Spotify Installation: Pubkey Issues?

I tried to use Pacman to install Spotify from AUR, which has worked fine for other applications (Minecraft for example). Firstly, I did git clone https://aur.archlinux.org/spotify.git, which worked fine. Then, I cded to the directory it installed to. I tried to do makepkg, but it gave me an error (“One or more PGP signatures could not be verified!”) Here is the full output it gave me:

 ~/spotify >>> makepkg                                              ±[●][master]
==> Making package: spotify 1:1.1.42.622-2 (Mon 26 Oct 2020 11:58:04 AM EDT)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Found spotify.protocol
  -> Found LICENSE
  -> Found spotify-1.1.42.622-Release
  -> Found spotify-1.1.42.622-Release.sig
  -> Found spotify-1.1.42.622-x86_64.deb
  -> Found spotify-1.1.42.622-x86_64-Packages
==> Validating source files with sha512sums...
    spotify.protocol ... Passed
    LICENSE ... Passed
    spotify-1.1.42.622-Release ... Skipped
    spotify-1.1.42.622-Release.sig ... Skipped
==> Validating source_x86_64 files with sha512sums...
    spotify-1.1.42.622-x86_64.deb ... Passed
    spotify-1.1.42.622-x86_64-Packages ... Passed
==> Verifying source file signatures with gpg...
    spotify-1.1.42.622-Release ... FAILED (unknown public key D1742AD60D811D58)
==> ERROR: One or more PGP signatures could not be verified!

After some Googling, I found that this seems to be a pretty common issue, possibly stemming from Spotify having multiple pubkeys. Some people, including Manjaro users, seem to have been able to fix this by usingwgetto install the pubkeys, but I cannot for some reason. A thread on the Arch forums is where I got most of my information about the issue. The last poster before the thread was closed seems to have fixed it usingwgetpiped to GPG importing, and I copy-pasted their command, then triedmakepkgagain, but it still did not work. Since I cannot link the thread, here is the command they used. curl -sS https://download.spotify.com/debian/pubkey.gpg | gpg --import -`
Does anyone have any suggestions or ideas as to what I’m doing wrong? Thank you!

If you check the AUR page of the Spotify package, you will see that you must do :

curl -sS https://download.spotify.com/debian/pubkey_0D811D58.gpg | gpg --import -

Tip : before googling, just look at the AUR pages on nthe Arch site. this is the one for Spotify :
https://aur.archlinux.org/packages/spotify

6 Likes

Thank you so much! I can’t believe I missed that!

2 Likes

Thanks for this!

For all the other people finding this topic: Also clear build data and cache for AUR in Pamac! I had to do so to make it work.

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.