On Mon, 12 Dec 2016 08:56:55 +0100, Ralf Mardorf wrote: >On Sun, 11 Dec 2016 13:54:08 -0600, Doug Newgard wrote: >>No, there is no reason to avoid it. The argument that people don't >>understand isn't a valid one with Arch. > >Full ACK. > >If they want to use a helper without taking care about anything on >their own, they could configure their helper to skip the PGP check. > >At least yaourt provides an option. > >$ man yaourtrc | grep MAKEPKG -A1 > MAKEPKG="makepkg" > Specify the makepkg binary to use with yaourt > >I don't know if it's possible to use > > MAKEPKG="makepkg --skippgpcheck" > >but at least using a wrapper > > MAKEPKG="makepkg-skip-pgp-chek-wrapper" > >would be possible.
Let alone that a makepkg wrapper skript could check the PKGBUILD and download all required keys automatically. This doesn't require programming skills, just a simple script. I'm against downloading keys automatically, but this perhaps would be better, than to skip PGP verification.
