Error in keyring - Jonas Strassel signature (July 2023 edition)

Support
1

Hi there,

since almost a week I can not update. I receive this error:

error: manjaro-sway: signature from "Jonas Strassel <info@jonas-strassel.de>" is unknown trust
:: Synchronizing package databases...
 manjaro-sway                         17.8 KiB  90.9 KiB/s 00:00 [###################################] 100%
 core                                144.6 KiB   657 KiB/s 00:00 [###################################] 100%
 extra                                 8.6 MiB  26.1 MiB/s 00:00 [###################################] 100%
 community                            29.0   B   852   B/s 00:00 [###################################] 100%
 multilib                            144.6 KiB  10.9 MiB/s 00:00 [###################################] 100%
error: manjaro-sway: signature from "Jonas Strassel <info@jonas-strassel.de>" is unknown trust
error: failed to synchronize all databases (unexpected error)
 -> error refreshing databases - exit status 1

I do very regular updates on this machine so maybe there is still something that I don’t understand how this happens.

After a little search, I discovered that this has happened before: Error in keyring - Jonas Strassel signature

However, in that thread it seems like the problem solved itself. It is almost a week now and I was thinking that it will also solve itself this time…

Do I need to report it? If yes, where do I do this?

Edit: I added Sway as an additional tag for this thread.

2

I think one of his keys got revoked recently. There was a keyring update.

Sudo pacman -Syu

usually updates the keyrings first (do not use pamac gui), but worst case scenario you can look here to do it manually

Look under Errors about Keys.

1 Like
3

I found some notes on how to refresh keys:

sudo rm -r /etc/pacman.d/gnupg
sudo pacman-key --init
sudo pacman-key --populate archlinux manjaro
sudo pacman-key --refresh-keys
sudo pacman -Syu

This took a few minutes.

After doing this, the signature is now no longer “unknown trust” but “marginal trust”:

error: manjaro-sway: signature from "Jonas Strassel <info@jonas-strassel.de>" is marginal trust
:: Synchronizing package databases...
 manjaro-sway                  17.8 KiB   186 KiB/s 00:00 [##############################] 100%
 core                         144.6 KiB   866 KiB/s 00:00 [##############################] 100%
 extra                          8.6 MiB  23.5 MiB/s 00:00 [##############################] 100%
 community                     29.0   B  1208   B/s 00:00 [##############################] 100%
 multilib                     144.6 KiB  5.23 MiB/s 00:00 [##############################] 100%
error: manjaro-sway: signature from "Jonas Strassel <info@jonas-strassel.de>" is marginal trust
error: failed to synchronize all databases (unexpected error)
 -> error refreshing databases - exit status 1

However, this got me nowhere.

So I checked the link you posted @Teo and followed the instructions on Pacman troubleshooting - Manjaro

I downloaded the manjaro-keyring file (currently named “manjaro-keyring-20230616-3-any.pkg.tar.xz”) from Index of /manjaro/pool/overlay and also the arch-keyring file (currently named “archlinux-keyring-20230704-1-any.pkg.tar.zst”) from https://mirror.easyname.at/manjaro/pool/sync/

Then I tried installing it:

$ sudo rm -r /etc/pacman.d/gnupg
$ sudo pacman-key --init
gpg: /etc/pacman.d/gnupg/trustdb.gpg: trustdb created
gpg: no ultimately trusted keys found
gpg: starting migration from earlier GnuPG versions
gpg: porting secret keys from '/etc/pacman.d/gnupg/secring.gpg' to gpg-agent
gpg: migration succeeded
==> Generating pacman master key. This may take some time.
gpg: Generating pacman keyring master key...
gpg: directory '/etc/pacman.d/gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/etc/pacman.d/gnupg/openpgp-revocs.d/0159B46CC59DE2681EBB70BECA421F321A205F8E.rev'
gpg: Done
==> Updating trust database...
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
$ sudo pacman -U manjaro-keyring-20230616-3-any.pkg.tar.xz archlinux-keyring-20230704-1-any.pkg.tar.zst 
error: manjaro-sway: key "A44C644D792767CED7941AFEABB2075D5F310CF8" is unknown
:: Import PGP key A44C644D792767CED7941AFEABB2075D5F310CF8? [Y/n] Y
error: manjaro-sway: signature from "Jonas Strassel <info@jonas-strassel.de>" is unknown trust
error: database 'manjaro-sway' is not valid (invalid or corrupted database (PGP signature))
loading packages...
warning: manjaro-keyring-20230616-3 is up to date -- reinstalling
error: failed to prepare transaction (invalid or corrupted database)

Again the same issue it seems… Am I the only manjaro-sway user having this problem?

4

No that was a common problem.
I think you missed the installation of the 2 keyrings between deletion of the old keys and init. You cannot init something that is not there.

1 Like
5

You are right, I had made a mistake before.

I went through the steps again and this time everything worked. I can finally grab those 355 packages that are waiting :slight_smile:

Thank you @Teo ! :pray:t5:

These are the exact steps I took just now:

rm manjaro-keyring* archlinux-keyring*
curl -O https://mirror.easyname.at/manjaro/pool/overlay/manjaro-keyring-20230616-3-any.pkg.tar.xz
curl -O https://mirror.easyname.at/manjaro/pool/sync/archlinux-keyring-20230704-1-any.pkg.tar.zst
ls
sudo rm -r /etc/pacman.d/gnupg
sudo pacman-key --init
sudo pacman -U manjaro-keyring-20230616-3-any.pkg.tar.xz archlinux-keyring-20230704-1-any.pkg.tar.zst
sudo pacman-key --populate manjaro archlinux

As described at Pacman troubleshooting - Manjaro

To anyone who is planning to follow these steps:
Make sure to grab the latest keyring files as described in the wiki! Also adjust the commands where the keyring files are used,

6

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.