Fresh install and upgrade gives signature errors

[xmanmonk]

Just installed KDE version, then did an upgrade, and got a number if signature errors like this one:

error: python-idna: signature from “Chih-Hsuan Yen yan12125@archlinux.org” is unknown trust
:: File /var/cache/pacman/pkg/python-idna-3.7-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PG
P signature)).
Do you want to delete it? [Y/n]

If I delete them, I get:

error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.

Also won’t install if I leave them.

Any help will be greatly appreciated. Thanks!

[Takakage]

To get the easy stuff out of the way first, did you use a recent ISO for your installation? That particular archlinux key was updated back in May.

[cscs]

I would start by removing the cache:

sudo pacman -Scc

Then try a sync/update (after sorting mirrors):

sudo pacman-mirrors -f && sudo pacman -Syu

If it still does not work and you want to fix it then you might use this approach (just checked the the URLs/filenames are still accurate):

Error: archlinux-keyring: signature from is unknown trust

You may want to clear your cache if an unknown number of the packages are corrupted. sudo pacman -Sc You could alternatively target the few with issues, ex: paccache -rvk0 archlinux-keyring manjaro-keyring Or sudo rm /var/cache/pacman/pkg/*keyring* Now for the download and apply bits, done semi-manually; Get packages: curl -O https://mirror.easyname.at/manjaro/pool/sync/archlinux-keyring-20240709-1-any.pkg.tar.zst curl -O https://mirror.easyname.at/manjaro/pool/overlay/manjaro-keyring-20…

[xmanmonk]

It’s very likely an older ISO. I thought it was recent, but now that I think about it, it was a bit ago.

I’ll try the other suggestions, but maybe have to grab a more recent ISO. Thanks!

[xmanmonk]

Yeah, none of this seemed to help, so I will likely need a fresher ISO and reinstall.

[mandar]

I ran into a similar problem when trying to update a laptop that hasn’t been run in a few months. I ran

sudo pacman -Sy --needed archlinux-keyring manjaro-keyring

to update only the keyrings first. After that, the normal sudo pacman -Syu worked without problems. In fact, since all the packages to be upgaded had already been downloaded earlier (before the update aborted with the error message that you mentioned), the update completed pretty quickly.

Hope this works for you, and that you don’t need to do a full reinstall.

[Teo]

The keys are always updated first. And Sy without u is a recipe for disaster. Don’t do it.

[xmanmonk]

I grabbed a more recent ISO and installed from it. Everything is great now! Thanks to all of you for the quick responses!