30 13:19 dropbox-lnx.x86_64-178.4.4811.tar.gz
-rw-r--r--  1 user user       488 juli  30 13:19 dropbox-lnx.x86_64-178.4.4811.tar.gz.asc
-rw-r--r--  1 user user       184 juli  30 13:13 dropbox.service
-rw-r--r--  1 user user       232 juli  30 13:13 dropbox@.service
drwxr-xr-x  8 user user      4096 juli  30 13:19 .git
-rw-r--r--  1 user user      2995 juli  30 13:13 PKGBUILD
-rw-r--r--  1 user user      1947 juli  30 13:13 .SRCINFO
-rw-r--r--  1 user user     20532 juli  30 13:13 terms.txt
-rwxr-xr-x  1 user user       253 juli  30 13:13 update.sh

No it just skips checking the integrity of the key file.

Wait, it is the ZST package that generates error… the built package, so back to your first post, you may have messed something in Pacman config maybe? I would suggest to reverse changes you made before building Dropbox broke.

1 Like

I did that (reversing step 3 in OP here), and dropbox installed without complaints. None of the GPGME errors I had before returned, either. Thanks a lot!

1 Like

My bad wasting time, I misread the build output initially.

Remember to use Manjaro unstable branch - thus avoiding dependency mismatch between Manjaro branches.

For the sake of testing (I was redirected here from a referenced topic) - there is no apparent issue with dropbox

16:01:59 Âą [fh@tiger] .../nest-misc/dropbox
[master] $ makepkg -s
==> Making package: dropbox 178.4.4811-1 (søn 30 jul 2023 16:02:04 CEST)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Installing missing dependencies...
[sudo] password for fh: 
resolving dependencies...
looking for conflicting packages...

Packages (1) gendesk-1.0.9-3

Total Download Size:   2,20 MiB
Total Installed Size:  6,40 MiB

:: Proceed with installation? [Y/n] 
:: Retrieving packages...
 gendesk-1.0.9-3-x86_64                  2,2 MiB  2,73 MiB/s 00:01 [------------------------------------] 100%
(1/1) checking keys in keyring                                     [------------------------------------] 100%
(1/1) checking package integrity                                   [------------------------------------] 100%
(1/1) loading package files                                        [------------------------------------] 100%
(1/1) checking for file conflicts                                  [------------------------------------] 100%
(1/1) checking available disk space                                [------------------------------------] 100%
:: Processing package changes...
(1/1) installing gendesk                                           [------------------------------------] 100%
:: Running post-transaction hooks...
(1/2) Arming ConditionNeedsUpdate...
(2/2) Refreshing PackageKit...
==> Retrieving sources...
  -> Found DropboxGlyph_Blue.svg
  -> Found terms.txt
  -> Found dropbox.service
  -> Found dropbox@.service
  -> Downloading dropbox-lnx.x86_64-178.4.4811.tar.gz...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  108M  100  108M    0     0  12.6M      0  0:00:08  0:00:08 --:--:-- 13.8M
  -> Downloading dropbox-lnx.x86_64-178.4.4811.tar.gz.asc...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   488  100   488    0     0  17134      0 --:--:-- --:--:-- --:--:-- 17428
==> Validating source files with sha256sums...
    DropboxGlyph_Blue.svg ... Passed
    terms.txt ... Passed
    dropbox.service ... Passed
    dropbox@.service ... Passed
==> Validating source_x86_64 files with sha256sums...
    dropbox-lnx.x86_64-178.4.4811.tar.gz ... Passed
    dropbox-lnx.x86_64-178.4.4811.tar.gz.asc ... Skipped
==> Verifying source file signatures with gpg...
    dropbox-lnx.x86_64-178.4.4811.tar.gz ... Passed
==> Extracting sources...
  -> Extracting dropbox-lnx.x86_64-178.4.4811.tar.gz with bsdtar
==> Starting prepare()...
[dropbox]                         Generating desktop file... ok
==> Entering fakeroot environment...
==> Starting package()...
==> Tidying install...
  -> Removing libtool files...
  -> Purging unwanted files...
  -> Removing static library files...
  -> Compressing man and info pages...
==> Checking for packaging issues...
==> Creating package "dropbox"...
  -> Generating .PKGINFO file...
  -> Generating .BUILDINFO file...
  -> Generating .MTREE file...
  -> Compressing package...
==> Leaving fakeroot environment.
==> Finished making: dropbox 178.4.4811-1 (søn 30 jul 2023 16:02:22 CEST)

Problem was he couldn’t install the built package of Dropbox because of the change he made in the Pacman configuration file. There is indeed no issue with the Dropbox AUR package itself.

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.