Chaotic-aur: "Key missing from keyring"

> # pacman -Syu
> :: Synchronizing package databases...
>  core is up to date
>  extra is up to date
>  community is up to date
>  multilib is up to date
>  chaotic-aur is up to date
> :: Starting full system upgrade...
> :: Replace linux54-rt with community/linux-rt-lts-manjaro? [Y/n] y
> :: Replace linux59-rt with community/linux-rt-manjaro? [Y/n] y
> :: Replace qca with extra/qca-qt5? [Y/n] y
> resolving dependencies...
> looking for conflicting packages...
> 
> Packages (173) accounts-qml-module-0.7-4  alsa-lib-1.2.5-2  alsa-plugins-1:1.2.5-2  alsa-topology-conf-1.2.5-1  alsa-ucm-conf-1.2.5-1  alsa-utils-1.2.5-3
>                at-spi2-core-2.40.2-1  boost-1.75.0-5  boost-libs-1.75.0-5  ca-certificates-20210529-1  ca-certificates-utils-20210529-1  calligra-3.2.1-15
>                chaotic-mirrorlist-20210620-1  chromium-91.0.4472.114-1  colord-1.4.5-4  colord-sane-1.4.5-4  deepin-desktop-base-2:2021.5.07-1  deepin-qt5integration-5.1.12-1
>                deepin-system-monitor-5.8.6-1  drumstick-2.2.1-1  dtkcommon-5.5.3-1  dtkcore-1:5.4.15-1  dtkgui-5.5.2-1  dtkwidget-5.5.7-1  elfutils-0.185-1  evince-40.1-2
>                faudio-21.06-1  firefox-89.0.1-1  flatpak-1.11.1-2  git-2.32.0-1  gnome-desktop-1:40.1-2  gnome-disk-utility-40.1-2  gnutls-3.7.2-1
>                google-chrome-91.0.4472.114-1  grub-2.06-1  gsl-2.7-1  gst-plugin-pipewire-common-git-0.3.30.r178.ged9560fb-1  gtk-update-icon-cache-1:4.2.1-2  gtk3-1:3.24.29-2
>                gupnp-1.2.7-1  imagemagick-7.0.11.14-1  imath-3.0.4-1  inetutils-2.0-1  inkscape-1.1-3  intel-gmmlib-21.1.3-1  intel-media-driver-21.2.1-1  js78-78.11.0-1
>                lib32-alsa-lib-1.2.5-2  lib32-alsa-plugins-1.2.5-1  lib32-at-spi2-core-2.40.2-1  lib32-colord-1.4.5-3  lib32-faudio-21.06-1  lib32-gnutls-3.7.2-1
>                lib32-libcanberra-0.30+2+gc0620e4-4  lib32-libelf-0.185-1  lib32-libgusb-0.3.7-1  lib32-libogg-1.3.5-1  lib32-librsvg-2:2.50.7-1  lib32-libtirpc-1.3.2-1
>                lib32-libva-mesa-driver-21.1.2-1  lib32-libx11-1.7.2-1  lib32-libxcrypt-4.4.22-2  lib32-llvm-libs-12.0.0-1  lib32-mesa-21.1.2-1  lib32-mesa-vdpau-21.1.2-1
>                lib32-mpg123-1.28.0-1  lib32-pipewire-1:0.3.30-1  lib32-polkit-0.119-1  lib32-systemd-248.3-1  lib32-util-linux-2.37-1  lib32-vulkan-intel-21.1.2-1
>                lib32-vulkan-radeon-21.1.2-1  lib32-zstd-1.5.0-2  libaccounts-glib-1.25-4  libaccounts-qt-1.16-3  libcanberra-0.30+2+gc0620e4-4  libcolord-1.4.5-4
>                libedit-20210522_3.1-1  libelf-0.185-1  libgusb-0.3.7-1  libinput-1.18.0-1  liblouis-3.18.0-1  libmbim-1.24.8-1  libmm-glib-1.16.6-1  libnftnl-1.2.0-1
>                libnice-0.1.18-2  libogg-1.3.5-1  libpurple-2.14.5-1  libqmi-1.28.6-1  libreoffice-still-7.0.6-2  librsvg-2:2.50.7-1  libva-mesa-driver-21.1.2-1  libx11-1.7.2-1
>                libxcrypt-4.4.22-4  linux-rt-lts-manjaro-5.10-1  linux-rt-manjaro-5.11-1  linux510-5.10.42-1  linux510-rt-5.10.35_rt39-1  linux511-rt-5.11.4_rt11-1
