Hello,
A while ago I made a issue to request signed sources, this is now available. [1]
Could the package be updated to support this with the latest version, following official guidelines. [2]
Thank you,
Polarian
[1] https://github.com/Sapd/HeadsetControl/issues/318#issuecomment-2029818797
[2] https://rfc.archlinux.page/0011-store-source-signing-keys/
Pinned Comments
TheBill2001 commented on 2024-04-02 09:49 (UTC) (edited on 2024-04-06 11:21 (UTC) by TheBill2001)
The PGP public key can be found and downloaded from https://keys.openpgp.org using the name
Denis Arnst
, emailgit@sapd.eu
, or signature77BEB7E232CF1E5154777D4DD5866C58940197BF
:You can import the downloaded key manually with the following command and the build the package:
In the event that the keyserver being problematic, a copy of the key is included alongside the PKGBUILD. Please note that, AFAIK, AUR helpers generally don't automatically import it.
You can also search and import the key directly using gpg:
Or import directly with the key's signature:
Additionally, you can add the keyserver to the GPG config file for automatic import. Referencing the Arch Wiki GnuPG#Key_servers and OpenPGP#Keyserver.