MESSAGE
| DATE | 2021-05-13 |
| FROM | Dudemanguy
|
| SUBJECT | Re: [Hangout - NYLXS] [artix-general] Corrupted packages
|
On 5/13/21 3:57 PM, Javier wrote:
> Usually I see these problems when the packages are not signed by devs,
> but instead by buildbot... In that case, I'm not sure if it's OK to
> trust buildbot... The problem is not an issue with the artix-keyring,
> neither /etc/pacman.d/gnupg.
>
> Is it OK to "pacman -U /var/cache/pacman/pkg/" when they come
> with bad signature from a non developer (meaning a tool or a bot).
> Moreover, if it comes from an individual, but still with wrong
> signature? To me the whole purpose of signatures is to make sure the
> packages come from the right artix devs...
>
> Just double checking, :)
>
> Thanks !
All of the artix repo (except Universe) packages are signed by the
buildbot so I hope you trust it. ;) I'm don't know what exactly caused
the bad signature in this case but indeed the wpa_supplicant-s6 package
in repo is corrupted somehow. Not a big deal since I plan to move the
testing one later today to stable although right now buildbot is being
hogged by kde packages. I'm patiently waiting.
--
artix-general mailing list
artix-general-at-artixlinux.org
https://lists.artixlinux.org/listinfo/artix-general
_______________________________________________
Hangout mailing list
Hangout-at-nylxs.com
http://lists.mrbrklyn.com/mailman/listinfo/hangout
|
|
