i get this
Error: discord: signature from “Morgan Adamiec morganamilo@archlinux.org” is unknown trust
Failed to commit transaction:
invalid or corrupted package (PGP signature):
any idea ?
Error: discord: signature from “Morgan Adamiec morganamilo@archlinux.org” is unknown trust
Failed to commit transaction:
invalid or corrupted package (PGP signature):
Refresh the Database?
how can i refresh it ?
Top right, next to the minimize button, there is a hamburger menu.
i found it and i refresh the database then i get the same error when i trying update discord
Would you mind following these steps:
sudo rm /var/lib/pacman/sync/*
sudo pacman-key –init
sudo pacman-key –populate archlinux manjaro
sudo pacman -Syyu
A trusted user wrote a piece on how to deal with such errors more persistently. Check it out here.
Moderator edit: In the future, please use proper formatting: [HowTo] Post command output and file content as formatted text
gpg: checking the trustdb
gpg: [don’t know]: invalid packet (ctb=00)
gpg: keydb_search failed: Invalid packet
gpg: [don’t know]: invalid packet (ctb=00)
gpg: keydb_search failed: Invalid packet
gpg: [don’t know]: invalid packet (ctb=00)
gpg: keydb_search failed: Invalid packet
gpg: [don’t know]: invalid packet (ctb=00)
gpg: keydb_search failed: Invalid packet
gpg: [don’t know]: invalid packet (ctb=00)
Ok let me explain short, what happens here:
The was an update of the pgp keys and you didn’t update it first. Now you download a package which was signed with the new pgp key, but you still use the old one.
I said this:
Because a database refresh also offer you to update. Do it without selecting discord.
However… to get the newest pgp keys again, do this:
# update mirrors
sudo pacman-mirrors -c Germany # or any other Country
sudo pacman-mirrors -f 5
# remove gnupg and re-init it
sudo rm -rv /etc/pacman.d/gnupg
sudo pacman-key --init
# remove pacman cache
sudo rm -Rf /var/cache/pacman/pkg/*
# download the newest packages which contains the gpg keys
sudo mkdir -pv $HOME/.cache/pkg/
# !!! Don't import keys here... so type "n" if asking. !!!
sudo pacman -Syw archlinux-keyring manjaro-keyring --cachedir $HOME/.cache/pkg/
# remove the signatures
sudo rm -f $HOME/.cache/pkg/*.sig
# Install the packages
sudo pacman -U $HOME/.cache/pkg/*.tar.zst
# clear the cache
sudo pacman -Sc
# Remove the downloaded packages again
sudo rm -Rf $HOME/.cache/pkg/
i follow all those steps and that what i am getting
sudo pacman-mirrors -c Germany ✔
[sudo] password for kamal:
::INFO Downloading mirrors from Manjaro
::INFO => Mirror pool: https://repo.manjaro.org/mirrors.json
::INFO => Mirror status: https://repo.manjaro.org/status.json
::INFO User generated mirror list
::------------------------------------------------------------
::INFO Custom mirror file saved: /var/lib/pacman-mirrors/custom-mirrors.json
::INFO Using custom mirror file
::INFO Querying mirrors - This may take some time
0.575 Germany : https://mirror.alpix.eu/manjaro/
0.541 Germany : https://mirrors.xtom.de/manjaro/
0.553 Germany : https://ftp.gwdg.de/pub/linux/manjaro/
0.398 Germany : https://mirror.23m.com/manjaro/
0.512 Germany : http://ftp.tu-chemnitz.de/pub/linux/manjaro/
0.516 Germany : https://mirror.netcologne.de/manjaro/
0.418 Germany : https://mirror.moson.org/manjaro/
