Tensorflow-opt-cuda signature error

Try the following:

pamac install --overwrite tensorflow-opt-cuda

:man_shrugging:

if i run this pamac install --overwrite tensorflow-opt-cuda my console is replying with the pamac install --help ouput.

pamac install --overwrite tensorflow-opt-cuda 
Install packages from repositories, path or url

pamac install [options] <package(s),group(s)>

options:
  --ignore <package(s)> : ignore a package upgrade, multiple packages can be
                          specified by separating them with a comma
  --overwrite <glob>    : overwrite conflicting files, multiple patterns can be
                          specified by separating them with a comma
  --download-only, -w   : download all packages but do not install/upgrade
                          anything
  --dry-run, -d         : only print what would be done but do not run the
                          transaction
  --as-deps             : mark all packages installed as a dependency
  --as-explicit         : mark all packages explicitly installed
  --upgrade             : check for updates
  --no-upgrade          : do not check for updates
  --no-confirm          : bypass any and all confirmation messages

Am I missing something ?

No. I did, sorry. The correct command, I think, is:

pamac install --overwrite='/usr/include/tensorflow,/usr/include/tensorflow/*,/usr/lib/libtensorflow.so.*' tensorflow-opt-cuda

If this doesn’t work, I suspect your key. But provide the full output in that case, please.

It didnt work, same mistake

$ pamac install --overwrite='/usr/include/tensorflow,/usr/include/tensorflow/*,/usr/lib/libtensorflow.so.*' tensorflow-opt-cuda

Preparing...
Synchronizing package databases...
Refreshing AUR...                                                               
Resolving dependencies...                                                       
Checking inter-conflicts...

To upgrade (1):
  tensorflow-opt-cuda  2.15.0-4  (2.15.0-2)  extra  168,2 MB

Total download size: 168,2 MB
Total installed size: 150,2 kB

Apply transaction ? [y/N] y
==== AUTHENTICATING FOR org.manjaro.pamac.commit ====
Authentication is required to install, update, or remove packages
Authenticating as: Mayeul SGC (mayeul)
Password: 
==== AUTHENTICATION COMPLETE ====
Download of tensorflow-opt-cuda (2.15.0-4) started                              
Download of tensorflow-opt-cuda (2.15.0-4) finished                             
Checking keyring...                                                        [1/1]
Checking integrity...                                                      [1/1]
Error: tensorflow-opt-cuda: signature from "Sven-Hendrik Haase <sh@lutzhaase.com>" is invalid
Removing invalid files and retrying...
Resolving dependencies...
Checking inter-conflicts...
Download of tensorflow-opt-cuda (2.15.0-4) started                              
Download of tensorflow-opt-cuda (2.15.0-4) finished                             
Checking keyring...                                                        [1/1]
Checking integrity...                                                      [1/1]
Error: tensorflow-opt-cuda: signature from "Sven-Hendrik Haase <sh@lutzhaase.com>" is invalid
Error: Failed to commit transaction: invalid or corrupted package (PGP signature):

Then…

:man_shrugging:

Sorry

:sob:

Try this:

export URL="https://notabug.org/megavolt/random-scripts/raw/master/fix-gpg-pacman.sh"
bash <(curl -s "$URL") --ask

See: [HowTo] Work around gpg verification issue on left behind systems

didn’t work, same error, all 3 different modes …

yo so its actually because his signature is outdated… Here, Arch Linux - python-tensorflow-opt-cuda 2.15.0-4 (x86_64) If you look at signature date its 12/1/2023 which was 11 days ago…

Yo, no it’s actually not.

That was my only idea of what it might have been, what is the actual problem then?

pacman/Package signing - ArchWiki should work.

That’s the date the package was signed by the maintainer. His signing key is fine.

