Package Details: tomb 2.11-3

Git Clone URL: https://aur.archlinux.org/tomb.git (read-only, click to copy)
Package Base: tomb
Description: Crypto Undertaker, a simple tool to manage encrypted storage
Upstream URL: https://www.dyne.org/software/tomb/
Licenses: GPL3
Submitter: None
Maintainer: parazyd (roddhjav)
Last Packager: roddhjav
Votes: 53
Popularity: 0.034521
First Submitted: 2011-04-15 15:20 (UTC)
Last Updated: 2024-07-12 17:24 (UTC)

Dependencies (14)

Required by (5)

Sources (4)

Pinned Comments

roddhjav commented on 2020-05-24 12:13 (UTC) (edited on 2020-05-24 12:16 (UTC) by roddhjav)

To install the package first import jaromil PGP key:

gpg --recv-keys 6113D89CA825C5CEDD02C87273B35DA54ACB7D10

Alternatively add keyserver-options auto-key-retrieve to your ~/.gnupg/gpg.conf.

This key can also be found on https://keybase.io/jaromil

Latest Comments

« First ‹ Previous 1 2 3 4 5 6 7 8 9 Next › Last »

frankspace commented on 2015-01-03 19:50 (UTC)

Thank you, adding that key worked. And I learned something. Thank you!

TrialnError commented on 2015-01-02 16:56 (UTC)

@richli: One question. Since you're maintaining this PKGBuild, could you also maintain the -git[0] one too? It's orphaned and not up to date. Would be nice if that could be changed. _____ [0] https://aur.archlinux.org/packages/tomb-git/

TrialnError commented on 2015-01-02 16:51 (UTC)

frankspace: The possebility was added to check if the signature of a tarball is really signed with the right key (validpgpkeys entry in the PKGBuild). Two ways to handle that: 1) Add the key to your local keyring (just add it, do not sign it) 2) Use makepkg --skippgpcheck See http://allanmcrae.com/2014/12/pacman-4-2-released/ Quote: "Source signatures are required to be from a trusted source or listed in the validpgpkeys array. We also support kernel.org style source signing"

richli commented on 2015-01-02 16:48 (UTC)

@frankspace: It's because makepkg can't find the public key. You need to run "gpg --recv-keys 0x73b35da54acb7d10" to download the public key into your keyring. No need to trust it or sign it or anything, it just needs to be accessible by gpg/makepkg.

frankspace commented on 2015-01-02 05:04 (UTC)

I'm getting an error that "One or more PGP signatures could not be verified." Specifically, Tomb-2.0.1.tar.gz fails because of "unknown public key 73B35DA54ACB7D10".

richli commented on 2014-12-31 03:01 (UTC)

@jswagner: Hmmm, very interesting. I don't use pacaur, so I took a look. I was able to reproduce your problem, so I tried running pacaur in debug mode to track things down better. It turns out that pacaur (for some reason) calls makepkg as so: makepkg -sfi --pkg tomb Note that the "tomb" package is split into two: "tomb" and "tomb-kdf". I assume that pacaur would call makepkg with "--pkg tomb-kdf" if the first makepkg were successful. Skipping pacaur entirely, I get the same error when I manually run the makepkg command with --pkg. The problem is that it's looking for tomb for the x86_64 architecture (note the filename), but the tomb sub-package overrides the "arch" variable to "any". I checked here [1] and it says that a split package may override the "arch" option as this one does. So...it seems to me like this is a bug with makepkg, unless there's something about split packages I'm not understanding. [1] https://wiki.archlinux.org/index.php/Pkgbuild#pkgbase

jswagner commented on 2014-12-31 02:15 (UTC)

I can build and install this manually, but it failed when I tried to update using pacaur. Like the package up and went missing after cleanup. -- ==> Installing tomb package group with pacman -U... loading packages... error: '/tmp/pacaurtmp-jason/tomb/tomb-2.0.1-1-x86_64.pkg.tar.xz': could not find or read package ==> WARNING: Failed to install built package(s).

richli commented on 2014-11-28 09:10 (UTC)

@TrailnError: Thanks for the notification, I've updated the package. Yeah, I don't know why the releases.dyne.org URLs don't contain the current release, upstream specifically directed me to use those URLs instead of the current ones. Maybe they'll update it later.

TrialnError commented on 2014-11-28 08:41 (UTC)

They tagged v2.0 and from the Downloads page it can be retrieved[0] But dunno why it differ from the old dl page _____ [0] https://files.dyne.org/tomb [1] https://twitter.com/DyneOrg/status/537755827814563840

richli commented on 2014-05-29 05:10 (UTC)

I found some time and cleaned up the package a bit and am using the new recommended download URLs. Now that AUR 3.0 supports split packages, this is split into "tomb" and "tomb-kdf". Further input welcome.

« First ‹ Previous 1 2 3 4 5 6 7 8 9 Next › Last »