Package Details: php-box 2.7.5-1

Git Clone URL: https://aur.archlinux.org/php-box.git (read-only, click to copy)
Package Base: php-box
Description: An application for building and managing Phars
Upstream URL: https://github.com/box-project/box2
Licenses: MIT
Submitter: jojosch
Maintainer: sanduhrs
Last Packager: sanduhrs
Votes: 36
Popularity: 0.000000
First Submitted: 2013-07-29 14:12 (UTC)
Last Updated: 2019-12-13 19:16 (UTC)

Latest Comments

aragon123 commented on 2019-12-18 19:18 (UTC)

Is it planed, to upgrade to the 3.x version from this fork: https://github.com/humbug/box ? Since currently I have problems with php 7.4 and for example this package: https://aur.archlinux.org/packages/php-cs-fixer/ Using the fork everything seems to work out.

pgoetz commented on 2017-04-08 19:34 (UTC)

This appears to be a known bug: https://bbs.archlinux.org/viewtopic.php?id=220996

pgoetz commented on 2017-04-08 18:53 (UTC)

@jojosch Thanks for that tip. Unforunately, I can't get even this to work: pgoetz@www:php-box$ gpg --keyserver hkp://pgp.mit.edu --recv-keys 32E4B74757B1D65234FC389F293D771241515FE8 gpg: keyserver receive failed: Server indicated a failure

jojosch commented on 2017-04-05 14:38 (UTC)

@pgoetz thanks for the note. The instructions on the php-box repository were removed with commit https://github.com/box-project/box2/commit/6640e38a4d9c8809e4db9174d2e6ba52092a2292. I've updated the pinned comment on this aur package with the "old" instructions.

pgoetz commented on 2017-04-05 14:23 (UTC)

"Please import the GPG Key of the developer of php-box by following the instructions on https://github.com/box-project/box2#gpg-signature." Unfortunately there are no instructions here for importing the GPG key.

pgoetz commented on 2017-04-05 13:51 (UTC)

I flagged the package as out of date due to the PGP signature issue preventing it from building. ==> Verifying source file signatures with gpg... box-2.7.5.phar ... FAILED (unknown public key 293D771241515FE8) ==> ERROR: One or more PGP signatures could not be verified!

piryguiry commented on 2016-12-25 23:38 (UTC)

Primary key fingerprint: 32E4 B747 57B1 D652 34FC 389F 293D 7712 4151 5FE8

jojosch commented on 2016-12-12 11:57 (UTC) (edited on 2017-04-05 14:36 (UTC) by jojosch)

If makepkg fails with a message similar to "FAILED (unknown public key 293D771241515FE8)" or "One or more PGP signatures could not be verified!": Please import the GPG Key of the developer of php-box with the fingerprint listed on https://github.com/box-project/box2#gpg-signature. gpg --keyserver hkp://pgp.mit.edu --recv-keys 32E4B74757B1D65234FC389F293D771241515FE8 Also note: https://wiki.archlinux.org/index.php/Makepkg#Signature_checking

pgoetz commented on 2016-12-07 14:51 (UTC)

When trying to make this package, I get the following error message: ==> Verifying source file signatures with gpg... box-2.7.4.phar ... FAILED (unknown public key 293D771241515FE8) ==> ERROR: One or more PGP signatures could not be verified!

prolific commented on 2016-12-07 11:39 (UTC)

@jojosch thanks a lot....by manually verifying i found out that my trust db was corrupted so i recreated it and then php-box got installed successfully...thanks again

jojosch commented on 2016-12-07 08:56 (UTC)

@prolific yaourt should create the build directory (default /tmp/yaourt-tmp-$USER/aur-php-box) with all the package contents. From there you can run the gpg --verify command. (if there is no folder under /tmp check the TMPDIR variable in /etc/yaourtrc)

prolific commented on 2016-12-07 06:31 (UTC)

@jojosch I am using yaourt to install php-box...so it is automatically building and verifying php-box...should i try to install it manually? or is there any way to do so through yaourt?

jojosch commented on 2016-12-06 11:21 (UTC)

@prolific i tried to build the package in a fresh vm but i cannot reproduce the problem. https://gist.github.com/jojosch/0df3c56434207d8fc8328407adfc6017 Can the signature of the .phar be validated manually (gpg --verify box-2.7.4.phar.sig)?

prolific commented on 2016-12-05 18:05 (UTC)

I have tried adding pgp key (gpg --keyserver hkp://pgp.mit.edu --recv-keys 41515FE8) but still the same error is coming: One or more PGP signatures could not be verified! Any idea what to do?

funilrys commented on 2016-08-09 13:38 (UTC)

@jojosch to fix the PGP key problem I did : gpg --keyserver hkp://pgp.mit.edu --recv-keys 41515FE8 as said in the official repository : https://github.com/box-project/box2

rbaprado commented on 2016-03-25 13:09 (UTC)

@jojosch That did the job. Thanks!

jojosch commented on 2016-03-24 18:15 (UTC)

@rbaprado can you try importing the PGP Key 293D771241515FE8 into your users gpg keyring (gpg --recv-keys 293D771241515FE8) and try building again?

rbaprado commented on 2016-03-24 17:55 (UTC)

Could not verify PGP key 293D771241515FE8.

jamesan commented on 2016-02-09 23:29 (UTC)

The current PKGBUILD standard requires the license variable to be an array, even if there's only one license. The current PKGBUILD assigns a string to license, which generates an error when makepkg is run. Namely, replace: license="MIT" with license=("MIT")

jojosch commented on 2015-06-12 05:27 (UTC)

@Stephen304 i added a check for the phar extension and the config option to the install script

Stephen304 commented on 2015-06-11 21:31 (UTC)

Just a note for people using this as a dependency, in order to use the build command, you have to set these options in the php.ini (coming from a clean automated install via packer) extension=phar.so phar.readonly = Off Really threw me for a loop when I tried to install php-cs-fixer and packer tried to install php, php-box, then php-cs-fixer and failed because the default config doesn't work.

rdoursenaud commented on 2015-02-06 14:52 (UTC)

Sorry for my previous comment. I made a fool of myself.

jojosch commented on 2014-03-03 19:14 (UTC)

@r1pp3rj4ck thanks for the patch :)

r1pp3rj4ck commented on 2014-03-03 19:00 (UTC)

jojosch, here is a little patch I wrote: https://gist.githubusercontent.com/r1pp3rj4ck/9331951/raw/2bdbed43a972302f9f159f9b8ac1fa10d5c8d192/PKGBUILD.patch After applying this patch: a) you can actually use the proper version b) it will work with the default open_basedir config Please update!