Package Details: youtube-dl 2021.12.17-3

Git Clone URL: https://aur.archlinux.org/youtube-dl.git (read-only, click to copy)
Package Base: youtube-dl
Description: A command-line program to download videos from YouTube.com and a few more sites
Upstream URL: https://ytdl-org.github.io/youtube-dl/
Keywords: archive download video youtube
Licenses: custom
Submitter: gromit
Maintainer: tarball
Last Packager: tarball
Votes: 34
Popularity: 3.86
First Submitted: 2023-09-04 10:56 (UTC)
Last Updated: 2024-05-21 11:39 (UTC)

Latest Comments

1 2 Next › Last »

gromit commented on 2024-07-21 14:36 (UTC)

@dront78, the archlinux-keyring packages purpose is to verify the signatures for the official archlinux packages. If you need a key to verify sources that is on a entirely different page, check https://wiki.archlinux.org/title/Arch_User_Repository#Acquire_a_PGP_public_key_if_needed for some more information on that!

dront78 commented on 2024-07-21 14:29 (UTC) (edited on 2024-07-21 14:32 (UTC) by dront78)

  • checked with the fresh keyring
  • sudo pacman-key --recv-keys 2C393E0F18A9236D
  • sudo pacman-key --lsign-key 2C393E0F18A9236D

nothing helps except disabling signature check

==> Verifying source file signatures with gpg...
youtube-dl-2021.12.17.tar.gz ... FAILED (unknown public key 2C393E0F18A9236D)
==> ERROR: One or more PGP signatures could not be verified!

tarball commented on 2024-07-20 09:42 (UTC)

I don't know what to say. Nothing related to GPG has been tampered with in any way since the package was moved to AUR, check the git history to be sure. I rebuilt it this morning after seeing @utherbone's comment (using a fresh copy of Arch) and it builds and works fine. GPG-related issues are a recurring theme, and IME they're almost always caused by something on the build machine.

Have a look at older comments below, try removing the developer key from your keyring, and if that doesn't help, remove the keyring itself. Or build in a chroot.

eklausmeier commented on 2024-07-20 08:58 (UTC)

I can confirm utherbone's comments:

==> Validating source files with sha256sums...
    youtube-dl-2021.12.17.tar.gz ... Passed
    youtube-dl-2021.12.17.tar.gz.sig ... Skipped
==> Verifying source file signatures with gpg...
    youtube-dl-2021.12.17.tar.gz ... SIGNATURE NOT FOUND
FAILED
==> ERROR: One or more PGP signatures could not be verified!
:: Unable to build youtube-dl - makepkg exited with code: 1

utherbone commented on 2024-07-20 04:56 (UTC)

This package shows error at verifies the authenticity. I use "$makepkg --skippgpcheck -i" to build and install package. Can the maintainer check the problem?

corwin7 commented on 2024-06-28 16:25 (UTC)

mv: cannot stat '/home/xxx/.cache/yay/youtube-dl/pkg/youtube-dl/usr/share/bash-completion/completions/youtube-dl.bash-completion': No such file or directory

I tried deleting the /home/xxx/.cache/yay/youtube-dl directory.

tarball commented on 2024-06-07 07:20 (UTC)

This package tracks the latest stable release. But your suggestion makes sense, so I created:

https://aur.archlinux.org/packages/youtube-dl-nightly

Be aware that nightlies are not signed by the developer.

keithspg commented on 2024-06-07 01:30 (UTC)

Maybe want to update this to use the more up to date version here: https://github.com/ytdl-org/ytdl-nightly/archive/refs/tags/2024.05.31.tar.gz instead of the release from 12/2021. It is much more up to date. I built the git version and it does work.

vct commented on 2024-05-22 14:43 (UTC) (edited on 2024-05-22 15:12 (UTC) by vct)

Soulprayer

This is what is shown when updating youtube-dl:

The PGP key ED7F5BF46B3BBED81C87368E2C393E0F18A9236D is needed to verify youtube-dl source files.
Trust Sergey M. <dstftw@gmail.com> and import the PGP key ? [y/N]

It's the key of Sergey M. dstftw@gmail.com

It matches the one found in https://ytdl-org.github.io/youtube-dl/download.html

Also matches what is found in OpenGPG keyservers:

@ gpg --search-keys ED7F5BF46B3BBED81C87368E2C393E0F18A9236D
gpg: data source: https://185.125.188.26:443
(1) Sergey M. <dstftw@gmail.com>
      4096 bit RSA key 2C393E0F18A9236D, created: 2016-04-09
Keys 1-1 of 1 for "ED7F5BF46B3BBED81C87368E2C393E0F18A9236D".  Enter number(s), N)ext, or Q)uit > Q

And it matches the issuer of signatures found in https://github.com/ytdl-org/youtube-dl/releases. So it seems legit.

tarball commented on 2024-05-22 10:16 (UTC)

The signature is the same, and source code hasn't changed since 2021. The package was updated because of the recent release of Python 3.12.

Look into commit history, all changes are publicly visible.

1 2 Next › Last »