On Fri, 2018-07-27 at 08:10 +0100, Ralph Corderoy wrote: > Hi Ralf, > > Eli wrote: > > > It's a hint that not every user likes 'auto-key-retrieve', but > > > instead only manually retrieve keys, if it makes sense to the user > > > to retrieve a key. > > Thanks, I found it on topic, given Peter explicitly mentioned the > option, and very helpful. I've added a note to the suggestion in > https://wiki.archlinux.org/index.php/GnuPG#Use_a_keyserver Thank you Ralph, for editing the Wiki. > > > I don't see a valid reason, to e.g. retrieve the keys that belong to > > > an unknown signature of an email send via a mailing list, just to > > > get automatically keys when building something from AUR. > > Me neither, but > https://wiki.archlinux.org/index.php/Pacman/Package_signing doesn't > suggest `auto-key-retrieve'. I didn't read all related Wiki pages, but seemingly non, including https://wiki.archlinux.org/index.php/makepkg mention Eli's hint, to use echo 'GNUPGHOME="$HOME"/.gnupg-makepkg' >> "$HOME"/.config/pacman/makepkg.conf Fortunately the manpage does. $ man makepkg | grep GNUPGHOME GNUPGHOME="/path/to/directory" I'm short in time and apart from this I'm uncertain, if it's worth to add this to the Arch Wiki. Regards, Ralf
