Arch Linux User Repository

As both the packager and upstream author I'd like to encourage all users to activate "git source verification" if not already done. Please see comment in the PKGBUILD file. The recent supply chain issues highlight the importance of validating source code.

All git tags are signed and going forward, every commit will also be signed.

The public signing key is available in a few places, but I recommend getting it either via WKD or directly from the website of the key's email domain. These are sound ways to do this. For additional information please see:

https://sapience.com/tech/blog/git-keys

To get the key via WKD:

gpg --auto-key-locate nodefault,wkd --locate-external-keys arch@sapience.com

As both the packager and upstream author I'd like to encourage all users to activate "git source verification" if not already done. Please see comment in the PKGBUILD file. The recent supply chain issues highlight the importance of validating source code.

All git tags are signed and going forward, every commit will also be signed.

The public signing key is available in a few places, but I recommend getting it either via WKD or directly from the website of the key's email domain. These are sound ways to do this. For additional information please see:

https://sapience.com/tech/blog/git-keys

To get the key via WKD:

gpg --auto-key-locate nodefault,wkd --locate-external-keys arch@sapience.com

@solsticedhiver thanks for letting me know.

Fixed in 3.3.2 - so sorry - was a copy/paste typo in the installer.

My apologies.

current package 3.3.1-1 is broken. because /usr/bin/nginx-passwd is a symlink to a non-existent /usr/lib/python3.14/site-packages/mkpkg_mod/apps/nginx-passwd.py

Why does the install script use that weird directory in site-packages?

terrific - and thanks again for reporting this @ccharabaruk.

Let me know if anything else crops up. You can file any non-Arch specific issues in the git repo on github.

Have an awesome holidays.

@GeneArch yes, installs fine now, thanks.

Thanks for report @ccharabaruk

Does version 3.2.1 resolve it for you?

The use of os.getlogin() in the tests causes failure in check() due to ENOTTY.

Note on getting the git signing public key. Any of the following:

1) Get fresh copy of the package (on this page Package Actions Download Snapshot) Unpack tar file and the key will be in keys/pgp:

gpg --import < keys/pgp/*.asc

2) Available on github (same account as the package source): https://github.com/gene-git/blog/tree/master/git-keys

3) From authors website : https://www.sapience.com/tech

4) via WKD curl $(gpg-wks-client --print-wkd-url arch@sapience.com) | gpg --import

NB Key is available but not from pgp key servers which should no longer be used. For more info please take a look at comment in another package: https://aur.archlinux.org/packages/wg_tool#comment-1004777

quick solutions (as the package build user) use one of the following:

1) in same directory as PKGBUILD : gpg --import keys/pgp/*.asc

2) curl $(gpg-wks-client --print-wkd-url arch@sapience.com) | gpg --import

3) download at the authors website : www.sapience.com/tech