Pacman broken keys

Support
1

Alright so Sublime strikes again. They post bad information for pgp keys on their site and it breaks pacman. I know this has been discussed before but the solution I have found didn’t work. I removed all references to Sublime in pacman.conf and ran # pacman -Scc && pacman-mirrors -f && pacman -Syyu only to still be getting:

:: Import PGP key 7A4E76095D8A52E4, “Antonio Rojas arojas@archlinux.org”? [Y/n] y
error: key “7A4E76095D8A52E4” could not be imported
error: required key missing from keyring
error: failed to commit transaction (unexpected error)
Errors occurred, no packages were upgraded.

2

XY problem - you think you know what the problem is …

No they don’t. Likely the only 3rd part repo never causing issues.

This is an issue with the arch keyring

This may happen when to long time has passed between updates.

You don’t say - the solution?

Then you have not done your search sufficiently.

The short version goes along the lines of

rm -rf /etc/pacman.d/gnupg
pacman -U https://mirror.easyname.at/manjaro/pool/sync/archlinux-keyring-20230130-1-any.pkg.tar.zst
pacman -U https://mirror.easyname.at/manjaro/pool/overlay/manjaro-keyring-20221028-4-any.pkg.tar.xz
3

Or perhaps I had already been though all that. But you are still right that it isn’t the third part repo. And it had been a entire day between updates so…

Regardless that isn’t the solution as this is new errors:

[mathew@Tuesday ~]$ sudo pacman -Syu
[sudo] password for mathew: 
:: Synchronizing package databases...
 core is up to date
 extra is up to date
 community is up to date
 multilib is up to date
:: Starting full system upgrade...
 there is nothing to do
[mathew@Tuesday ~]$ sudo pacman -S kdenlive
resolving dependencies...
looking for conflicting packages...

Packages (6) frei0r-plugins-2.2.0-1  gavl-1.4.0-6  libebur128-1.2.6-1  mlt-7.12.0-2  qt5-networkauth-5.15.8-1  kdenlive-22.12.1-2

Total Installed Size:  89.92 MiB

:: Proceed with installation? [Y/n] y
(6/6) checking keys in keyring                                                                                                                          [##############################################################################################] 100%
downloading required keys...
:: Import PGP key 7A4E76095D8A52E4, "Antonio Rojas <arojas@archlinux.org>"? [Y/n] y
error: key "7A4E76095D8A52E4" could not be imported
error: required key missing from keyring
error: failed to commit transaction (unexpected error)
Errors occurred, no packages were upgraded.
[mathew@Tuesday ~]$ rm -rf /etc/pacman.d/gnupg
rm: cannot remove '/etc/pacman.d/gnupg/secring.gpg': Permission denied
rm: cannot remove '/etc/pacman.d/gnupg/trustdb.gpg': Permission denied
rm: cannot remove '/etc/pacman.d/gnupg/gpg.conf': Permission denied
rm: cannot remove '/etc/pacman.d/gnupg/gpg-agent.conf': Permission denied
rm: cannot remove '/etc/pacman.d/gnupg/private-keys-v1.d': Permission denied
rm: cannot remove '/etc/pacman.d/gnupg/.gpg-v21-migrated': Permission denied
rm: cannot remove '/etc/pacman.d/gnupg/openpgp-revocs.d': Permission denied
rm: cannot remove '/etc/pacman.d/gnupg/tofu.db': Permission denied
rm: cannot remove '/etc/pacman.d/gnupg/crls.d': Permission denied
rm: cannot remove '/etc/pacman.d/gnupg/pubring.gpg~': Permission denied
rm: cannot remove '/etc/pacman.d/gnupg/pubring.gpg': Permission denied
rm: cannot remove '/etc/pacman.d/gnupg/S.dirmngr': Permission denied
rm: cannot remove '/etc/pacman.d/gnupg/S.gpg-agent': Permission denied
rm: cannot remove '/etc/pacman.d/gnupg/S.gpg-agent.extra': Permission denied
rm: cannot remove '/etc/pacman.d/gnupg/S.gpg-agent.browser': Permission denied
rm: cannot remove '/etc/pacman.d/gnupg/S.gpg-agent.ssh': Permission denied
[mathew@Tuesday ~]$ sudo rm -rf /etc/pacman.d/gnupg
[mathew@Tuesday ~]$ sudo pacman -U https://mirror.easyname.at/manjaro/pool/sync/archlinux-keyring-20230130-1-any.pkg.tar.zst
:: Retrieving packages...
 archlinux-keyring-20230130-1-any.pkg.tar.zst failed to download
error: failed retrieving file 'archlinux-keyring-20230130-1-any.pkg.tar.zst' from mirror.easyname.at : SSL connection timeout
warning: failed to retrieve some files
[mathew@Tuesday ~]$ sudo pacman -U https://mirror.easyname.at/manjaro/pool/overlay/manjaro-keyring-20221028-4-any.pkg.tar.xz
:: Retrieving packages...
 manjaro-keyring-20221028-4-any.pkg.tar.xz failed to download
error: failed retrieving file 'manjaro-keyring-20221028-4-any.pkg.tar.xz' from mirror.easyname.at : SSL connection timeout
warning: failed to retrieve some files
[mathew@Tuesday ~]$ sudo rm -f /var/lib/pacman/sync/*
[mathew@Tuesday ~]$ sudo pacman -Syyu
:: Synchronizing package databases...
 core                                                                                                                       163.5 KiB   244 KiB/s 00:01 [##############################################################################################] 100%
 extra                                                                                                                     1857.9 KiB  2004 KiB/s 00:01 [##############################################################################################] 100%
 community                                                                                                                    7.5 MiB  6.44 MiB/s 00:01 [##############################################################################################] 100%
 multilib                                                                                                                   169.4 KiB   255 KiB/s 00:01 [##############################################################################################] 100%
:: Starting full system upgrade...
 there is nothing to do
[mathew@Tuesday ~]$ sudo pacman -S kdenlive
resolving dependencies...
looking for conflicting packages...

