Package Details: parcimonie-sh-git 78.529e2fa-1

Git Clone URL: https://aur.archlinux.org/parcimonie-sh-git.git (read-only, click to copy)
Package Base: parcimonie-sh-git
Description: Bash reimplementation of parcimonie
Upstream URL: https://github.com/EtiennePerot/parcimonie.sh
Licenses: custom:WTFPL
Submitter: EtiennePerot
Maintainer: freswa (EtiennePerot)
Last Packager: EtiennePerot
Votes: 21
Popularity: 0.000190
First Submitted: 2013-07-10 04:53 (UTC)
Last Updated: 2023-02-26 07:09 (UTC)

Latest Comments

« First ‹ Previous 1 2 3 4

pigmonkey commented on 2013-08-14 04:21 (UTC)

Yup, that builds.

EtiennePerot commented on 2013-08-14 03:47 (UTC)

That's disappointing; the documentation for `git log` says that `%G?` should show `U` for untrusted signatures, which I assumed would cover signatures amde with keys not in the keyring. Apparently that is not the case. The updated PKGBUILD creates a temporary GnuPG homedir and imports the key there in order to perform the signature check, so it should work now. (Remove my key from your main keyring before testing that)

pigmonkey commented on 2013-08-14 02:11 (UTC)

Ah, I see. The PKGBUILD is not actually importing the key. It just gets the key ID. So the `%G?` format returns "N", which I guess indiciates "key not found". `%GK` returns nothing. It must require that the key be in the keyring. After I import your key: $ git log --pretty="format:%H,%G?,%GK" HEAD 7423f0c2eb407097d579f604e094b7a842009659,U,4D061903EEDA047E bf92a0cde0a4c4251ebe52eb1179ba35c4cce0d2,U,4D061903EEDA047E 3a3198325c4809463f046231e67640525b4dc28c,N, 93fcd731785c60159e2444c1ac20b4aa834e3231,U,4D061903EEDA047E b642344cd7237b4196e9a1c5e149fd4c0a2c07d6,U,4D061903EEDA047E 0442a5ca9514a9bb132c2a00f69dd3ed135ec16c,U,4D061903EEDA047E 049ddf7b064cb5f8aca69309a86a82d4f857b0d4,U,4D061903EEDA047E 288839243c11d8f4f5c5b42388642de60acaf19a,U,4D061903EEDA047E 6fb59358d8ffa0fbb9de9be3c475c36ee6df948b,U,4D061903EEDA047E 458b3f4c012804a146a010b2b72c2f1775752d78,U,4D061903EEDA047E 88c45cc36a1e0a66db64545650c71faa127e8aef,U,4D061903EEDA047E 4c856b9fa40458785518c20821a34435b0b994e4,U,4D061903EEDA047E 1598184c08e1cedf99d596d093b63fefe1212522,N, f120379593ef83977724161594a41d7a8d034b6f,N, 1371b07ecaa92389bbcb6381b271a4e01054e32c,N, The package then builds properly. Perhaps you want to grep the output of `git show/log --show-signature` for the key ID.

pigmonkey commented on 2013-08-14 01:49 (UTC)

The problem appears to be in the key import in the PKGBUILD. $ git log --show-signature commit 7423f0c2eb407097d579f604e094b7a842009659 gpg: Signature made Fri 02 Aug 2013 09:10:13 AM PDT gpg: using RSA key 0x4D061903EEDA047E gpg: Can't check signature: No public key Author: Etienne Perot <etienne@perot.me> Date: Fri Aug 2 09:09:48 2013 -0700 Fix sleep time computation ... $ git log --pretty="format:%H,%G?,%GK" HEAD 7423f0c2eb407097d579f604e094b7a842009659,N, bf92a0cde0a4c4251ebe52eb1179ba35c4cce0d2,N, 3a3198325c4809463f046231e67640525b4dc28c,N, 93fcd731785c60159e2444c1ac20b4aa834e3231,N, b642344cd7237b4196e9a1c5e149fd4c0a2c07d6,N, 0442a5ca9514a9bb132c2a00f69dd3ed135ec16c,N, 049ddf7b064cb5f8aca69309a86a82d4f857b0d4,N, 288839243c11d8f4f5c5b42388642de60acaf19a,N, 6fb59358d8ffa0fbb9de9be3c475c36ee6df948b,N, 458b3f4c012804a146a010b2b72c2f1775752d78,N, 88c45cc36a1e0a66db64545650c71faa127e8aef,N, 4c856b9fa40458785518c20821a34435b0b994e4,N, 1598184c08e1cedf99d596d093b63fefe1212522,N, f120379593ef83977724161594a41d7a8d034b6f,N, 1371b07ecaa92389bbcb6381b271a4e01054e32c,N,

EtiennePerot commented on 2013-08-14 01:39 (UTC)

The latest commit as of this writing is indeed 7423f0c2eb407097d579f604e094b7a842009659 and it is signed by my subkey 4D061903EEDA047E. I tried re-makepkg-ing the package and it worked for me. Can you post the output of: $ cd /tmp && git clone git://perot.me/parcimonie.sh && cd parcimonie.sh && git log --show-signature && git log --pretty="format:%H,%G?,%GK" HEAD

pigmonkey commented on 2013-08-13 19:06 (UTC)

==> Starting pkgver()... ==> Updated version: parcimonie-sh-git 15.7423f0c-1 ==> Starting build()... ==> Starting check()... ==> ERROR: Latest commit 7423f0c2eb407097d579f604e094b7a842009659 is not signed by GPG key 4D061903EEDA047E. ==> ERROR: A failure occurred in check(). Aborting...

« First ‹ Previous 1 2 3 4