0.531 Germany : https://mirror.informatik.tu-freiberg.de/manjaro/
0.520 Germany : https://mirror.tarnkappe.info/manjaro/
::INFO Writing mirror list
::Germany : https://mirror.23m.com/manjaro/stable/$repo/$arch
::Germany : https://mirror.moson.org/manjaro/stable/$repo/$arch
::Germany : http://ftp.tu-chemnitz.de/pub/linux/manjaro/stable/$repo/$arch
::Germany : https://mirror.netcologne.de/manjaro/stable/$repo/$arch
::Germany : https://mirror.tarnkappe.info/manjaro/stable/$repo/$arch
::Germany : https://mirror.informatik.tu-freiberg.de/manjaro/stable/$repo/$arch
::Germany : https://mirrors.xtom.de/manjaro/stable/$repo/$arch
::Germany : https://ftp.gwdg.de/pub/linux/manjaro/stable/$repo/$arch
::Germany : https://mirror.alpix.eu/manjaro/stable/$repo/$arch
::INFO Mirror list generated and saved to: /etc/pacman.d/mirrorlist
::INFO To reset custom mirrorlist 'sudo pacman-mirrors -id'
::INFO To remove custom config run 'sudo pacman-mirrors -c all'
~ sudo pacman-mirrors -f 5 ✔ 8s
::INFO Downloading mirrors from Manjaro
::INFO => Mirror pool: https://repo.manjaro.org/mirrors.json
::INFO => Mirror status: https://repo.manjaro.org/status.json
::INFO Using custom mirror file
::INFO Querying mirrors - This may take some time
0.433 Germany : https://mirror.tarnkappe.info/manjaro/
0.532 Germany : https://mirror.alpix.eu/manjaro/
0.949 Germany : https://mirror.moson.org/manjaro/
0.425 Germany : http://ftp.tu-chemnitz.de/pub/linux/manjaro/
0.615 Germany : https://ftp.gwdg.de/pub/linux/manjaro/
::INFO Writing mirror list
::Germany : http://ftp.tu-chemnitz.de/pub/linux/manjaro/stable/$repo/$arch
::Germany : https://mirror.tarnkappe.info/manjaro/stable/$repo/$arch
::Germany : https://mirror.alpix.eu/manjaro/stable/$repo/$arch
::Germany : https://ftp.gwdg.de/pub/linux/manjaro/stable/$repo/$arch
::Germany : https://mirror.moson.org/manjaro/stable/$repo/$arch
::INFO Mirror list generated and saved to: /etc/pacman.d/mirrorlist
~ sudo rm -rv /etc/pacman.d/gnupg ✔ 5s
removed '/etc/pacman.d/gnupg/S.gpg-agent'
removed '/etc/pacman.d/gnupg/pubring.gpg~'
removed '/etc/pacman.d/gnupg/gpg-agent.conf'
removed '/etc/pacman.d/gnupg/openpgp-revocs.d/88A4776FCED48915A74A4BF385B9CEB20FB126E8.rev'
removed directory '/etc/pacman.d/gnupg/openpgp-revocs.d'
removed '/etc/pacman.d/gnupg/tofu.db'
removed '/etc/pacman.d/gnupg/S.gpg-agent.browser'
removed '/etc/pacman.d/gnupg/S.gpg-agent.ssh'
removed '/etc/pacman.d/gnupg/secring.gpg'
removed '/etc/pacman.d/gnupg/S.gpg-agent.extra'
removed '/etc/pacman.d/gnupg/crls.d/DIR.txt'
removed directory '/etc/pacman.d/gnupg/crls.d'
removed '/etc/pacman.d/gnupg/S.dirmngr'
removed '/etc/pacman.d/gnupg/.gpg-v21-migrated'
removed '/etc/pacman.d/gnupg/trustdb.gpg'
removed '/etc/pacman.d/gnupg/gpg.conf'
removed '/etc/pacman.d/gnupg/private-keys-v1.d/5D976B12D002B266B8A15C13C9F94A7FC3404B72.key'
removed directory '/etc/pacman.d/gnupg/private-keys-v1.d'
removed '/etc/pacman.d/gnupg/pubring.gpg'
removed directory '/etc/pacman.d/gnupg'
~ sudo pacman-key --init ✔
gpg: /etc/pacman.d/gnupg/trustdb.gpg: trustdb created
gpg: no ultimately trusted keys found
gpg: starting migration from earlier GnuPG versions
gpg: porting secret keys from '/etc/pacman.d/gnupg/secring.gpg' to gpg-agent
gpg: migration succeeded
==> Generating pacman master key. This may take some time.
