When I try to update my databases it will complain

I have fresh installed Manjaro linux XFCE edition. The problem is when I try to update my databases it will complain

$ sudo pacman -Sy
:: Synchronizing package databases...
 core                                                                                  167.1 KiB   105 KiB/s 00:02
[####################################################################] 100%
 extra                                                                                1879.6 KiB   170 KiB/s 00:11 [####################################################################] 100%
 community                                                                               7.5 MiB  83.8 KiB/s 01:32 [####################################################################] 100%
 multilib                                                                              171.0 KiB  41.7 KiB/s 00:04 [####################################################################] 100%

error: failed retrieving file 'core.db' from manjaro.c3sl.ufpr.br : OpenSSL SSL_read: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac, errno 0
error: failed retrieving file 'core.db' from ftp.cuhk.edu.hk : Failed to connect to ftp.cuhk.edu.hk port 80 after 5304 ms: Connection timed out
error: failed retrieving file 'extra.db' from manjaro.c3sl.ufpr.br : OpenSSL SSL_read: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac, errno 0
error: failed retrieving file 'extra.db' from ftp.cuhk.edu.hk : Failed to connect to ftp.cuhk.edu.hk port 80 after 5202 ms: Connection timed out
error: failed retrieving file 'extra.db' from ftp.nluug.nl : OpenSSL SSL_read: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac, errno 0
error: failed retrieving file 'community.db' from manjaro.c3sl.ufpr.br : OpenSSL SSL_read: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac, errno 0
warning: too many errors from manjaro.c3sl.ufpr.br, skipping for the remainder of this transaction
error: failed retrieving file 'community.db' from ftp.cuhk.edu.hk : Failed to connect to ftp.cuhk.edu.hk port 80 after 5202 ms: Connection timed out
warning: too many errors from ftp.cuhk.edu.hk, skipping for the remainder of this transaction
error: failed retrieving file 'community.db' from ftp.nluug.nl : OpenSSL SSL_read: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac, errno 0
error: failed retrieving file 'multilib.db' from ftp.nluug.nl : OpenSSL SSL_read: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac, errno 0
warning: too many errors from ftp.nluug.nl, skipping for the remainder of this transaction

Not only that but even the default browser won’t correctly, it will also complain “Error reading data from TLS socket: Decryption has failed”

But the odd thing is that this works on another network not just mine, but also it works on other machines with the same network my computer is reporting an error at. Oddly enough, using the same network, by using usb tethering using my phone also works. I can’t understand what the issue is.

