[gobolinux-users] Installing latest KDE from contrib

[Andy Feldman]

On 6/25/06, V <mkdm_2000 at yahoo.com> wrote:
> Finally, doing :
> InstallPackage
> http://www.kundor.org/gobo/packages/contrib/KDE-Base--3.5.3--i686.tar.bz2
>
> gives me
>
> InstallPackage: Invalid signature.  Package has been
> modified
> InstallPackage: Suspect package in
> /Programs/KDE-Base/3.5.3

As I understand it, the system for signing of contributed packages
isn't fully in place yet: If someone signs their package and you
download it, you'd need to have their public key in order to verify
it.

Lucas pointed this out to me when I sent him a (signed) package for
the contrib store. His solution was to unpack it, strip out the
signature files, repack it, and use it as an unsigned package. I'm
sure there will be a mechanism in the future to trust user signatures,
but for now you can use that to get the package installed.

As far as selecting the contrib packages instead of (older) official
ones, I usually do what you did with the URL. If you use the Manager,
you can also select them from the GUI.