>                linux54-5.4.124-1  linux54-rt-5.4.115_rt57-1 [removal]  linux59-rt-5.9.1_rt20-1 [removal]  llvm-libs-12.0.0-1  manjaro-release-21.0.7-1  mesa-21.1.2-1
>                mesa-vdpau-21.1.2-1  mhwd-db-0.6.5-9  mkinitcpio-30-2  modemmanager-1.16.6-1  mousepad-0.5.5-3  mpg123-1.28.0-1  nettle-3.7.3-1  nftables-1:0.9.9-1
>                obs-studio-27.0.0-2  ocl-icd-2.3.0-1  openexr-3.0.4-1  openmpi-4.1.1-1  pambase-20210605-2  papirus-icon-theme-20210601-1  pidgin-2.14.5-1
>                pipewire-common-alsa-git-0.3.30.r178.ged9560fb-1  pipewire-common-git-0.3.30.r178.ged9560fb-1  pipewire-common-jack-git-0.3.30.r178.ged9560fb-1
>                pipewire-common-pulse-git-0.3.30.r178.ged9560fb-1  polkit-0.119-1  poppler-21.06.1-1  poppler-glib-21.06.1-1  poppler-qt5-21.06.1-1  pstoedit-3.75-5
>                pulseaudio-alsa-1:1.2.5-2  python-distlib-0.3.2-1  python-idna-3.2-1  python-more-itertools-8.7.0-1  python-setuptools-1:57.0.0-2  python-zita-jacktools-1.5.0-1
>                python2-distlib-0.3.2-1  qca-2.3.2-2 [removal]  qca-qt5-2.3.3-1  qt5-declarative-5.15.2+kde+r28-1  qt5-tools-5.15.2+kde+r17-2  qt5-webengine-5.15.4-3
>                qt6-base-6.1.1-1  re2-1:20210601-1  recode-3.7.9-1  rosegarden-21.06-1  rubberband-1.9.2-1  steamtinkerlaunch-6.10-1  systemd-248.3-3  systemd-libs-248.3-3
>                systemd-sysvcompat-248.3-3  thunderbird-78.11.0-1  timeshift-20.11.1.r28.gefed117-2  tumbler-4.16.0-3  util-linux-2.37-3  util-linux-libs-2.37-3
>                vte-common-0.64.2-2  vte3-0.64.2-2  vulkan-intel-21.1.2-1  vulkan-radeon-21.1.2-1  wine-6.10-1  xfce4-appfinder-4.16.1-2  xfce4-panel-4.16.3-2
>                xfce4-power-manager-4.16.0-3  xfce4-session-4.16.0-2  xfce4-settings-4.16.2-1  xfce4-terminal-0.8.10-2  xfconf-4.16.0-2  xfdesktop-4.16.0-2  xfwm4-4.16.1-2
>                yelp-40.2-1  yelp-xsl-40.2-1  youtube-dl-2021.06.06-1  zbar-0.23.1-7
> 
> Total Installed Size:  4345.29 MiB
> Net Upgrade Size:        38.11 MiB
> 
> :: Proceed with installation? [Y/n] y
> (170/170) checking keys in keyring                                                                        [###############################################################] 100%
> downloading required keys...
> :: Import PGP key 8A9E14A07010F7E3, "Pedro Henrique Lara Campos <pedrohlc@chaotic.cx>"? [Y/n] y
> error: key "8A9E14A07010F7E3" could not be looked up remotely
> :: Import PGP key 3A40CB5E7E5CBC30, "UFSCar HPC Builder <hpc.ufscar@chaotic.cx>"? [Y/n] y
> error: key "3A40CB5E7E5CBC30" could not be looked up remotely
> :: Import PGP key 0706B90D37D9B881, "Pedro Henrique Lara Campos <root@pedrohlc.com>"? [Y/n] y
> error: key "0706B90D37D9B881" could not be looked up remotely
> error: required key missing from keyring
> error: failed to commit transaction (unexpected error)
> Errors occurred, no packages were upgraded.

