I tried to use Pacman to install Spotify from AUR, which has worked fine for other applications (Minecraft for example). Firstly, I did git clone https://aur.archlinux.org/spotify.git
, which worked fine. Then, I cded to the directory it installed to. I tried to do makepkg
, but it gave me an error (“One or more PGP signatures could not be verified!”) Here is the full output it gave me:
~/spotify >>> makepkg ±[●][master]
==> Making package: spotify 1:1.1.42.622-2 (Mon 26 Oct 2020 11:58:04 AM EDT)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
-> Found spotify.protocol
-> Found LICENSE
-> Found spotify-1.1.42.622-Release
-> Found spotify-1.1.42.622-Release.sig
-> Found spotify-1.1.42.622-x86_64.deb
-> Found spotify-1.1.42.622-x86_64-Packages
==> Validating source files with sha512sums...
spotify.protocol ... Passed
LICENSE ... Passed
spotify-1.1.42.622-Release ... Skipped
spotify-1.1.42.622-Release.sig ... Skipped
==> Validating source_x86_64 files with sha512sums...
spotify-1.1.42.622-x86_64.deb ... Passed
spotify-1.1.42.622-x86_64-Packages ... Passed
==> Verifying source file signatures with gpg...
spotify-1.1.42.622-Release ... FAILED (unknown public key D1742AD60D811D58)
==> ERROR: One or more PGP signatures could not be verified!
After some Googling, I found that this seems to be a pretty common issue, possibly stemming from Spotify having multiple pubkeys. Some people, including Manjaro users, seem to have been able to fix this by using
wgetto install the pubkeys, but I cannot for some reason. A thread on the Arch forums is where I got most of my information about the issue. The last poster before the thread was closed seems to have fixed it using
wgetpiped to GPG importing, and I copy-pasted their command, then tried
makepkgagain, but it still did not work. Since I cannot link the thread, here is the command they used.
curl -sS https://download.spotify.com/debian/pubkey.gpg | gpg --import -`
Does anyone have any suggestions or ideas as to what I’m doing wrong? Thank you!