Unable to install RPM GPG key

[mnejedlo]

Description

The release notes for 0.98.0 indicate that Trilium RPMs are now GPG signed. However, the key import instructions from that release notes do not work. The Trilium download page does not include a link to the GPG key either, and I have not been able to find any other source for the key.

While I realize the signature check can be bypassed when installing, this still seems like something that should get fixed.

TriliumNext Version

0.101.3

What operating system are you using?

Other Linux

What is your setup?

Local (no sync)

Operating System Version

6.8.9-100.fc38.x86_64

Error logs

$ sudo rpm --import https://triliumnotes.org/RPM-GPG-KEY-trilium
error: https://triliumnotes.org/RPM-GPG-KEY-trilium: key 1 not an armored public key.

[dosubot]

Hi @mnejedlo! I'm Dosu and I’m helping the Trilium team.

The error you're seeing—"key 1 not an armored public key"—means the GPG key at https://triliumnotes.org/RPM-GPG-KEY-trilium isn't in the format that rpm --import expects. The official instructions do point to this URL, but there’s no documentation or code in the repository that manages the key format or provides an alternative source. The key distribution is handled outside the repository, and there are no scripts or automation ensuring it's in the correct format for import. This issue has been noted by others as well, and currently, there’s no documented workaround or fix from the maintainers. If you need to verify or use the key, you may need to check the contents at the hosting site or wait for an update from the maintainers about the correct key format or a new download location.
Reference

To reply, just mention @dosu.

---

^{How did I do? Good | Irrelevant | Incorrect | Verbose | Hallucination | Report 🐛 | Other}

   

[eliandoran]

@mnejedlo , thanks for reporting this issue.

Apparently the key was no longer uploaded correctly due to the changes to the website. Now the key should be accessible at the same URL. Could you please try again to see if it got fixed?

[mnejedlo]

The download works now.

It would be nice to see it advertised on the download page though rather than needing to dig through old release notes.