Hello, I am running into the following error, i know it has already been asked many times but I tried all the solution I could find without success.
error: tensorflow-opt-cuda: signature from "Sven-Hendrik Haase <sh@lutzhaase.com>" is invalid
:: File /var/cache/pacman/pkg/tensorflow-opt-cuda-2.15.0-4-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package (PGP signature))
I managed to update my system and all packages through pamac except this package.
I unsuccesfully ran the following steps
checked my time synchronization
changing the mirrors: sudo pacman-mirrors -g -c Germany or sudo pacman-mirrors --continent
emptying the sache running sudo pacman -Sc
deleting /var/lib/pacman/sync/*
populating and refreshing the keys (the key causing the problem is marked as not modified during the refresh):
Hi, thanks for your reply.
I tried the command and it looks like it was already deleted, the /var/cache/pacman/pkg/ looks empty
$ sudo rm /var/cache/pacman/pkg/tensorflow-opt-cuda-2.15.0-4-x86_64.pkg.tar.zst
rm: cannot remove '/var/cache/pacman/pkg/tensorflow-opt-cuda-2.15.0-4-x86_64.pkg.tar.zst': No such file or directory
$ cd /var/cache/pacman/pkg
/var/c/pa/pkg$ ls
/var/c/pa/pkg$
if i run this pamac install --overwrite tensorflow-opt-cuda my console is replying with the pamac install --help ouput.
pamac install --overwrite tensorflow-opt-cuda
Install packages from repositories, path or url
pamac install [options] <package(s),group(s)>
options:
--ignore <package(s)> : ignore a package upgrade, multiple packages can be
specified by separating them with a comma
--overwrite <glob> : overwrite conflicting files, multiple patterns can be
specified by separating them with a comma
--download-only, -w : download all packages but do not install/upgrade
anything
--dry-run, -d : only print what would be done but do not run the
transaction
--as-deps : mark all packages installed as a dependency
--as-explicit : mark all packages explicitly installed
--upgrade : check for updates
--no-upgrade : do not check for updates
--no-confirm : bypass any and all confirmation messages
I tried the entire, 4.1 section of troubleshooting invalid signature errors and I keep getting the same error. I could just disable signature checking but I think that choice will bite back eventually.
Seperately
I tried
sudo pacman-key --refresh Sven
and got
gpg: error retrieving 'sh@lutzhaase.com' via WKD: No data
gpg: error reading key: No data
gpg: key 39E4B877E62EB915: "Sven-Hendrik Haase <sh@lutzhaase.com>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
pub rsa4096 2011-09-10 [SC]
8FC15A064950A99DD1BD14DD39E4B877E62EB915
uid [marginal] Sven-Hendrik Haase <sh@lutzhaase.com>
uid [ full ] Sven-Hendrik Haase <svenstaro@archlinux.org>
uid [marginal] Sven-Hendrik Haase <svenstaro@gmail.com>
sub rsa4096 2022-07-10 [A]
sub rsa4096 2011-09-10 [E]
The issue is not with the signature, but that the mirrors only serve a corrupted, partial file.
du -sh /var/cache/pacman/pkg/tensorflow-opt-cuda-2.15.0-4-x86_64.pkg.tar.zst
161M /var/cache/pacman/pkg/tensorflow-opt-cuda-2.15.0-4-x86_64.pkg.tar.zst
Several mirrors seem to serve me this broken file, I’ve ended up downloading it from the Arch “Download From Mirror” and installing it with sudo pacman --sync.
This causes the signature error, the signature key itself is trusted (works for python-tensorflow-opt-cuda):
pacman-key --verify /var/cache/pacman/pkg/python-tensorflow-opt-cuda-2.15.0-4-x86_64.pkg.tar.zst.sig
==> Checking /var/cache/pacman/pkg/python-tensorflow-opt-cuda-2.15.0-4-x86_64.pkg.tar.zst.sig... (detached)
gpg: Signature made Fri 01 Dec 2023 12:54:06 AM PST
gpg: using RSA key 8FC15A064950A99DD1BD14DD39E4B877E62EB915
gpg: Note: trustdb not writable
gpg: Good signature from "Sven-Hendrik Haase <sh@lutzhaase.com>" [marginal]
gpg: aka "Sven-Hendrik Haase <svenstaro@gmail.com>" [marginal]
gpg: aka "Sven-Hendrik Haase <svenstaro@archlinux.org>" [full]
pacman-key --verify /var/cache/pacman/pkg/tensorflow-opt-cuda-2.15.0-4-x86_64.pkg.tar.zst.sig
==> Checking /var/cache/pacman/pkg/tensorflow-opt-cuda-2.15.0-4-x86_64.pkg.tar.zst.sig... (detached)
gpg: Signature made Fri 01 Dec 2023 12:53:50 AM PST
gpg: using RSA key 8FC15A064950A99DD1BD14DD39E4B877E62EB915
gpg: Note: trustdb not writable
gpg: BAD signature from "Sven-Hendrik Haase <sh@lutzhaase.com>" [marginal]
==> ERROR: The signature identified by /var/cache/pacman/pkg/tensorflow-opt-cuda-2.15.0-4-x86_64.pkg.tar.zst.sig could not be verified.
