sacred void
essentially i noticed this pinned comment on the wiki
--> ALWAYS DO A CLEAN BUILD <--
This package will verify the signature of the git tag / commit. Developer keys are available here and instructions are here. See the PKGBUILD to determine which developer key you need.
how do i do this? when i try to install with paru it asks me to import some keys, is that safe to do? thanks.
do i even need to do this step?
it seems to have installed after agreeing to "import key" on my laptop,
id like to make sure im doing it rigiht on my desktop tho
this part specifically tripping me up See the PKGBUILD to determine which developer key you need.
??
isnt it just the latest?
sacred void
https://wiki.archlinux.org/title/Makepkg#Signature_checking
thx, i just read that section and im honestly unsure of whta its trying to achieve, i may just do the paru install
floral raftBOT
OfficerK received a thank you cookie!
modest steeple
Have you tried installing it yet?
sacred void
not with signatures no
quartz turtle
paru is not magically going to handle the keys for you so there is no difference there between using paru and makepkg