0ad-data corrupted package

I am receiving this error,

error: 0ad-data: signature from "Felix Yan <felixonmars@archlinux.org>" is invalid
:: File /var/cache/pacman/pkg/0ad-data-a23.1-2-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] n
error: failed to commit transaction (invalid or corrupted package (PGP signature))

I have removed gnupg, reinitialized pacman and also changed mirrors and keyserver to hkp://ipv4.pool.sks-keyservers.net:11371 since hkps was down. I am still receiving this error, Is manjaro or archlinux keyring outdated? I also contacted the maintainer but he says the package is okay.

This is the debug from pacman

:: Proceed with installation? [Y/n] Y
debug: using cachedir: /var/cache/pacman/pkg/
debug: found cached pkg: /var/cache/pacman/pkg/0ad-data-a23.1-2-any.pkg.tar.zst
checking keyring...
debug: GPGME version: 1.13.1
debug: GPGME engine info: file=/usr/bin/gpg, home=/etc/pacman.d/gnupg/
debug: looking up key 786C63F330D7CB92 locally
debug: key lookup success, key exists
checking package integrity...
debug: found cached pkg: /var/cache/pacman/pkg/0ad-data-a23.1-2-any.pkg.tar.zst
debug: sig data: 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
debug: checking signature for /var/cache/pacman/pkg/0ad-data-a23.1-2-any.pkg.tar.zst
debug: 1 signatures returned
debug: fingerprint: 786C63F330D7CB92
debug: summary: red
debug: status: Bad signature
debug: timestamp: 0
debug: exp_timestamp: 0
debug: validity: unknown; reason: Success
debug: key: B5971F2C5C10A9A08C60030F786C63F330D7CB92, Felix Yan <felixonmars@archlinux.org>, owner_trust unknown, disabled 0
debug: signature is not valid
error: 0ad-data: signature from "Felix Yan <felixonmars@archlinux.org>" is invalid
:: File /var/cache/pacman/pkg/0ad-data-a23.1-2-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).

Hello,

Try this:

sudo pacman-mirrors -f0
sudo pacman -Sy archlinux-keyring manjaro-keyring
sudo pacman-key --populate archlinux manjaro
sudo pacman-key --refresh-keys
sudo pacman -Syyu

If you have any other errors, then try this:

sudo rm -fr /etc/pacman.d/gnupg
sudo pacman-key --init
sudo pacman-key --populate archlinux manjaro
sudo pacman-key --refresh-keys
sudo pacman -Syyu

Try to remove the old package in your cache. Maybe it got downloaded wrongly …

sudo rm -v /var/cache/pacman/pkg/0ad-data-a23.1-2-any.pkg.tar.zst

sudo rm -fr /etc/pacman.d/gnupg
sudo pacman-key --init
sudo pacman-key --populate archlinux manjaro
sudo pacman-key --refresh-keys
sudo pacman -Syyu

I have already tried these. I had an error in sudo pacman-key --refresh-keys since hkps pool was down, so now I’m using hkp://ipv4.pool.sks-keyservers.net:11371 instead. I have tried this 4 times, and still have the same issue. The mirrors I’ve tested are Germany, Singapore, Canada, United_States and India.

Did that thrice, I also used sudo pacman -Sc each time I tried different mirrors.

It is not recommended but the following might bypass the signature check. If the package is really corrupted as it claims it won’t install.

sudo pacman -U /var/cache/pacman/pkg/0ad-data-a23.1-2-any.pkg.tar.zst

I think this is the package itself, I am getting

:: Proceed with installation? [Y/n] Y
(1/1) checking keys in keyring                           [##############################] 100%
(1/1) checking package integrity                         [##############################] 100%
(1/1) loading package files                              [##############################] 100%
(1/1) checking for file conflicts                        [##############################] 100%
(1/1) checking available disk space                      [##############################] 100%
:: Processing package changes...
(1/1) installing 0ad-data                                [##############################] 100%
error: could not extract /usr/share/0ad/data/mods/public/public.zip (Zstd decompression failed: Corrupted block detected)
error: problem occurred while installing 0ad-data
error: could not commit transaction
error: failed to commit transaction (transaction aborted)

I’ve just downloaded it (mirror: manjaro.moson.eu). Works fine here.
So somehow something went wrong during download i guess.

btw. This is the sha256 hash I am getting:
81f7e3e5f0bf19323a44054cb524774b3f8258ed417d915d5fb95026902acfb5

It is indeed incorrect for me af047aac931d8598726e2f4b9bdca04b39060b60172ef9ee9a2caefb5d31de08
I’ll wait for the latest mirror sync for stable and retry again.

@addy You can try to download it from here:

sudo pacman -U https://manjaro.moson.eu/pool/sync/0ad-data-a23.1-2-any.pkg.tar.zst

I changed my mirror to https://repo.ialab.dsu.edu/manjaro/stable/$repo/$arch and it started working. German mirror was too slow for me.

Glad that you found a solution @addy. Yes, changing mirrors might help in those cases …

1 Like

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.