Problem with keyrings

Having an issue upgrading to the signature for the package intel-gmmlib:

Error: intel-gmmlib: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust

I tried

sudo pacman -S manjaro-keyring
sudo pacman-key --populate manjaro

but neither this (as it looks like I had already updated the key-ring post October), nor sudo pacman -S archlinux-keyring resolve this.

1 Like

Have you tried… :backhand_index_pointing_down:

sudo pacman -Suu archlinux-keyring

…?

Not sure why that would be different, but I just tried it and got the same (essentially) error:

:: Proceed with installation? [Y/n] y
(934/934) checking keys in keyring                                                                                 [#####################################################################] 100%
(934/934) checking package integrity                                                                               [#####################################################################] 100%
error: intel-gmmlib: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/intel-gmmlib-22.9.0-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] n
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.                                                                                                                                             
man pacman

… would tell you why. :grin:

No, it’s a different error. Similar, but different. As such, the problem lies with Arch — as was the case already, but if even downgrading the keyring doesn’t work, then they had better get to work on getting their signatures sorted.

The problem is apparently caused by one or several Arch maintainers stepping down, and their signatures being revoked as a result.

1 Like

Disagree – it’s the same error, but thanks for the info otherwise.

Would be helpful if it were added to the notes for the stable update pinned above.

1 Like

Considering that it’s only a temporary problem and not expected to recur across different update generations, I don’t think it would be warranted. :wink:

:backhand_index_pointing_up: This is indeed the best solution.

2 Likes

Worth noting, for this to work, one has to have installed the ā€œrightā€ arch keyring, which currently is the January version, and not the latest from February. So a downgrade with sudo pacman -Syuu might be needed.

4 Likes

Apparently the signature issue has been resolved in archlinux-keyring 20260131-1, it’s just that the latest stable release of Manjaro provides an older version.

1 Like

We had to, because the newer version was the corrupted one.

2 Likes

Do you have a source for the claim that the newer keyring is corrupted?

Yes. All you need to do is look at the amount of recent threads regarding signatures of marginal trust.

1 Like

That’s exactly what I’ve done – that does not mean the keyring is ā€œcorruptedā€.

However, the newer keyring fixed at least one maintainer’s level of trust, and newer ones will fix others.

Current archlinux-keyring versions for reference:

mbn info archlinux-keyring -q
Branch         : archlinux
Name           : archlinux-keyring
Version        : 20260206-1
Repository     : core
Build Date     : Fri 06 Feb 2026 19:04:57
Packager       : Christian Hesse <eworm@archlinux.org>
Branch         : unstable
Name           : archlinux-keyring
Version        : 20260206-1
Repository     : core
Build Date     : Fri 06 Feb 2026 19:04:57
Packager       : Christian Hesse <eworm@archlinux.org>
Branch         : testing
Name           : archlinux-keyring
Version        : 20260206-1
Repository     : core
Build Date     : Fri 06 Feb 2026 19:04:57
Packager       : Christian Hesse <eworm@archlinux.org>
Branch         : stable
Name           : archlinux-keyring
Version        : 20260107-2.0
Repository     : core
Build Date     : Fri 11 Feb 2026 05:39:58
Packager       : Mark Wagie <mark@manjaro.org>
2 Likes

I guess we still have to wait for the next Manjaro stable update in the coming weeks for this to be resolved. I still think this should be mentioned in the notes above, as it is currently preventing an upgrade unless one is willing to downgrade the keyring or reduce the trust level.

Several recommended fixes have been presented, and are approved by the Manjaro Team. Therefore, the problem is fixable and there are no negative side-effects.

What recommended fix? You gave me one suggestion that didn’t work, told me the problem is on the Arch side, which means I can’t upgrade until the upgraded key-ring package filters into Manjaro Stable.

Here’s the problem… :backhand_index_pointing_down:

https://www.reddit.com/r/archlinux/comments/1rafluf/pacman_and_keyring_issues/

And here’s how you fix it, for good, until the next update — bundled or otherwise. :backhand_index_pointing_down:

sudo rm -rf /etc/pacman.d/gnupg
sudo pacman-key --init && sudo pacman-key --populate archlinux manjaro && sudo pacman -Syu
6 Likes

Yes, the ERROR is that pacman is rejecting the package because the signature has marginal trust.

So you can first just refresh keys until it works… pacman-key --refresh-keys and you can also have a go at manually trusting the key… so:

pacman-key --list-sigs | grep -B2 -A2 "Daniel Bermond"
sudo pacman-key --edit-key <KEY-ID>

You can type ā€˜trust’ and select an appropriate level, then quit.

Now, reinstall both keyrings:

sudo pacman -S manjaro-keyring archlinux-keyring
sudo pacman-key --populate archlinux manjaro
sudo pacman-key --refresh-keys

Something else - not recommended for regular use - is to use --overwrite or --noconfirm, but it’s really better to wait a bit until the issue resolves itself.

Let us know how you get on :wink:

2 Likes

OK thanks, I got this to work.

I think the key part was:

sudo rm -rf /etc/pacman.d/gnupg

sudo pacman-key --init

pamac info shows that archlinux-keyring version is 20260107-2.0 (which it was when I first tried to upgrade a couple of weeks ago).

4 Likes