diff --git a/binhost.sh b/binhost.sh
index 302c217..1a9213e 100755
--- a/binhost.sh
+++ b/binhost.sh
@@ -96,8 +96,16 @@ init_container() {
         gpg-connect-agent reloadagent /bye
         gpg --batch --import /tmp/signing.key
         gpg --export | gpg --homedir /etc/portage/gnupg --import
+        # really yikes man, i don't know what it's doing 
+        # that it can't read trustdb
         chmod 755 /etc/portage/gnupg
         chmod 755 /root/.gnupg
+        find /etc/portage/gnupg -type f -exec chmod 666 {} +
+
+        FINGERPRINT=\$(gpg --with-colons --show-keys /tmp/signing.key | awk -F: '/^pub/ { print \$5 }' | head -n1)
+        echo \"\$FINGERPRINT:6:\" | gpg --homedir /etc/portage/gnupg --import-ownertrust
+        gpg --homedir /etc/portage/gnupg --check-trustdb
+
         if [[ ! -d /var/db/repos/gentoo/profiles ]]; then
             emerge-webrsync -q
         fi