Marginal Trust invalid or corrupt package Error while updating manjaro

[Char]

while updating today I faced with these problem

error: highway: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/highway-1.3.0-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: libjxl: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/libjxl-0.11.1-5-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: libvpl: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/libvpl-2.16.0-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: libmfx: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/libmfx-23.2.2-5-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: gsfonts: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/gsfonts-20200910-6-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: mujs: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/mujs-1.3.8-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: pkgfile: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/pkgfile-25-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.

I tried to look solution in this forum and found this link but it’s no longer accessible
https://archived.forum.manjaro.org/t/issues-with-signature-is-marginal-trust-or-invalid-or-corrupted-package/33268

I ran these commands

sudo pacman -Sy archlinux-keyring manjaro-keyring
sudo pacman-key --populate archlinux manjaro

Also I ran this command but it was taking lot of time

sudo pacman-key --refresh-keys

Errors I posted above are lot less now but I’m not sure how this happen and I must mention when I ran

sudo pacman-key --refresh-keys

it was taking lot of time so I interrupted it and does it take longer to referesh keys ? The text on terminal was so much so these are the new error

[Mirdarthos]

Hi @Char,

@Char

sudo pacman-key --refresh-keys

As far as I know this does, indeed, take a long time. At least it did for me the last time I used it. So try again, but do not interrupt it.

[Char]

ok I try it again

[Teo]

You might want to

sudo pacman -Syuu

Note the double u.

[Char]

@Teo

You might want to

sudo pacman -Syuu

what the difference ? I thought it can cause dependency hell

[anon33601770]

u, --sysupgrade

Upgrades all packages that are out-of-date. Each currently-installed package will be examined and upgraded if a newer package exists. A report of all packages to upgrade will be presented, and the operation will not proceed without user confirmation. Dependencies are automatically resolved at this level and will be installed/upgraded if necessary.

Pass this option twice to enable package downgrades; in this case, pacman will select sync packages whose versions do not match with the local versions. This can be useful when the user switches from a testing repository to a stable one.

[Mirdarthos]

You usually, under normal circumstances shouldn’t use it. It allows the downgrading of packages, which could be bad, since Manjaro is a rolling-release distribution. But this is not a normal circumstance, is it?

[Char]

Ok I didn’t interrupt it this time , and as far as I can recall before running these commands

sudo pacman -Sy archlinux-keyring manjaro-keyring
sudo pacman-key --populate archlinux manjaro
sudo pacman-key --refresh-keys

Errors were 16 but after running these commands now errors are 7

[Mirdarthos]

Please provide said errors here.

[Char]

I hope so , should I try it?

@Mirdarthos

Please provide said errors here.

error: highway: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/highway-1.3.0-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: libjxl: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/libjxl-0.11.1-5-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: libvpl: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/libvpl-2.16.0-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: libmfx: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/libmfx-23.2.2-5-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: gsfonts: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/gsfonts-20200910-6-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: mujs: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/mujs-1.3.8-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: pkgfile: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/pkgfile-25-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.

[Mirdarthos]

I think you’ll benefit from this:

[HowTo] Work around gpg verification issue on left behind systems

Difficulty: ★☆☆☆☆ This script is the result of people here in the forum having problems with Manjaro installations that haven’t been updated for more than 2 months or booting an old ISO plus installing it which is older than 2 months. I was a bit tired of explaining how to solve that issue and created a script, which does the job. Methods Method 1 - Basic Remove lock files of pamac and pacman Refresh Package Database Populate local keyrings to the GnuPG Database of pacman Refresh GnuPG Data…

Edit:

If the tutorial fixes it, that’s absolutely wonderful. But I am embarrassed to say I just saw your issue is PGP while the tutorial is GPG. So, my advice would be, at least for this round, if you happen across those errors again, don’t delete the files and see what happens?

[Char]

Actually I removed the entire keyring folder

sudo rm -rf /etc/pacman.d/gnupg

then Re-initialize

sudo pacman-key --init

then

sudo pacman-key --populate archlinux manjaro

and at last

sudo pacman -Syu

And it has updated successfully hopefully I don’t face any issue while I restart my laptop

[Mirdarthos]

Here’s my hoping with you.

[Char]

It worked , but I’m facing new issue which is not related to my original post , I’ll make separate thread for it later when I get time . Thank you

[coffeecat]

I was facing the same issue today. I tried every level of cleanup in this linked thread and did not have success. Char’s own solution did seem to be the only thing to work.

[tenkovin]

Not a manjaro user, but faced exact same errors on Arch. This solution is the only one helpful from what i’ve seen around forums. Thank you!

[Natetronn]

This worked for me as well, thanks!