Re: Is including GPG keys in an AUR package for verifying sources a good idea?

2024-02-09 Thread LinuxSquare GMAIL
Hi, Wilhelm I'm also using arch podman containers on an alpine host to build my packages, although using the traditional way by using makepkg and not an aur helper. The building process has been somehow automated by a script, which just runs some makepkg commands inside the arch-container.

Re: Is including GPG keys in an AUR package for verifying sources a good idea?

2024-02-09 Thread Kusoneko
Feb 9, 2024 12:25:02 Wilhelm Schuster : > Hi, Hi, > I maintain the AUR package for wget2 [0] (which has `validgpgkeys()` > populated) and have recently been contacted by a user that has trouble > with GPG signature verification when building the package in a Docker > container (using aurutils

Is including GPG keys in an AUR package for verifying sources a good idea?

2024-02-09 Thread Wilhelm Schuster
Hi, I maintain the AUR package for wget2 [0] (which has `validgpgkeys()` populated) and have recently been contacted by a user that has trouble with GPG signature verification when building the package in a Docker container (using aurutils apparently). Their first suggestion was for me to drop