[Assist] Package signatures issues

[Denis 'GNUtoo' Carikli]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

I've several computers and vm running parabola, and only on some of
them I've things like:
[root at X60 ~]# pacman -S devmem
resolving dependencies...
looking for inter-conflicts...

Packages (1): devmem-2-2

Total Download Size:    0.00 MiB
Total Installed Size:   0.02 MiB

:: Proceed with installation? [Y/n] y
:: Retrieving packages ...
 devmem-2-2-any             3.1 KiB  0.00B/s 00:00 [#############] 100%
(1/1) checking keys in keyring                     [#############] 100%
(1/1) checking package integrity                   [#############] 100%
error: devmem: signature from "Aurélien DESBRIÈRES (Run Free! Run
GNU.org) <aurelien at hackers.camp>" is marginal trust ::
File /var/cache/pacman/pkg/devmem-2-2-any.pkg.tar.xz is corrupted
(invalid or corrupted package (PGP signature)). Do you want to delete
it? [Y/n] y error: failed to commit transaction (invalid or corrupted
package (PGP signature)) Errors occurred, no packages were upgraded.

I've imported manually his signature in gpg, but then packman has to be
told to trust it.
It would be way better if that could be automatic.

On some of my computers I just had to say Y to pacman so it could
import it.

The output that I pasted is from an i686.

Denis.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=SUzS
-----END PGP SIGNATURE-----