Packages (6) frei0r-plugins-2.2.0-1  gavl-1.4.0-6  libebur128-1.2.6-1  mlt-7.12.0-2  qt5-networkauth-5.15.8-1  kdenlive-22.12.1-2

Total Installed Size:  89.92 MiB

:: Proceed with installation? [Y/n] y
(6/6) checking keys in keyring                                                                                                                          [##############################################################################################] 100%
warning: Public keyring not found; have you run 'pacman-key --init'?
downloading required keys...
error: keyring is not writable
error: keyring is not writable
error: required key missing from keyring
error: failed to commit transaction (unexpected error)
Errors occurred, no packages were upgraded.
[mathew@Tuesday ~]$ sudo pacman-key --init
gpg: /etc/pacman.d/gnupg/trustdb.gpg: trustdb created
gpg: no ultimately trusted keys found
gpg: starting migration from earlier GnuPG versions
gpg: porting secret keys from '/etc/pacman.d/gnupg/secring.gpg' to gpg-agent
gpg: migration succeeded
==> Generating pacman master key. This may take some time.
gpg: Generating pacman keyring master key...
gpg: directory '/etc/pacman.d/gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/etc/pacman.d/gnupg/openpgp-revocs.d/D808E198C1F4E3D02F4634229A6FC8DB22E33AAD.rev'
gpg: Done
==> Updating trust database...
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
[mathew@Tuesday ~]$ sudo pacman -S kdenlive
resolving dependencies...
looking for conflicting packages...

Packages (6) frei0r-plugins-2.2.0-1  gavl-1.4.0-6  libebur128-1.2.6-1  mlt-7.12.0-2  qt5-networkauth-5.15.8-1  kdenlive-22.12.1-2

Total Installed Size:  89.92 MiB

:: Proceed with installation? [Y/n] y
(6/6) checking keys in keyring                                                                                                                          [##############################################################################################] 100%
downloading required keys...
:: Import PGP key 7A4E76095D8A52E4, "Antonio Rojas <arojas@archlinux.org>"? [Y/n] y
:: Import PGP key F99FFE0FEAE999BD, "Allan McRae <allan@archlinux.org>"? [Y/n] y
(6/6) checking package integrity                                                                                                                        [##############################################################################################] 100%
error: qt5-networkauth: signature from "Antonio Rojas <arojas@archlinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/qt5-networkauth-5.15.8-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: libebur128: signature from "Antonio Rojas <arojas@archlinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/libebur128-1.2.6-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: mlt: signature from "Antonio Rojas <arojas@archlinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/mlt-7.12.0-2-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: gavl: signature from "Allan McRae (Developer) <allan@archlinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/gavl-1.4.0-6-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: frei0r-plugins: signature from "Antonio Rojas <arojas@archlinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/frei0r-plugins-2.2.0-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: kdenlive: signature from "Antonio Rojas <arojas@archlinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/kdenlive-22.12.1-2-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.
[mathew@Tuesday ~]$
4

Then you have other issues to attend to

I deliberately left out sudo - to ensure you didn’t copy paste … ensuring you know what you are doing …

You have an issue with your connection to that specific mirror

That is because you didn’t install the keyrings - due to timeout

This is because you didn’t install the keyrings after initializing the keyring

Pacman is very picky when it comes to keyrings - did you disable the archlinux-keyring-wkd-sync.timer?

Try downloading the keyrings to your home

curl -O https://mirror.easyname.at/manjaro/pool/sync/archlinux-keyring-20230130-1-any.pkg.tar.zst
curl -O https://mirror.easyname.at/manjaro/pool/overlay/manjaro-keyring-20221028-4-any.pkg.tar.xz

Then install them using

pacman -U archlinux-keyring-20230130-1-any.pkg.tar.zst manjaro-keyring-20221028-4-any.pkg.tar.xz
5

That did the trick it seems my VPN was blocking the download of the keyring.

6

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.