Problem with endless refreshing/skipping of pacman keys

[Molski]

I have been dealing with issue for quite some time. But I seem to update Manjaro just fine, so I have learned to live with it for a while.

I have looked at a lot of posts, wikis, and guides to attempt to fix this.

My logs are 100s of pages of entries like this:

Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 4B1DE545A801D4549BFD3FEF90CB3D62C13D4796 with UID farseerfc@archlinuxcn.org...
Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 4B1DE545A801D4549BFD3FEF90CB3D62C13D4796 with UID farseerfc@gmail.com...
Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 4BE61D684CB4E31741614E7089AA27231C530226 with UID arch@kge.pw...
Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 4BE61D684CB4E31741614E7089AA27231C530226 with UID kgizdov@gmail.com...
Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 4BE61D684CB4E31741614E7089AA27231C530226 with UID kgizdov@keybase.io...
Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 4D913AECD81726D9A6C74F0ADA6426DD215B37AD with UID guillaume@archlinux.org...
Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 4D913AECD81726D9A6C74F0ADA6426DD215B37AD with UID guillaume@alaux.net...
Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 4D913AECD81726D9A6C74F0ADA6426DD215B37AD with UID guillaume@linux.com...
Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 4FCF887689C41B09506BE8D5F3E1D5C5D30DB0AD with UID me@andreascarpino.it...
Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 4FCF887689C41B09506BE8D5F3E1D5C5D30DB0AD with UID andrea@archlinux.org...
Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 4FCF887689C41B09506BE8D5F3E1D5C5D30DB0AD with UID scarpino@kde.org...
Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 50F33E2E5B0C3D900424ABE89BDCF497A4BBCC7F with UID mail@ambrevar.xyz...
Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 50F33E2E5B0C3D900424ABE89BDCF497A4BBCC7F with UID ambrevar@gmail.com...
Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 50F33E2E5B0C3D900424ABE89BDCF497A4BBCC7F with UID pe.neidhardt@gmail.com...
Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 50F33E2E5B0C3D900424ABE89BDCF497A4BBCC7F with UID pe.neidhardt@googlemail.com...
Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 50F33E2E5B0C3D900424ABE89BDCF497A4BBCC7F with UID pierre@atlas.engineer...
Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 5134EF9EAF65F95B6BB1608E50FB9B273A9D0BB5 with UID johannes@kyriasis.com...
Apr 03 15:10:11 mbox archlinux-keyring-wkd-sync[65959]: Refreshing key 5134EF9EAF65F95B6BB1608E50FB9B273A9D0BB5 with UID demize@archlinux.org...
Apr 03 15:10:26 mbox archlinux-keyring-wkd-sync[66179]: pub   rsa8192 2014-01-14 [SC] [expires: 2024-01-05]
Apr 03 15:10:26 mbox archlinux-keyring-wkd-sync[66179]:       5134EF9EAF65F95B6BB1608E50FB9B273A9D0BB5
Apr 03 15:10:26 mbox archlinux-keyring-wkd-sync[66179]: uid           [marginal] Johannes Löthberg <johannes@kyriasis.com>
Apr 03 15:10:26 mbox archlinux-keyring-wkd-sync[66179]: uid           [  full  ] Johannes Löthberg <demize@archlinux.org>
Apr 03 15:10:26 mbox archlinux-keyring-wkd-sync[66179]: sub   rsa8192 2014-01-14 [E] [expires: 2024-01-05]
Apr 03 15:10:26 mbox archlinux-keyring-wkd-sync[66179]: sub   rsa8192 2014-09-21 [S] [expires: 2024-01-05]
Apr 03 15:10:26 mbox archlinux-keyring-wkd-sync[65959]: Refreshing key 531ECF3644A44FEA0B47DBCDE1E3CF0539448BFF with UID ike.devolder@archlinux.org...
Apr 03 15:10:42 mbox archlinux-keyring-wkd-sync[66187]: pub   ed25519 2021-10-30 [SC] [expires: 2023-10-30]
Apr 03 15:10:42 mbox archlinux-keyring-wkd-sync[66187]:       531ECF3644A44FEA0B47DBCDE1E3CF0539448BFF
Apr 03 15:10:42 mbox archlinux-keyring-wkd-sync[66187]: uid           [  full  ] Ike Devolder <ike.devolder@archlinux.org>
Apr 03 15:10:42 mbox archlinux-keyring-wkd-sync[66187]: sub   cv25519 2021-10-30 [E] [expires: 2023-10-30]
Apr 03 15:10:42 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 5357F3B111688D88C1D88119FCF2CB179205AC90 with UID eric@archlinux.org...
Apr 03 15:10:42 mbox archlinux-keyring-wkd-sync[65959]: Skipping key 535F8C0339450F054A4D282706096A6AD1CEDDAC with UID lordheavym@gmail.com...
Apr 03 15:10:42 mbox archlinux-keyring-wkd-sync[65959]: Refreshing key 535F8C0339450F054A4D282706096A6AD1CEDDAC with UID lordheavym@archlinux.org...
Apr 03 15:10:58 mbox archlinux-keyring-wkd-sync[66223]: pub   rsa2048 2011-10-30 [SC]
Apr 03 15:10:58 mbox archlinux-keyring-wkd-sync[66223]:       535F8C0339450F054A4D282706096A6AD1CEDDAC
Apr 03 15:10:58 mbox archlinux-keyring-wkd-sync[66223]: uid           [marginal] Laurent Carlier <lordheavym@gmail.com>
Apr 03 15:10:58 mbox archlinux-keyring-wkd-sync[66223]: uid           [  full  ] Laurent Carlier <lordheavym@archlinux.org>
Apr 03 15:10:58 mbox archlinux-keyring-wkd-sync[66223]: sub   rsa2048 2011-10-30 [E]
Apr 03 15:10:58 mbox archlinux-keyring-wkd-sync[65959]: Refreshing key 54C1FD273361EA514A237793F296BDE50368C6CE with UID blakkheim@archlinux.org...

