To *temporally* solve this users can disable SigLevel in /etc/pacman.conf
It is not a very secure alternative but there's no other way until we
compile emulatorman's packages.

Can the autobuilder just rebuild a new release?

El 28/04/17 a las 05:12, Andreas Grapentin escribió:
> 
> The PGP key of emulatorman has expired:
> 
> $ gpg --list-keys emulatorman pub   rsa4096 2012-06-23 [SC]
> [expired: 2017-04-28] C92BAA713B8D53D3CAE63FC9E6974752F9704456 uid
> [ expired] André Silva <[email protected]> uid           [
> expired] André Silva <[email protected]> uid           [
> expired] [jpeg image of size 24564]
> 
> this means that pacman will fail to install any packges signed by
> André, which are many. Even `librechroot make` fails now:
> 
> $ sudo librechroot make ==> Creating 'root' copy for chroot
> [default] ==> Creating install root at
> /home/andi/parabola/build/default/root ==> Installing packages to
> /home/andi/parabola/build/default/root
> 
> [ snip ... ]
> 
> (104/104) checking package integrity
> [################################] 100% error: filesystem:
> signature from "André Silva <[email protected]>" is unknown
> trust :: File
> /var/cache/pacman/pkg/filesystem-2017.03-2.parabola1-x86_64.pkg.tar.xz
> is corrupted (invalid or corrupted package (PGP signature)). Do you
> want to delete it? [Y/n]
> 
> [ 5 more follow ... ]
> 
> error: failed to commit transaction (invalid or corrupted package) 
> Errors occurred, no packages were upgraded. ==> ERROR: Failed to
> install packages to new root ==> ERROR: Failed to install all
> packages
> 
> What can we do? Do we need to rebuild these packages, or can we
> just resign them using a valid key? If we need to rebuild, can we
> do it without resorting to `SigLevel = Never` in pacman.conf,
> since librechroot fails to make a working chroot?
> 
> Best, Andreas
> 
> 
> 
> 
> _______________________________________________ Dev mailing list 
> [email protected] 
> https://lists.parabola.nu/mailman/listinfo/dev
> 

-- 
SIP: [email protected]
XMPP: [email protected]
Tox: [email protected]
GPG: 0x227CA7C556B2BA78
GNUSocial: @[email protected]
Diaspora*: David P. (same XMPP ID)

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Dev mailing list
[email protected]
https://lists.parabola.nu/mailman/listinfo/dev

Reply via email to