Here are my drivers

$ lspci -k
00:00.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Renoir/Cezanne Root Complex
	Subsystem: Lenovo Device 3814
00:00.2 IOMMU: Advanced Micro Devices, Inc. [AMD] Renoir/Cezanne IOMMU
	Subsystem: Lenovo Device 3815
00:01.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Renoir PCIe Dummy Host Bridge
00:01.1 PCI bridge: Advanced Micro Devices, Inc. [AMD] Renoir PCIe GPP Bridge
	Subsystem: Lenovo Device 3886
	Kernel driver in use: pcieport
00:01.2 PCI bridge: Advanced Micro Devices, Inc. [AMD] Renoir/Cezanne PCIe GPP Bridge
	Subsystem: Lenovo Device 3886
	Kernel driver in use: pcieport
00:02.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Renoir PCIe Dummy Host Bridge
00:02.1 PCI bridge: Advanced Micro Devices, Inc. [AMD] Renoir/Cezanne PCIe GPP Bridge
	Subsystem: Lenovo Device 3886
	Kernel driver in use: pcieport
00:02.2 PCI bridge: Advanced Micro Devices, Inc. [AMD] Renoir/Cezanne PCIe GPP Bridge
	Subsystem: Lenovo Device 3886
	Kernel driver in use: pcieport
00:08.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Renoir PCIe Dummy Host Bridge
00:08.1 PCI bridge: Advanced Micro Devices, Inc. [AMD] Renoir Internal PCIe GPP Bridge to Bus
	Subsystem: Advanced Micro Devices, Inc. [AMD] Renoir Internal PCIe GPP Bridge to Bus
	Kernel driver in use: pcieport
00:08.2 PCI bridge: Advanced Micro Devices, Inc. [AMD] Renoir Internal PCIe GPP Bridge to Bus
	Subsystem: Advanced Micro Devices, Inc. [AMD] Renoir Internal PCIe GPP Bridge to Bus
	Kernel driver in use: pcieport
00:14.0 SMBus: Advanced Micro Devices, Inc. [AMD] FCH SMBus Controller (rev 51)
	Subsystem: Lenovo Device 3842
	Kernel driver in use: piix4_smbus
	Kernel modules: i2c_piix4, sp5100_tco
00:14.3 ISA bridge: Advanced Micro Devices, Inc. [AMD] FCH LPC Bridge (rev 51)
	Subsystem: Lenovo Device 3840
00:18.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Cezanne Data Fabric; Function 0
00:18.1 Host bridge: Advanced Micro Devices, Inc. [AMD] Cezanne Data Fabric; Function 1
00:18.2 Host bridge: Advanced Micro Devices, Inc. [AMD] Cezanne Data Fabric; Function 2
00:18.3 Host bridge: Advanced Micro Devices, Inc. [AMD] Cezanne Data Fabric; Function 3
	Kernel driver in use: k10temp
	Kernel modules: k10temp
00:18.4 Host bridge: Advanced Micro Devices, Inc. [AMD] Cezanne Data Fabric; Function 4
00:18.5 Host bridge: Advanced Micro Devices, Inc. [AMD] Cezanne Data Fabric; Function 5
00:18.6 Host bridge: Advanced Micro Devices, Inc. [AMD] Cezanne Data Fabric; Function 6
00:18.7 Host bridge: Advanced Micro Devices, Inc. [AMD] Cezanne Data Fabric; Function 7
01:00.0 VGA compatible controller: NVIDIA Corporation GA106M [GeForce RTX 3060 Mobile / Max-Q] (rev a1)
	Subsystem: Lenovo Device 3a80
	Kernel driver in use: nvidia
	Kernel modules: nouveau, nvidia_drm, nvidia
01:00.1 Audio device: NVIDIA Corporation GA106 High Definition Audio Controller (rev a1)
	Kernel driver in use: snd_hda_intel
	Kernel modules: snd_hda_intel
02:00.0 Non-Volatile memory controller: SK hynix Gold P31 SSD
	Subsystem: SK hynix Gold P31 SSD
	Kernel driver in use: nvme
03:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 15)
	DeviceName: Realtek RTL8111E Ethernet LOM
	Subsystem: Lenovo Device 3900
	Kernel driver in use: r8169
	Kernel modules: r8169
04:00.0 Network controller: MEDIATEK Corp. MT7921 802.11ax PCI Express Wireless Network Adapter
	Subsystem: Lenovo Device e0bc
	Kernel driver in use: mt7921e
	Kernel modules: mt7921e
05:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Cezanne (rev c6)
	Subsystem: Lenovo Device 3a80
	Kernel driver in use: amdgpu
	Kernel modules: amdgpu
05:00.2 Encryption controller: Advanced Micro Devices, Inc. [AMD] Family 17h (Models 10h-1fh) Platform Security Processor
	Subsystem: Lenovo Device 382a
	Kernel driver in use: ccp
	Kernel modules: ccp
05:00.3 USB controller: Advanced Micro Devices, Inc. [AMD] Renoir/Cezanne USB 3.1
	Subsystem: Lenovo Device 3828
	Kernel driver in use: xhci_hcd
	Kernel modules: xhci_pci
05:00.4 USB controller: Advanced Micro Devices, Inc. [AMD] Renoir/Cezanne USB 3.1
	Subsystem: Lenovo Device 3829
	Kernel driver in use: xhci_hcd
	Kernel modules: xhci_pci
05:00.5 Multimedia controller: Advanced Micro Devices, Inc. [AMD] ACP/ACP3X/ACP6x Audio Coprocessor (rev 01)
	Subsystem: Lenovo Device 382c
	Kernel modules: snd_pci_acp3x, snd_rn_pci_acp3x, snd_pci_acp5x
05:00.6 Audio device: Advanced Micro Devices, Inc. [AMD] Family 17h/19h HD Audio Controller
	Subsystem: Lenovo Device 382b
	Kernel driver in use: snd_hda_intel
	Kernel modules: snd_hda_intel
06:00.0 SATA controller: Advanced Micro Devices, Inc. [AMD] FCH SATA Controller [AHCI mode] (rev 81)
	Subsystem: Lenovo Device 383f
	Kernel driver in use: ahci
06:00.1 SATA controller: Advanced Micro Devices, Inc. [AMD] FCH SATA Controller [AHCI mode] (rev 81)
	Subsystem: Lenovo Device 383f
	Kernel driver in use: ahci

I am using the “5.15.60-1-MANJARO” kernel.
Thanks

First thought would a partial update. Edit /etc/pacman.d/mirrorlist and switch to non-encrypted http. Do a full upgrade and switch back.