I tried the entire, 4.1 section of troubleshooting invalid signature errors and I keep getting the same error. I could just disable signature checking but I think that choice will bite back eventually.
Seperately
I tried

sudo pacman-key --refresh Sven

and got

gpg: error retrieving 'sh@lutzhaase.com' via WKD: No data
gpg: error reading key: No data
gpg: key 39E4B877E62EB915: "Sven-Hendrik Haase <sh@lutzhaase.com>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
pub   rsa4096 2011-09-10 [SC]
      8FC15A064950A99DD1BD14DD39E4B877E62EB915
uid           [marginal] Sven-Hendrik Haase <sh@lutzhaase.com>
uid           [  full  ] Sven-Hendrik Haase <svenstaro@archlinux.org>
uid           [marginal] Sven-Hendrik Haase <svenstaro@gmail.com>
sub   rsa4096 2022-07-10 [A]
sub   rsa4096 2011-09-10 [E]

The issue is not with the signature, but that the mirrors only serve a corrupted, partial file.

du -sh /var/cache/pacman/pkg/tensorflow-opt-cuda-2.15.0-4-x86_64.pkg.tar.zst
161M    /var/cache/pacman/pkg/tensorflow-opt-cuda-2.15.0-4-x86_64.pkg.tar.zst

But it should be 747.9 MB.

Several mirrors seem to serve me this broken file, I’ve ended up downloading it from the Arch “Download From Mirror” and installing it with sudo pacman --sync.

This causes the signature error, the signature key itself is trusted (works for python-tensorflow-opt-cuda):

pacman-key --verify /var/cache/pacman/pkg/python-tensorflow-opt-cuda-2.15.0-4-x86_64.pkg.tar.zst.sig
==> Checking /var/cache/pacman/pkg/python-tensorflow-opt-cuda-2.15.0-4-x86_64.pkg.tar.zst.sig... (detached)
gpg: Signature made Fri 01 Dec 2023 12:54:06 AM PST
gpg:                using RSA key 8FC15A064950A99DD1BD14DD39E4B877E62EB915
gpg: Note: trustdb not writable
gpg: Good signature from "Sven-Hendrik Haase <sh@lutzhaase.com>" [marginal]
gpg:                 aka "Sven-Hendrik Haase <svenstaro@gmail.com>" [marginal]
gpg:                 aka "Sven-Hendrik Haase <svenstaro@archlinux.org>" [full]

pacman-key --verify /var/cache/pacman/pkg/tensorflow-opt-cuda-2.15.0-4-x86_64.pkg.tar.zst.sig
==> Checking /var/cache/pacman/pkg/tensorflow-opt-cuda-2.15.0-4-x86_64.pkg.tar.zst.sig... (detached)
gpg: Signature made Fri 01 Dec 2023 12:53:50 AM PST
gpg:                using RSA key 8FC15A064950A99DD1BD14DD39E4B877E62EB915
gpg: Note: trustdb not writable
gpg: BAD signature from "Sven-Hendrik Haase <sh@lutzhaase.com>" [marginal]
==> ERROR: The signature identified by /var/cache/pacman/pkg/tensorflow-opt-cuda-2.15.0-4-x86_64.pkg.tar.zst.sig could not be verified.
2 Likes

Thank you! I did the same and now I have it all installed.

Just for reference:

Arch Linux

$ pacman -Si tensorflow-opt-cuda
Name            : tensorflow-opt-cuda
Version         : 2.15.0-4
Download Size   : 747.86 MiB
Installed Size  : 2926.89 MiB
Packager        : Sven-Hendrik Haase <svenstaro@archlinux.org>
Build Date      : Wed 29 Nov 2023 08:24:34 PM PST

Manjaro

$ pacman -Si tensorflow-opt-cuda
Name            : tensorflow-opt-cuda
Version         : 2.15.0-4
Download Size   : 160.43 MiB
Installed Size  : 2926.89 MiB
Packager        : Sven-Hendrik Haase <svenstaro@archlinux.org>
Build Date      : Wed 29 Nov 2023 08:24:34 PM PST
1 Like

Nice catch.

That’s a beautiful proof that the signatures are important!

1 Like

same issue for me but with cuda package, also did the arch “download from mirror” as a workaround.

what actually causes the file to be corrupted like this?

Just to be clear, the pacman --sync is creating the error or it is part of your installation process ? From my understanding installing without sync after would leave the package not managed for updates, right ?