I had to install the missing key with:
gpg --keyserver keyserver.ubuntu.com --recv-keys 2C393E0F18A9236D
| Git Clone URL: | https://aur.archlinux.org/youtube-dl.git (read-only, click to copy) |
|---|---|
| Package Base: | youtube-dl |
| Description: | A command-line program to download videos from YouTube.com and a few more sites |
| Upstream URL: | https://ytdl-org.github.io/youtube-dl |
| Keywords: | archive download video youtube |
| Licenses: | Unlicense |
| Submitter: | gromit |
| Maintainer: | tarball |
| Last Packager: | tarball |
| Votes: | 42 |
| Popularity: | 1.52 |
| First Submitted: | 2023-09-04 10:56 (UTC) |
| Last Updated: | 2025-07-17 19:40 (UTC) |
I had to install the missing key with:
gpg --keyserver keyserver.ubuntu.com --recv-keys 2C393E0F18A9236D
Please switch to spdx license identifier.
I can import the key, but it doesn't work. I assume it's a problem with the key. I have this at the end of my --list-keys and I suspect it's this key since I can import it.
... gpg: Warning: 1 key skipped due to its large size
gpg --recv-keys 2C393E0F18A9236D works! thank you
@dront78, the archlinux-keyring packages purpose is to verify the signatures for the official archlinux packages. If you need a key to verify sources that is on a entirely different page, check https://wiki.archlinux.org/title/Arch_User_Repository#Acquire_a_PGP_public_key_if_needed for some more information on that!
nothing helps except disabling signature check
==> Verifying source file signatures with gpg...
youtube-dl-2021.12.17.tar.gz ... FAILED (unknown public key 2C393E0F18A9236D)
==> ERROR: One or more PGP signatures could not be verified!
I don't know what to say. Nothing related to GPG has been tampered with in any way since the package was moved to AUR, check the git history to be sure. I rebuilt it this morning after seeing @utherbone's comment (using a fresh copy of Arch) and it builds and works fine. GPG-related issues are a recurring theme, and IME they're almost always caused by something on the build machine.
Have a look at older comments below, try removing the developer key from your keyring, and if that doesn't help, remove the keyring itself. Or build in a chroot.
Pinned Comments
tarball commented on 2024-06-07 07:20 (UTC) (edited on 2025-05-13 22:05 (UTC) by tarball)
This package tracks the latest stable release, which is pretty old by now. The fresh nightly version is available at:
https://aur.archlinux.org/packages/youtube-dl-nightly