I was getting about six " Pedro Henrique Lara Campos <root@pedrohlc.com>" is unknown trust" errors, but after various random tweaks that went away (for now).

Appreciate any help.

1 Like

The “unknown trust” error is back …

> Total Installed Size:  4345.29 MiB
> Net Upgrade Size:        38.11 MiB
> 
> :: Proceed with installation? [Y/n] y
> (170/170) checking keys in keyring                                                                        [###############################################################] 100%
> downloading required keys...
> :: Import PGP key 0706B90D37D9B881, "Pedro Henrique Lara Campos <root@pedrohlc.com>"? [Y/n] y
> (170/170) checking package integrity                                                                      [###############################################################] 100%
> error: chaotic-mirrorlist: signature from "Pedro Henrique Lara Campos <root@pedrohlc.com>" is unknown trust
> :: File /var/cache/pacman/pkg/chaotic-mirrorlist-20210620-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
> Do you want to delete it? [Y/n] y
> error: pipewire-common-git: signature from "Pedro Henrique Lara Campos <root@pedrohlc.com>" is unknown trust
> :: File /var/cache/pacman/pkg/pipewire-common-git-0.3.30.r178.ged9560fb-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
> Do you want to delete it? [Y/n] y
> error: google-chrome: key "45ECA705E3897524654A37880706B90D37D9B881" is unknown
> :: Import PGP key 45ECA705E3897524654A37880706B90D37D9B881? [Y/n] y
> error: key "45ECA705E3897524654A37880706B90D37D9B881" could not be looked up remotely
> :: File /var/cache/pacman/pkg/google-chrome-91.0.4472.114-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
> Do you want to delete it? [Y/n] y
> error: gst-plugin-pipewire-common-git: signature from "Pedro Henrique Lara Campos <root@pedrohlc.com>" is unknown trust
> :: File /var/cache/pacman/pkg/gst-plugin-pipewire-common-git-0.3.30.r178.ged9560fb-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
> Do you want to delete it? [Y/n] y
> error: pipewire-common-alsa-git: signature from "Pedro Henrique Lara Campos <root@pedrohlc.com>" is unknown trust
> :: File /var/cache/pacman/pkg/pipewire-common-alsa-git-0.3.30.r178.ged9560fb-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
> Do you want to delete it? [Y/n] y
> error: pipewire-common-jack-git: signature from "Pedro Henrique Lara Campos <root@pedrohlc.com>" is unknown trust
> :: File /var/cache/pacman/pkg/pipewire-common-jack-git-0.3.30.r178.ged9560fb-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
> Do you want to delete it? [Y/n] y
> error: pipewire-common-pulse-git: signature from "Pedro Henrique Lara Campos <root@pedrohlc.com>" is unknown trust
> :: File /var/cache/pacman/pkg/pipewire-common-pulse-git-0.3.30.r178.ged9560fb-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
> Do you want to delete it? [Y/n] y
> error: steamtinkerlaunch: signature from "Pedro Henrique Lara Campos <root@pedrohlc.com>" is unknown trust
> :: File /var/cache/pacman/pkg/steamtinkerlaunch-6.10-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
> Do you want to delete it? [Y/n] y
> error: failed to commit transaction (invalid or corrupted package)
> Errors occurred, no packages were upgraded.

Sorry, I just noticed the topic and have fix for a common keyring error. I don’t know if it helps in your case, I have no time to read what you posted.

sudo pacman -S archlinux-keyring manjaro-keyring
sudo pacman-key --populate archlinux manjaro
sudo pacman-key --refresh
sudo pacman -Syyu

OK, I did the “populate” before the -S and it seemed to work, but now…

# pacman-key --refresh
gpg: refreshing 146 keys from hkps://hkps.pool.sks-keyservers.net
gpg: keyserver refresh failed: No name

I saw in archlinux forum add:

keyserver hkp://pgp.mit.edu:11371

to /etc/pacman.d/gnupg/gpg.conf

now it refreshes, but there is an error:

> ......
> gpg: key 1EB2638FF56C0C53: no user ID for key signature packet of class 10
> gpg: key 1EB2638FF56C0C53: no user ID for key signature packet of class 10
> gpg: marginals needed: 3  completes needed: 1  trust model: pgp
> gpg: depth: 0  valid:   1  signed:  25  trust: 0-, 0q, 0n, 0m, 0f, 1u
> gpg: depth: 1  valid:  25  signed:  84  trust: 0-, 0q, 0n, 25m, 0f, 0u
> gpg: depth: 2  valid:  75  signed:  24  trust: 75-, 0q, 0n, 0m, 0f, 0u
> gpg: next trustdb check due at 2021-08-02
> gpg: keyserver refresh failed: No keyserver available
> ==> ERROR: A specified local key could not be updated from a keyserver.

#pacman -Syyu

> ......
>  steamtinkerlaunch-6.10-1-any                                                 182.3 KiB   383 KiB/s 00:00 [###############################################################] 100%
> (170/170) checking keys in keyring                                                                        [###############################################################] 100%
> downloading required keys...
> :: Import PGP key 8A9E14A07010F7E3, "Pedro Henrique Lara Campos <pedrohlc@chaotic.cx>"? [Y/n] y
> error: key "8A9E14A07010F7E3" could not be looked up remotely
> :: Import PGP key 3A40CB5E7E5CBC30, "UFSCar HPC Builder <hpc.ufscar@chaotic.cx>"? [Y/n] y
> error: key "3A40CB5E7E5CBC30" could not be looked up remotely
> :: Import PGP key 0706B90D37D9B881, "Pedro Henrique Lara Campos <root@pedrohlc.com>"? [Y/n] y
> error: key "0706B90D37D9B881" could not be looked up remotely
> error: required key missing from keyring
> error: failed to commit transaction (unexpected error)
> Errors occurred, no packages were upgraded.

… still the same

You might want to run the following:

sudo pacman-key --populate chaotic
sudo pacman -Sy chaotic-keyring
sudo pacman -Su
# pacman-key --populate chaotic
==> ERROR: The keyring file /usr/share/pacman/keyrings/chaotic.gpg does not exist.
# pacman -Sy chaotic-keyring
:: Synchronizing package databases...
 core is up to date
 extra is up to date
 community is up to date
 multilib is up to date
 chaotic-aur                                                                 1164.3 KiB   285 KiB/s 00:04 [###############################################################] 100%
resolving dependencies...
looking for conflicting packages...

Packages (1) chaotic-keyring-20210617-1

Total Download Size:   0.02 MiB
Total Installed Size:  0.02 MiB

:: Proceed with installation? [Y/n] y
:: Retrieving packages...
 chaotic-keyring-20210617-1-any                                                15.9 KiB  73.3 KiB/s 00:00 [###############################################################] 100%
(1/1) checking keys in keyring                                                                            [###############################################################] 100%
downloading required keys...
:: Import PGP key 8A9E14A07010F7E3, "Pedro Henrique Lara Campos <root@pedrohlc.com>"? [Y/n] y
error: key "8A9E14A07010F7E3" could not be looked up remotely
error: required key missing from keyring
error: failed to commit transaction (unexpected error)
Errors occurred, no packages were upgraded.

You have added a third-party repository in the past, I’m moving this to the appropriate category

There is something weird going on, that file should exist if you had Chaotic-AUR running before. :thinking:

You will probably need to follow the instructions for first time installations I guess.

Funny,

I looked at https://aur.chaotic.cx/, and tried

pacman-key --recv-key 3056513887B78AEB --keyserver

not realizing that the second line was part of the command

pacman-key --recv-key 3056513887B78AEB --keyserver keyserver.ubuntu.com

Update works now, thank you.

I solved this problem myself using the steps at https://aur.chaotic.cx:

$ pacman-key --recv-key 3056513887B78AEB --keyserver keyserver.ubuntu.com
$ pacman-key --lsign-key 3056513887B78AEB
$ pacman -U ‘https://cdn-mirror.chaotic.cx/chaotic-aur/chaotic-’{keyring,mirrorlist}’.pkg.tar.zst

Append (add to the end of the file) /etc/pacman.conf:
[chaotic-aur]
Include = /etc/pacman.d/chaotic-mirrorlist