I commented all the https mirrors in the database, but it still doesn’t work

$ sudo pacman -Syyu
:: Synchronizing package databases...
 core                                                                                  167.1 KiB   173 KiB/s 00:01 [####################################################################] 100%
 extra                                                                                1879.6 KiB   222 KiB/s 00:08 [####################################################################] 100%
 community                                                                               7.5 MiB   108 KiB/s 01:11 [####################################################################] 100%
 multilib                                                                              171.0 KiB   230 KiB/s 00:01 [####################################################################] 100%
error: failed retrieving file 'core.db' from ftp.cuhk.edu.hk : Failed to connect to ftp.cuhk.edu.hk port 80 after 5396 ms: Connection timed out
error: failed retrieving file 'core.db' from mirror.dacentec.com : Failed to connect to mirror.dacentec.com port 80 after 5348 ms: Connection timed out
error: failed retrieving file 'extra.db' from ftp.cuhk.edu.hk : Failed to connect to ftp.cuhk.edu.hk port 80 after 5202 ms: Connection timed out
error: failed retrieving file 'extra.db' from mirror.dacentec.com : Failed to connect to mirror.dacentec.com port 80 after 5202 ms: Connection timed out
error: failed retrieving file 'community.db' from ftp.cuhk.edu.hk : Failed to connect to ftp.cuhk.edu.hk port 80 after 5202 ms: Connection timed out
warning: too many errors from ftp.cuhk.edu.hk, skipping for the remainder of this transaction
error: failed retrieving file 'community.db' from mirror.dacentec.com : Failed to connect to mirror.dacentec.com port 80 after 5202 ms: Connection timed out
warning: too many errors from mirror.dacentec.com, skipping for the remainder of this transaction
error: could not parse package description file 'dosfstools-4.2-2/desc' from db 'core'
error: could not parse package description file 'e2fsprogs-1.46.5-4/desc' from db 'core'
error: could not parse package description file 'expat-2.5.0-1/desc' from db 'core'
error: core database is inconsistent: name mismatch on package iptables
error: core database is inconsistent: name mismatch on package iptables-nft
error: core database is inconsistent: name mismatch on package libgcrypt
error: core database is inconsistent: name mismatch on package linux-firmware-whence
error: core database is inconsistent: name mismatch on package logrotate
error: core database is inconsistent: name mismatch on package lsb-release
error: core database is inconsistent: name mismatch on package lto-dump
error: core database is inconsistent: name mismatch on package lvm2
error: core database is inconsistent: name mismatch on package lz4
error: core database is inconsistent: name mismatch on package lzo
error: core database is inconsistent: name mismatch on package m4
error: core database is inconsistent: name mismatch on package make
error: core database is inconsistent: name mismatch on package man-db
error: core database is inconsistent: name mismatch on package manjaro-hotfixes
error: core database is inconsistent: name mismatch on package manjaro-keyring
error: core database is inconsistent: name mismatch on package manjaro-release
error: core database is inconsistent: name mismatch on package manjaro-system
error: core database is inconsistent: name mismatch on package ncurses
error: core database is inconsistent: name mismatch on package netctl
error: core database is inconsistent: name mismatch on package nettle
error: core database is inconsistent: name mismatch on package net-tools
error: core database is inconsistent: name mismatch on package nfsidmap
error: core database is inconsistent: name mismatch on package nfs-utils
error: core database is inconsistent: name mismatch on package nilfs-utils
error: core database is inconsistent: name mismatch on package npth
error: core database is inconsistent: name mismatch on package nspr
error: core database is inconsistent: name mismatch on package nss
error: core database is inconsistent: name mismatch on package openldap
error: core database is inconsistent: name mismatch on package openresolv
error: core database is inconsistent: name mismatch on package openssh
error: core database is inconsistent: name mismatch on package openssl-1.0
error: core database is inconsistent: name mismatch on package openssl-1.1
error: core database is inconsistent: name mismatch on package openssl
error: core database is inconsistent: name mismatch on package p11-kit
error: core database is inconsistent: name mismatch on package pacman
error: core database is inconsistent: name mismatch on package pacman-mirrors
error: core database is inconsistent: name mismatch on package pacman-static
error: core database is inconsistent: name mismatch on package pam
error: core database is inconsistent: name mismatch on package sqlite-tcl
error: could not read db 'core' (Damaged tar archive)
error: could not read db 'extra' (Damaged tar archive)
error: could not read db 'community' (Damaged tar archive)
error: could not read db 'multilib' (gzip decompression failed)
error: could not parse package description file 'dosfstools-4.2-2/desc' from db 'core'
error: could not parse package description file 'e2fsprogs-1.46.5-4/desc' from db 'core'
error: could not parse package description file 'expat-2.5.0-1/desc' from db 'core'
...alot more