gpg: Generating pacman keyring master key...
gpg: directory '/etc/pacman.d/gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/etc/pacman.d/gnupg/openpgp-revocs.d/14B3FF1059DE9D319EFBECACC4409F305A15E6EA.rev'
gpg: Done
==> Updating trust database...
gpg: marginals needed: 3 completes needed: 1 trust model: pgp
gpg: depth: 0 valid: 1 signed: 0 trust: 0-, 0q, 0n, 0m, 0f, 1u
~ sudo mkdir -pv $HOME/.cache/pkg/ ✔ 3s
mkdir: created directory '/home/kamal/.cache/pkg/'
~ sudo pacman -Syw archlinux-keyring manjaro-keyring --cachedir $HOME/.cache/pkg/ ✔
:: Synchronizing package databases...
core is up to date
extra is up to date
community is up to date
multilib is up to date
resolving dependencies...
Packages (2) archlinux-keyring-20220831-1 manjaro-keyring-20220514-2
Total Download Size: 0.00 MiB
:: Proceed with download? [Y/n] Y
(2/2) checking keys in keyring [###########################################################################] 100%
downloading required keys...
:: Import PGP key 6D42BDD116E0068F, "Christian Hesse <eworm@archlinux.org>"? [Y/n] Y
:: Import PGP key 150C200743ED46D8, "Mark Wagie <mark@manjaro.org>"? [Y/n] Y
(2/2) checking package integrity [###########################################################################] 100%
error: archlinux-keyring: signature from "Christian Hesse <eworm@archlinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/archlinux-keyring-20220831-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] Y
error: manjaro-keyring: signature from "Mark Wagie <mark@manjaro.org>" is unknown trust
:: File /var/cache/pacman/pkg/manjaro-keyring-20220514-2-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] Y
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.
~ sudo rm -f $HOME/.cache/pkg/*.sig 1 ✘ 16s
zsh: no matches found: /home/kamal/.cache/pkg/*.sig
~ sudo pacman -U $HOME/.cache/pkg/*.tar.zst 1 ✘
zsh: no matches found: /home/kamal/.cache/pkg/*.tar.zst
~ sudo pacman -Sc 1 ✘
Packages to keep:
All locally installed packages
Cache directory: /var/cache/pacman/pkg/
:: Do you want to remove all other packages from cache? [Y/n] Y
removing old packages from cache...
Database directory: /var/lib/pacman/
:: Do you want to remove unused repositories? [Y/n] Y
removing unused sync repositories...
~ sudo rm -Rf $HOME/.cache/pkg/
of course i refresh the database
then i am trying update or install any app i get this error:
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.
@marocdevelop Delete the cache:
sudo rm -rv /var/cache/pacman/pkg/*
the packages were already there.
See here:
then repeat.
You need to delete the sig files, so that it will not check the downloaded packages since you cannot at that point.
all files inside pkg already deleted
i repeat all that still get the same error
I would like to recommend that you try the trust user’s approach I mentioned before, and then come back and follow the instructions in the thread.
i follow line by line all instructions then i try to install in app still get error, to show u i can contact with u using discord or other app with share screen
Look, the problems happens here:
It don’t download anything, because it was already there:
But the signature is wrong. Delete it.
all files inside this folder already deleted chech my capture plz
And why didn’t you get any matches? That makes me think that it uses /var/cache/pacman/pkg instead of $HOME/.cache/pkg/.
I tried the steps again on my systems pretty quick and it works as it should, but you should skip the steps after downloading, so the hooks.
So like this:
~ sudo rm -rv /etc/pacman.d/gnupg ✔
removed '/etc/pacman.d/gnupg/secring.gpg'
removed '/etc/pacman.d/gnupg/trustdb.gpg'
removed '/etc/pacman.d/gnupg/gpg.conf'
removed '/etc/pacman.d/gnupg/gpg-agent.conf'
removed '/etc/pacman.d/gnupg/private-keys-v1.d/30794AD180957E13126CE24C9B4042813A6E94BA.key'
removed directory '/etc/pacman.d/gnupg/private-keys-v1.d'
removed '/etc/pacman.d/gnupg/S.gpg-agent'
removed '/etc/pacman.d/gnupg/S.gpg-agent.extra'
removed '/etc/pacman.d/gnupg/S.gpg-agent.browser'
removed '/etc/pacman.d/gnupg/S.gpg-agent.ssh'
removed '/etc/pacman.d/gnupg/.gpg-v21-migrated'
removed '/etc/pacman.d/gnupg/openpgp-revocs.d/83F1D1F43989CC56D1C9C73435AFD760407A0BF4.rev'
removed directory '/etc/pacman.d/gnupg/openpgp-revocs.d'
removed '/etc/pacman.d/gnupg/tofu.db'
removed '/etc/pacman.d/gnupg/pubring.gpg~'
removed '/etc/pacman.d/gnupg/pubring.gpg'
removed directory '/etc/pacman.d/gnupg'
~ sudo pacman-key --init ✔
gpg: /etc/pacman.d/gnupg/trustdb.gpg: trustdb created
gpg: no ultimately trusted keys found
gpg: starting migration from earlier GnuPG versions
gpg: porting secret keys from '/etc/pacman.d/gnupg/secring.gpg' to gpg-agent
gpg: migration succeeded
==> Generating pacman master key. This may take some time.
gpg: Generating pacman keyring master key...
gpg: directory '/etc/pacman.d/gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/etc/pacman.d/gnupg/openpgp-revocs.d/B43A9245F88668A70AA9890B24D0BD14A1A55F81.rev'
gpg: Done
==> Updating trust database...
gpg: marginals needed: 3 completes needed: 1 trust model: pgp
gpg: depth: 0 valid: 1 signed: 0 trust: 0-, 0q, 0n, 0m, 0f, 1u
~ sudo rm -f $HOME/.cache/pkg/* 1 ✘ 4s
~ sudo pacman -Syw archlinux-keyring manjaro-keyring --cachedir $HOME/.cache/pkg/ ✔
:: Synchronizing package databases...
core is up to date
extra is up to date
community is up to date
multilib is up to date
resolving dependencies...
Packages (2) archlinux-keyring-20220927-1 manjaro-keyring-20220514-2
Total Download Size: 1.65 MiB
:: Proceed with download? [Y/n]
:: Retrieving packages...
archlinux-keyring-20220927-1-any 1136.1 KiB 4.11 MiB/s 00:00 [########################################] 100%
manjaro-keyring-20220514-2-any 548.8 KiB 5.01 MiB/s 00:00 [########################################] 100%
Total (2/2) 1684.8 KiB 3.83 MiB/s 00:00 [########################################] 100%
(2/2) checking keys in keyring [########################################] 100%
downloading required keys...
:: Import PGP key 6D42BDD116E0068F, "Christian Hesse <eworm@archlinux.org>"? [Y/n] n
:: Import PGP key 150C200743ED46D8, "Mark Wagie <mark@manjaro.org>"? [Y/n] n
error: required key missing from keyring
error: failed to commit transaction (unexpected error)
Errors occurred, no packages were upgraded.
~ sudo rm -f $HOME/.cache/pkg/*.sig 1 ✘ 9s
~ sudo pacman -U $HOME/.cache/pkg/*.tar.zst ✔
loading packages...
warning: archlinux-keyring-20220927-1 is up to date -- reinstalling
warning: manjaro-keyring-20220514-2 is up to date -- reinstalling
resolving dependencies...
looking for conflicting packages...
Packages (2) archlinux-keyring-20220927-1 manjaro-keyring-20220514-2
Total Installed Size: 2.28 MiB
Net Upgrade Size: 0.00 MiB
:: Proceed with installation? [Y/n]
(2/2) checking keys in keyring [########################################] 100%
(2/2) checking package integrity [########################################] 100%
(2/2) loading package files [########################################] 100%
(2/2) checking for file conflicts [########################################] 100%
(2/2) checking available disk space [########################################] 100%
:: Processing package changes...
(1/2) reinstalling archlinux-keyring [########################################] 100%
==> Appending keys from archlinux.gpg...
==> Locally signing trusted keys in keyring...
-> Locally signed 6 keys.
==> Importing owner trust values...
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: inserting ownertrust of 4
gpg: setting ownertrust to 4
==> Disabling revoked keys in keyring...
can i get ur discord the share with u my screen on web version ?
Don’t fret. I’ve just suggested this: [root tip] [How To] Mitigate and prevent GPGME error when syncing your system
But @megavolt got you covered.
i follow steps but still not fixed
I get this error
/var/lib/pacman/sync sudo rm -f /var/lib/pacman/sync/* ✔
[sudo] password for kamal:
/var/lib/pacman/sync l ✔
total 8
drwxr-xr-x 2 root root 4096 Sep 28 17:35 .
drwxr-xr-x 4 root root 4096 Sep 28 17:32 ..
/var/lib/pacman/sync sudo pacman-mirrors --continent ✔
::INFO Downloading mirrors from Manjaro
::INFO => Mirror pool: https://repo.manjaro.org/mirrors.json
::INFO => Mirror status: https://repo.manjaro.org/status.json
::INFO User generated mirror list
::------------------------------------------------------------
::INFO Custom mirror file saved: /var/lib/pacman-mirrors/custom-mirrors.json
::INFO Using default mirror file
::INFO Querying mirrors - This may take some time
1.523 Kenya : https://manjaro.mirror.liquidtelecom.com/
..... South_Africa : http://mirror.is.co.za/mirrors/manjaro.org/
1.480 South_Africa : http://manjaro.mirror.ac.za/
::INFO Writing mirror list
::South_Africa : http://manjaro.mirror.ac.za/stable
::Kenya : https://manjaro.mirror.liquidtelecom.com/stable
::South_Africa : http://mirror.is.co.za/mirrors/manjaro.org/stable
::INFO Mirror list generated and saved to: /etc/pacman.d/mirrorlist
/var/lib/pacman/sync sudo pacman -Syyu ✔ 9s
:: Synchronizing package databases...
core 165.6 KiB 110 KiB/s 00:02 [#############################################################] 100%
extra 1955.5 KiB 1930 KiB/s 00:01 [#############################################################] 100%
community 7.3 MiB 5.73 MiB/s 00:01 [#############################################################] 100%
multilib 180.5 KiB 713 KiB/s 00:00 [#############################################################] 100%
:: Starting full system upgrade...
resolving dependencies...
looking for conflicting packages...
Packages (1) discord-0.0.20-1
Total Download Size: 57.46 MiB
Total Installed Size: 181.44 MiB
Net Upgrade Size: 0.00 MiB
:: Proceed with installation? [Y/n] Y
:: Retrieving packages...
discord-0.0.20-1-x86_64 57.5 MiB 9.50 MiB/s 00:06 [#############################################################] 100%
(1/1) checking keys in keyring [#############################################################] 100%
(1/1) checking package integrity [#############################################################] 100%
error: discord: signature from "Morgan Adamiec <morganamilo@archlinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/discord-0.0.20-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] Y
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.
/var/lib/pacman/sync
@megavolt thank you so much for your help, it fixed after delete .sig files
This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.