It took a while to even spot it, but it does eventually seem to error like so:

Apr 03 14:57:20 mbox archlinux-keyring-wkd-sync[65230]: Skipping key C57F35931F317BF9058F834F682758BC60D8F87A with UID chris@the-brannons.com...
Apr 03 14:57:20 mbox archlinux-keyring-wkd-sync[65230]: Skipping key 1793DAD5D803A8FFD7451697BB992F9864FAD168 with UID dave@sleepmap.de...
Apr 03 14:57:20 mbox archlinux-keyring-wkd-sync[65230]: Error refreshing key 48C3B1F30DDD0FE67E516D16396E3E25BAB142C1 with UID keenerd@archlinux.org.
Apr 03 14:57:20 mbox archlinux-keyring-wkd-sync[65230]: Error refreshing key B8151B117037781095514CA7BBDFFC92306B1121 with UID andrew@archlinux.org.
Apr 03 14:57:20 mbox systemd[1]: archlinux-keyring-wkd-sync.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
Apr 03 14:57:20 mbox systemd[1]: archlinux-keyring-wkd-sync.service: Failed with result 'exit-code'.
Apr 03 14:57:20 mbox audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='unit=archlinux-keyring-wkd-sync comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
Apr 03 14:57:20 mbox systemd[1]: archlinux-keyring-wkd-sync.service: Consumed 1.545s CPU time.

I have done many things including attempting to redo the whole thing like so:

1. Moved /etc/pacman.d/gnupg and made a new empty directory.
2. Reinstalled the packages: pacman -Sy gnupg archlinux-keyring manjaro-keyring
3. Reinitialized the keyring: pacman-key --init
4. Load the signature keys: pacman-key --populate archlinux manjaro
5. Update keys: pacman-key --refresh-keys

Seems the next time the archlinux-keyring-wkd-sync.timer goes off, I’m back to square one.

[stephane]

have you before retry

sudo pacman-mirrors -c all 

[Molski]

I have redone my mirrors over a dozen times in a variety of different ways. (That was the first thing I tried many months ago, and even did it a few days ago.)