Cannot connect to the called mirrors also… maybe refresh the mirrors:

sudo pacman-mirrors --geoip

From stackoverflow:

There are a bunch of possibilities here. If you’re using a proxy, non-default antivirus or firewall, or a TLS MITM device on your network, that is probably the problem. Those devices are known to have a variety of problems in their TLS implementations, some of which impact security. You should try without them installed, or use a different network.

I ran sudo pacman-mirrors --geoip though it failed to update alot of the mirrors because of the same error(SSL Decryption error), but still updated and written some.

When trying to update this happened

$ sudo pacman -Syyu
:: Synchronizing package databases...
 core                                                                                  167.1 KiB  72.7 KiB/s 00:02 [####################################################################] 100%
 extra                                                                                1879.6 KiB   362 KiB/s 00:05 [####################################################################] 100%
 community                                                                               7.5 MiB   360 KiB/s 00:21 [####################################################################] 100%
 multilib                                                                              171.0 KiB   342 KiB/s 00:01 [####################################################################] 100%
error: failed retrieving file 'extra.db' from manjaro.lucassymons.net : OpenSSL SSL_read: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac, errno 0
error: failed retrieving file 'extra.db' from mirror.ibakerserver.pt : OpenSSL SSL_read: SSL_ERROR_SYSCALL, errno 0
error: failed retrieving file 'community.db' from manjaro.lucassymons.net : OpenSSL SSL_read: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac, errno 0
error: failed retrieving file 'community.db' from mirror.ibakerserver.pt : OpenSSL SSL_read: SSL_ERROR_SYSCALL, errno 0
error: failed retrieving file 'multilib.db' from manjaro.lucassymons.net : OpenSSL SSL_read: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac, errno 0
warning: too many errors from manjaro.lucassymons.net, skipping for the remainder of this transaction
error: failed retrieving file 'multilib.db' from mirror.ibakerserver.pt : OpenSSL SSL_read: SSL_ERROR_SYSCALL, errno 0
warning: too many errors from mirror.ibakerserver.pt, skipping for the remainder of this transaction
:: Some packages should be upgraded first...
resolving dependencies...
looking for conflicting packages...

Packages (2) archlinux-keyring-20221110-1  manjaro-keyring-20221028-4

Total Download Size:   1.64 MiB
Total Installed Size:  2.28 MiB
Net Upgrade Size:      0.02 MiB

:: Proceed with installation? [Y/n] 
:: Retrieving packages...
 archlinux-keyring-20221110-1-any                                                     1140.1 KiB   364 KiB/s 00:03 [####################################################################] 100%
 manjaro-keyring-20221028-4-any                                                        541.6 KiB   326 KiB/s 00:02 [####################################################################] 100%
 Total (2/2)                                                                          1681.7 KiB   332 KiB/s 00:05 [####################################################################] 100%
(2/2) checking keys in keyring                                                                                     [####################################################################] 100%
(2/2) checking package integrity                                                                                   [####################################################################] 100%
error: archlinux-keyring: signature from "Christian Hesse (Arch Linux Package Signing) <arch@eworm.de>" is invalid
:: File /var/cache/pacman/pkg/archlinux-keyring-20221110-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: manjaro-keyring: signature from "Philip MĂĽller (Called Little) <philm@manjaro.org>" is invalid
:: File /var/cache/pacman/pkg/manjaro-keyring-20221028-4-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.

:: Starting full system upgrade...
error: could not read db 'extra' (Damaged tar archive)
error: could not read db 'extra' (Damaged tar archive)
error: could not read db 'community' (Damaged tar archive)
error: could not read db 'community' (Damaged tar archive)
error: could not read db 'multilib' (Damaged tar archive)

I didn’t install anything or update anything after installing manjaro and I hesitate blaming it on my network since it works with other computers using manjaro.

