You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When paru is configured to sign local repos, if a package already exists in the repo and contains a detach signature, when rebuilding the package, the signature file is not overwritten, leading to failure later when the package is installed.
This is because the command used by sign_pkg(): gpg --detach-sign --no-armor --batch fails with the following error when the file already exists gpg: signing failed: File exists. A possible solution is to pass --yes as an additional argument.
I don't understand why this is not caught by the function as an error since gpg exists with code 2 instead of 0.
This change lets gpg overwrite the detached signatures of the packages
when the files already exist. Without --yes, and in combination with
--batch, gpg fails (exit 2) without overwriting any file.
FixesMorganamilo#1256
Nevermind, I think the source code already has a solution to delete the signature before generating a new one, but this is never used because delete_sig is always passed as false.
Affected Version
paru v2.0.4 - libalpm v15.0.0
Description
When paru is configured to sign local repos, if a package already exists in the repo and contains a detach signature, when rebuilding the package, the signature file is not overwritten, leading to failure later when the package is installed.
This is because the command used by
sign_pkg()
:gpg --detach-sign --no-armor --batch
fails with the following error when the file already existsgpg: signing failed: File exists
. A possible solution is to pass--yes
as an additional argument.I don't understand why this is not caught by the function as an error since gpg exists with code 2 instead of 0.
Output
paru.conf
The text was updated successfully, but these errors were encountered: