Error: manjaro-firmware: key "Ramon Buldó <ramon@manjaro.org>" is disabled

See title, this is the error message, from the latest “manjaro-firmware” installed today

if I try to use buildiso it stops with the above error, also trying to reinstall the file it produces the same error.

try cleaning your build root


Edit - perhaps your build mirror has not yet synced (manjaro-tools.conf default to manjaro.moson.eu)

I just built an iso - no issues

buildiso -p lxqt-kwin -b stable -k linux515
 ...
==> Done [Build ISO]
 --> Time compress_images: 3.45 minutes
==> Finished building [lxqt-kwin]
 --> Time make_profile: 6.73 minutes

perhaps that is because I the used a not up-to-date mirror.

For some unknown reasons it has been deactivated… I can also not reinstall it due this issue. No idea, but you can activate it again, if really needed:

sudo pacman-key --list-keys "ramon@manjaro.org"
sudo pacman-key --edit-key "77DC01C9971AC3C39A0626F72C089F09AC97B894"
gpg> enable
gpg> quit

Then it works again.

2 Likes

Don’t you get this message in unstable branch?

$ sudo pacman-key --edit-key "77DC 01C9 971A C3C3 9A06  26F7 2C08 9F09 AC97 B894" 
pub  rsa4096/2C089F09AC97B894
     erzeugt: 2014-09-28  verfällt: niemals     Nutzung: SC  
     Vertrauen: marginal      Gültigkeit: vollständig
*** Hinweis: Dieser Schlüssel ist abgeschaltet
sub  rsa4096/33B09366293AD067
     erzeugt: 2014-09-28  verfällt: niemals     Nutzung: E   
[vollständig] (1). Ramon Buldó <ramon@manjaro.org>

:arrow_down:

*** Hinweis: Dieser Schlüssel ist abgeschaltet
*** Hint: This Key has been disabled.

No

$ sudo pacman-key --list-keys "ramon@manjaro.org"
pub   rsa4096 2014-09-28 [SC]
      77DC01C9971AC3C39A0626F72C089F09AC97B894
uid           [  full  ] Ramon Buldó <ramon@manjaro.org>
sub   rsa4096 2014-09-28 [E]
$ sudo pacman-key --edit-key "77DC 01C9 971A C3C3 9A06  26F7 2C08 9F09 AC97 B894" 

pub  rsa4096/2C089F09AC97B894
     created: 2014-09-28  expires: never       usage: SC  
     trust: marginal      validity: full
sub  rsa4096/33B09366293AD067
     created: 2014-09-28  expires: never       usage: E   
[  full  ] (1). Ramon Buldó <ramon@manjaro.org>
$ pacman-mirrors -G
unstable
$ sudo pacman -Syu
:: Synchronizing package databases...
 core                                                                 170,8 KiB  6,18 MiB/s 00:00 [##########################################################] 100%
 extra                                                               1862,5 KiB  90,9 MiB/s 00:00 [##########################################################] 100%
 community                                                              7,0 MiB  99,7 MiB/s 00:00 [##########################################################] 100%
 multilib                                                             182,7 KiB  59,5 MiB/s 00:00 [##########################################################] 100%
 sublime-text                                                        1846,0   B  4,55 KiB/s 00:00 [##########################################################] 100%
:: Starting full system upgrade...
 there is nothing to do

True… I see no error there… since is already installed, but if I try to reinstall it:

$ pacman-mirrors -aG                                                          1 ✘  5s  
unstable

$ LANG=C pamac reinstall manjaro-firmware   
Preparing...
Warning: manjaro-firmware-20160419-1 is up to date -- reinstalling
Resolving dependencies...
Checking inter-conflicts...

To reinstall (1):
  manjaro-firmware  20160419-1    extra  567.2 kB

Total download size: 567.2 kB

Apply transaction ? [y/N] y
Herunterladen von manjaro-firmware (20160419-1) gestartet                                           
Herunterladen von manjaro-firmware (20160419-1) beendet                                             
Überprüfe Schlüsselring...                                                                     [1/1]
Integrität wird überprüft...                                                                   [1/1]
Fehler: manjaro-firmware: Schlüssel "Ramon Buldó <ramon@manjaro.org>" ist deaktiviert
Entferne ungültige Dateien und wiederhole Vorgang...
Abhängigkeiten werden aufgelöst...
Interne Konflikte werden überprüft...
Herunterladen von manjaro-firmware (20160419-1) gestartet                                           
Herunterladen von manjaro-firmware (20160419-1) beendet                                             
Überprüfe Schlüsselring...                                                                     [1/1]
Integrität wird überprüft...                                                                   [1/1]
Fehler: manjaro-firmware: Schlüssel "Ramon Buldó <ramon@manjaro.org>" ist deaktiviert
Error: Vorgang konnte nicht abgeschlossen werden: Ungültiges oder beschädigtes Paket (PGP-Signatur):

I only sync a couple of times a week - or if I need a specific package I don’t have - even for a brief session - so I don’t get every single change.

$ sudo pacman -S manjaro-firmware
warning: manjaro-firmware-20160419-1 is up to date -- reinstalling
resolving dependencies...
looking for conflicting packages...

Packages (1) manjaro-firmware-20160419-1

Total Installed Size:  2,44 MiB
Net Upgrade Size:      0,00 MiB

:: Proceed with installation? [Y/n] 
(1/1) checking keys in keyring                                                                    [##########################################################] 100%
(1/1) checking package integrity                                                                  [##########################################################] 100%
(1/1) loading package files                                                                       [##########################################################] 100%
(1/1) checking for file conflicts                                                                 [##########################################################] 100%
(1/1) checking available disk space                                                               [##########################################################] 100%
:: Processing package changes...
(1/1) reinstalling manjaro-firmware                                                               [##########################################################] 100%
:: Running post-transaction hooks...
(1/1) Arming ConditionNeedsUpdate...

Version seems to be correct:

LANG=C pamac info manjaro-keyring 
Name                  : manjaro-keyring
Version               : 20220503-1
Description           : Manjaro PGP keyring
URL                   : http://manjaro.org
Licenses              : GPL
Repository            : core
Installed Size        : 83.4 kB
Groups                : --
Depends On            : --
Optional Dependencies : --
Required By           : pacman
Optional For          : --
Provides              : --
Replaces              : --
Conflicts With        : --
Packager              : Manjaro-ARM Build Server <build@manjaro.org>
Build Date            : Tue May  3 09:04:24 2022
Install Date          : Tue May  3 16:51:16 2022
Install Reason        : Installed as a dependency for another package
Validated By          : Signature
Backup files          : --

your keyring is built by manjaro-arm - so your system must be Manjaro ARM

mine is is


$ pamac info manjaro-keyring
Name                  : manjaro-keyring
Version               : 20220421-1
Description           : Manjaro PGP keyring
URL                   : http://manjaro.org
Licenses              : GPL
Repository            : core
Installed Size        : 187,1 kB
Groups                : --
Depends On            : --
Optional Dependencies : --
Required By           : pacman
Optional For          : --
Provides              : --
Replaces              : --
Conflicts With        : --
Packager              : Philip Müller <philm@manjaro.org>
Build Date            : tor 21 apr 2022 03:11:51 CEST
Install Date          : lør 23 apr 2022 10:10:13 CEST
Install Reason        : Installed as a dependency for another package
Validated By          : Signature
Backup files          : --
$ inxi -S
System:
  Host: tiger Kernel: 5.15.35-1-MANJARO arch: x86_64 bits: 64
    Desktop: KDE Plasma v: 5.24.4 Distro: Manjaro Linux
2 Likes

I’m not running ARM… so seems the wrong package has been pushed today :wink:

$ inxi -S 
System:
  Host: manjaro Kernel: 5.15.36-1-MANJARO arch: x86_64 bits: 64
    Desktop: GNOME v: 42.0 Distro: Manjaro Linux

My guess is - you hit a sync at the wrong time - the maintainer made an error and before the error was corrected you synced your system.

ok another try:

[user@manjaro ~]$ mbn update --force
:: Branch: archlinux
:: Paketdatenbanken werden synchronisiert …
 core                            155,9 KiB   791 KiB/s 00:00 [################################] 100%
 extra                          1699,9 KiB  6,08 MiB/s 00:00 [################################] 100%
 community                         6,6 MiB  6,49 MiB/s 00:01 [################################] 100%
:: Branch: unstable
:: Paketdatenbanken werden synchronisiert …
 core                            170,5 KiB   528 KiB/s 00:00 [################################] 100%
 extra                          1862,8 KiB  4,97 MiB/s 00:00 [################################] 100%
 community                         7,0 MiB  6,64 MiB/s 00:01 [################################] 100%
 multilib                        182,5 KiB  2,79 MiB/s 00:00 [################################] 100%
:: Branch: testing
:: Paketdatenbanken werden synchronisiert …
 core                            170,8 KiB   534 KiB/s 00:00 [################################] 100%
 extra                          1864,1 KiB  5,35 MiB/s 00:00 [################################] 100%
 community                         7,0 MiB  6,26 MiB/s 00:01 [################################] 100%
 multilib                        182,7 KiB  2,66 MiB/s 00:00 [################################] 100%
:: Branch: stable
:: Paketdatenbanken werden synchronisiert …
 core                            169,1 KiB   466 KiB/s 00:00 [################################] 100%
 extra                          1854,2 KiB  5,03 MiB/s 00:00 [################################] 100%
 community                         6,9 MiB  6,36 MiB/s 00:01 [################################] 100%
 multilib                        182,0 KiB  2,54 MiB/s 00:00 [################################] 100%
[user@manjaro ~]$ mbn info manjaro-keyring --quiet
Branch         : unstable
Name           : manjaro-keyring
Version        : 20220503-1
Repository     : core
Build Date     : Tue 03 May 2022 09:04:24 
Packager       : Manjaro-ARM Build Server <build@manjaro.org>
Branch         : testing
Name           : manjaro-keyring
Version        : 20220503-1
Repository     : core
Build Date     : Tue 03 May 2022 09:04:24 
Packager       : Manjaro-ARM Build Server <build@manjaro.org>
Branch         : stable
Name           : manjaro-keyring
Version        : 20220503-1
Repository     : core
Build Date     : Tue 03 May 2022 09:04:24 
Packager       : Manjaro-ARM Build Server <build@manjaro.org>
[user@manjaro ~]$ sudo pacman-mirrors --status
Local mirror status for unstable branch
Mirror #1   --  01:59   Germany  https://mirror.23m.com/manjaro/
Mirror #2   --  13:52   Germany  https://mirrors.xtom.de/manjaro/
Mirror #3   --  12:52   Germany  http://ftp.tu-chemnitz.de/pub/linux/manjaro/
Mirror #4   OK  00:02   Germany  https://mirror.alpix.eu/manjaro/
Mirror #5   OK  00:12   Germany  https://mirror.moson.org/manjaro/
Mirror #6   --  00:49   Germany  https://ftp.gwdg.de/pub/linux/manjaro/
Mirror #7   OK  00:02   Germany  https://manjaro.moson.eu/
Mirror #8   --  01:52   Germany  https://ftp.halifax.rwth-aachen.de/manjaro/
Mirror #9   --  06:59   Germany  https://mirror.netcologne.de/manjaro/

No change… ok such a mistake could happen on unstable. Nevermind. Hopefully it gets fixed soon.

But is not only unstable right now.

But I don’t get it: Why is this key of ramon@manjaro.org disabled on ARM?

I’m, on unstable on a desktop and even reinstalling manjaro-keyring it is still showing
“Manjaro-ARM Build Server <build@manjaro.org

Your system will always use the first mirror even if out-of-sync

On an x86_64 system - replace your system keyring with the one from the x86_64 repo using

sudo pacman -U https://manjaro.moson.eu/pool/overlay/manjaro-keyring-20220421-1-any.pkg.tar.zst

Because there is no need for that key on ARM. Remember that ARM is - compared to Ramon - a new Manjaro development which Ramon never contributed to as packager - which makes the removal of the key a valid decision.

I’ll mention another possible cause for this.

The keyring package has been updated to revoke ramons key. We have a CI system in place, that automatically builds the package for ARM. But since it’s an any architecture package, the maintainer might have thought that uploaded the package created on the ARM CI to the x64 would not be an issue. And I think he would be right. There should be no issue.

The issue, to me at least, seems to be that although Ramon has not packaged anything for years, there are still packages in the repository, which he has signed, like the manjaro-firmware package. So these will now fail to install, since the key has been revoked. An oversight when updating the keyring package to revoke Ramons key, I’m sure.

There is no ARM specific manjaro-keyring package. We have our own manjaro-arm-keyring package and use the regular manjaro-keyring package as well.

And the reason why @linux-aarhus does not have this issue, is likely that he has not updated/sync his repo databases yet, because the one in the repository is 20220503. At least here on my Stable branch install.

1 Like

Will readd the key …

Yes it is now the right one but guess what ramon@manjaro.org is still disabled.

You are correct - my mirror is not up-to-date

1 Like

flower_of_life@gmx.net” also disabled and effects “manjaro tools”