signature from "lilac (build machine) <lilac@build.archlinuxcn.org>" is unknown trust

[RecursiveG]

debug: 1 signatures returned
debug: fingerprint: 83F817213361BF5F02E7E124F9F9FA97A403F63E
debug: summary: (empty)
debug: status: 成功
debug: timestamp: 1408779802
debug: exp_timestamp: 0
debug: validity: unknown; reason: 成功
debug: key: 83F817213361BF5F02E7E124F9F9FA97A403F63E, lilac (build machine) <lilac@build.archlinuxcn.org>, owner_trust unknown, disabled 0
debug: signature is valid
debug: signature is unknown trust
错误：zsh-completions-git: signature from "lilac (build machine) <lilac@build.archlinuxcn.org>" is unknown trust
:: 文件 /var/cache/pacman/pkg/zsh-completions-git-0.11.0.18.ge5112fa-1-any.pkg.tar.xz 已损坏 (无效或已损坏的软件包 (PGP 签名)).

[archlinuxcn]
SigLevel = Optional TrustedOnly
Server = http://repo.archlinuxcn.org/$arch

[felixonmars]

请参考 README 导入我们仓库使用的 PGP 公钥:
https://github.com/archlinuxcn/repo/blob/master/README.md

[RecursiveG]

需要TrustAll么。。。TrustedOnly会有问题么？

[felixonmars]

有些维护者提供的包暂时还没有签名的 :(