You could apply same logic with manjaro, if it works on other computers. So hardware then? NIC?

Does running and updating live iso work? Does some other live iso work? If you have the same problem, then you can start going after hardware.

Or test it other way around: with different NIC, eg. wifi usb if you have it.

Definitely not.

  • manjaro.lucassymons.net → Australia
  • mirror.ibakerserver.pt → France

Geoip would only use Servers of your country…

https://repo.manjaro.org/

I recently tried Archcraft and it also has the same problem. The problem is very specific and weird let me put it this way

The things that i tried and their results
→ Connecting my computer to my home network i.e the current case(doesn’t work)
→ Connecting my computer to my home network using USB Thethering(works)
→ Connecting my computer to a different network, a portable wireless network(that uses 4G) and (it does work)
→ Connecting other computers(older than the current) with my home network(using the same Manjaro installation)(works)
→ Connecting my computer using Ethernet to my home network also works

It is a really weird problem and seems to not only affect manjaro but also other arch distros(or at least Archcraft)

I guess that happened because there are no manjaro servers in the country I live in, but I literaly executed the same command

sudo pacman-mirrors --geoip

So you are saying that ethernet works, but wifi not in your home network?

Yeah Ethernet works but wifi doesn’t work

Possible that the wifi connection is unstable… I have a script that checks if there are dropped packets:

Can be also run like that:

curl -s https://notabug.org/megavolt/random-scripts/raw/master/pinglog.sh | sh
  • It prints the log in the terminal and write it to a file ping.log.
  • It checks the ping to the gateway address (normally your router) and to ping.manjaro.org.

Give it a try.

Then obviously your NIC or motherboard is defective.

Thanks for the script and here is the output

$ curl -s https://notabug.org/megavolt/random-scripts/raw/master/pinglog.sh | sh
[2022-11-18 18:52:31] (192.168.1.1 5) 5 packets transmitted, 5 received, 0% packet loss, time 4006ms
[2022-11-18 18:52:31] (ping.manjaro.org 5) 5 packets transmitted, 0 received, 100% packet loss, time 4041ms
[2022-11-18 18:52:50] (192.168.1.1 5) 5 packets transmitted, 5 received, 0% packet loss, time 4006ms
[2022-11-18 18:52:50] (ping.manjaro.org 5) 5 packets transmitted, 0 received, 100% packet loss, time 4047ms
[2022-11-18 18:53:08] (192.168.1.1 5) 5 packets transmitted, 5 received, 0% packet loss, time 4006ms
[2022-11-18 18:53:08] (ping.manjaro.org 5) 5 packets transmitted, 0 received, 100% packet loss, time 4046ms
[2022-11-18 18:53:26] (192.168.1.1 5) 5 packets transmitted, 5 received, 0% packet loss, time 4005ms
[2022-11-18 18:53:26] (ping.manjaro.org 5) 5 packets transmitted, 0 received, 100% packet loss, time 4054ms

But keep in mind that it works on another network(pocket wifi that works with 4G) via wifi. So i think the motherboard and the NIC have no problem :confused:

So…

  1. Router Connection with IP works.
  2. Internet Connection not.

Possible problem:

  1. DNS resolution failed.
  2. Router blocks your internet connection of your wifi mac address (ethernet has another mac address)

Try this:

curl -v "ping.manjaro.org"
1 Like
curl -v "ping.manjaro.org"
*   Trying 116.203.91.91:80...
* Connected to ping.manjaro.org (116.203.91.91) port 80 (#0)
> GET / HTTP/1.1
> Host: ping.manjaro.org
> User-Agent: curl/7.84.0
> Accept: */*
> 
* Mark bundle as not supporting multiuse
< HTTP/1.1 200 OK
< Server: nginx
< Date: Fri, 18 Nov 2022 19:10:06 GMT
< Content-Type: text/html
< Content-Length: 612
< Last-Modified: Tue, 17 Apr 2018 15:22:36 GMT
< Connection: keep-alive
< ETag: "5ad6113c-264"
< Accept-Ranges: bytes
< 
<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>
* Connection #0 to host ping.manjaro.org left intact

Very strange… you can receive the webpage, but packets get 100% lost? Please let the script run a bit longer… Only an unstable internet connection would make sense here.