[stephane]

try this way

sudo pacman -Syy
sudo pacman -S archlinux-keyring manjaro-keyring
sudo pacman-key --init
sudo pacman-key --populate archlinux manjaro
sudo pacman-key --refresh-keys

[Molski]

@stephane

sudo pacman -Syy

I did that first, I forgot to include it.

Last attempts were following:

[HowTo] Solve Keyring Related Issues in Manjaro

Wiki Page: https://wiki.manjaro.org/index.php/Pacman_troubleshooting#Errors_about_Keys Manjaro and Arch users have a security keyring on their machine that allows them to safely download packages from the Manjaro and Arch repositories without those packages getting tampered with by a man-in-the-middle-attack. Sometimes if a user doesn’t update their system for a long time, this keyring might expire. The keyring can also get corrupted for some reason. To solve basic keyring issues do the foll…

and

Pacman troubleshooting

[stephane]

can you report

sudo pacman -Qdt
sudo pacman -Sc 

[Molski]

I started another reinitialization, so I’ll have to wait a bit for that…

[stephane]

are you using wifi / bluetooth or ethernet network ?

[Molski]

Oh I can do the first one while this happens…

pacman -Qdt
alsa-card-profiles 1:0.3.67-1
asciidoctor 2.0.18-1
celt 0.11.3-6
colord-gtk 0.3.0-2
dmd 1:2.102.2-1
dub 1.31.1-1
dynamic-wallpaper-editor 2.7-2
elfutils 0.189-1
ffmpeg4.4 4.4.3-1
gfbgraph 0.2.5-1
gnome-bluetooth 3.34.5-4
gnome-shell-extension-gamemode 8-1
gnome-shell-extension-unite 70-1
go 2:1.20.2-1
itstool 1:2.0.7-1
js78 78.15.0-4
js91 91.13.0-1
kvantum-theme-matchama 20191118-1
lib32-alsa-lib 1.2.8-1
lib32-readline 8.2.001-2
libcddb 1.3.2-7
libchamplain 0.12.21-1
libcheese 43.0-1
libcroco 0.6.13-2
libdazzle 3.44.0-1
libgweather 40.0+r87+g80e5a652-2
libofa 0.9.3-9
libvisual 0.4.1-1
manjaro-gnome-extension-settings 20230109-1
matcha-gtk-theme 20221115-1
meson 1.0.1-1
metis 5.1.0.p11-1
nm-connection-editor 1.30.0-1
pugixml 1.13-1
python-appdirs 1.4.4-7
python-cssutils 2.6.0-1
python-importlib-metadata 5.0.0-3
python-nspektr 0.4.0-2
python-pydrive 1.3.1-5
python-pysmbc 1.0.23-3
python-pyxdg 0.28-1
rest 0.8.1+r4+ge5ee6ef-1
shared-color-targets 0.1.7-4
t1lib 5.1.2-8
xcursor-breeze 5.27.3-1
zita-alsa-pcmi 0.6.1-1
zita-resampler 1.10.1-1

@stephane

are you using wifi / bluetooth or ethernet network ?

Not that it should matter but I’ve wired my house and all my workstations with CAT6 cable. (So a mix of GigE, 2.5G, and 10G Ethernet.)

[Molski]

Soon as I start the sync service, it’s back to the same thing. =(

[stephane]

may be this issue

Remove [Install] section from archlinux-keyring-wkd-sync.timer since it's...

keep these

alsa-card-profiles 1:0.3.67-1

lib32-alsa-lib 1.2.8-1
manjaro-gnome-extension-settings 20230109-1

recheck with pactree -r :

gfbgraph 0.2.5-1
gnome-bluetooth 3.34.5-4
gnome-shell-extension-gamemode 8-1
gnome-shell-extension-unite 70-1

[Molski]

@stephane

may be this issue

keep these
alsa-card-profiles 1:0.3.67-1
lib32-alsa-lib 1.2.8-1
manjaro-gnome-extension-settings 20230109-1

Keep those… Sure, so do nothing.
Do you mean remove the rest aside from those from pacman -Qdt?

My biggest regret is installing Steam. I was scared to remove all the dependencies it s41t all over my system, but I did try to clean much of the mess it made. I don’t even use Steam in Linux now, and do all Steam related stuff in Qemu with IOMMU/GPU passthrough in Windows now.

@stephane

may be this issue

archlinux-keyring-wkd-sync.timer does contain:
[Install]
WantedBy=timers.target

That post is very vague.

[mithrial]

What exactly is your issue?

If it’s about the service, why don’t you disable it?

systemctl disable --now archlinux-keyring-wkd-sync.timer

[Molski]

@mithrial

What exactly is your issue?

If it’s about the service, why don’t you disable it?

Hahah. That’s why I’ve been living with it for so long, updates seem to work fine. When I don’t want 100s of pages of log spam I disable it.

[Molski]

@mithrial

systemctl disable --now archlinux-keyring-wkd-sync.timer

I was laughing before because I was tired and delirious. Thanks for the tip, but yes I know how to manage services.

I thought “my issue” was apparent in the first post.

[Molski]

So an update to the issue of this annoying problem. So many packages have been updated since this first started happening, and me first posting here. One of them being is I was finally able to get the 6.1 LTS kernel working with all my stuff, from the 5.15 LTS. (Not that should even affect this specific problem.)

I’m 98-99% sure that this didn’t happen before… But now it stops on the exact same key every time! Even after wiping everything and rebuilding the keyring from scratch. (And reinstalling related packages, etc).

Jun 05 12:27:57 mbox archlinux-keyring-wkd-sync[14298]: Error refreshing key B8151B117037781095514CA7BBDFFC92306B1121 with UID andrew@archlinux.org.
Jun 05 12:27:57 mbox systemd[1]: archlinux-keyring-wkd-sync.service: Main process exited, code=exited, status=1/FAILURE
Jun 05 12:27:57 mbox systemd[1]: archlinux-keyring-wkd-sync.service: Failed with result 'exit-code'.
Jun 05 12:27:57 mbox audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='unit=archlinux-keyring-wkd-sync comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
Jun 05 12:27:57 mbox systemd[1]: archlinux-keyring-wkd-sync.service: Consumed 1.570s CPU time.
Jun 05 12:27:57 mbox kernel: audit: type=1131 audit(1685989677.659:562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='unit=archlinux-keyring-wkd-sync comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'

[cscs]

I didnt have this timer or service running.

But I went ahead and started it to see … and yup, 4 failed attempts/restarts from error with one key:

 archlinux-keyring-wkd-sync[55638]: gpg: error retrieving 'andrew@archlinux.org' via WKD: No data
 archlinux-keyring-wkd-sync[55638]: gpg: error reading key: No data
 archlinux-keyring-wkd-sync[50539]: Error refreshing key B8151B117037781095514CA7BBDFFC92306B1121 with UID andrew@archlinux.org.
 archlinux-keyring-wkd-sync[51522]: gpg: error retrieving 'andrew@archlinux.org' via WKD: No data
 archlinux-keyring-wkd-sync[51522]: gpg: error reading key: No data
 archlinux-keyring-wkd-sync[51717]: Error refreshing key B8151B117037781095514CA7BBDFFC92306B1121 with UID andrew@archlinux.org.
 archlinux-keyring-wkd-sync[52645]: gpg: error retrieving 'andrew@archlinux.org' via WKD: No data
 archlinux-keyring-wkd-sync[52645]: gpg: error reading key: No data
 archlinux-keyring-wkd-sync[52797]: Error refreshing key B8151B117037781095514CA7BBDFFC92306B1121 with UID andrew@archlinux.org. 
 archlinux-keyring-wkd-sync[53520]: gpg: error retrieving 'andrew@archlinux.org' via WKD: No data
 archlinux-keyring-wkd-sync[53520]: gpg: error reading key: No data
 archlinux-keyring-wkd-sync[53846]: Error refreshing key B8151B117037781095514CA7BBDFFC92306B1121 with UID andrew@archlinux.org.