i found a solution here: http://www.marshut.com/wrrts/repo-release-1-12-4.html

Sorry, I realized today that we didn‘t upload the newest version of the launcher. I‘ll update the documentation. For the meantime, please use:

curl http://commondatastorage.googleapis.com/git-repo-downloads/repo > ~/bin/repo chmod a+x ~/bin/repo

sha1 e197cb48ff4ddda4d11f23940d316e323b29671c

If verification errors persist, you can blow away (or move) your ~/.repoconfig dir to ensure the new public keys are imported.

Sorry for the trouble everyone!

repo init 时gpg: 无法检查签名:找不到公钥