Unable to update (key issues / corrupted packages)

How do I do that?

[giulio@pavilion ~]$ sudo rm -r /etc/pacman.d/gnupg 
[sudo] password for giulio: 
[giulio@pavilion ~]$ sudo pacman-key --init
gpg: /etc/pacman.d/gnupg/trustdb.gpg: trustdb created
gpg: no ultimately trusted keys found
gpg: starting migration from earlier GnuPG versions
gpg: porting secret keys from '/etc/pacman.d/gnupg/secring.gpg' to gpg-agent
gpg: migration succeeded
==> Generating pacman master key. This may take some time.
gpg: Generating pacman keyring master key...
gpg: key 91F167007000E29D marked as ultimately trusted
gpg: directory '/etc/pacman.d/gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/etc/pacman.d/gnupg/openpgp-revocs.d/9195BCC2E2532482A8CBF40191F167007000E29D.rev'
gpg: Done
==> Updating trust database...
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
[giulio@pavilion ~]$ sudo pacman-key --populate archlinux manjaro
==> Appending keys from archlinux.gpg...
gpg: no valid OpenPGP data found.
==> Appending keys from manjaro.gpg...
gpg: error reading key: No public key
gpg: error reading key: No public key
==> Locally signing trusted keys in keyring...
  -> Locally signed 22 keys.
==> Importing owner trust values...
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
==> Disabling revoked keys in keyring...
  -> Disabled 3 keys.
==> Updating trust database...
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:  22  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:  22  signed:   1  trust: 0-, 0q, 0n, 22m, 0f, 0u
gpg: next trustdb check due at 2022-04-20
[giulio@pavilion ~]$ sudo pacman -Sy gnupg archlinux-keyring manjaro-keyring
:: Synchronizing package databases...
 core is up to date
 extra is up to date
 community is up to date
 multilib is up to date
warning: archlinux-keyring-20211028-1 is up to date -- reinstalling
warning: manjaro-keyring-20210910-2 is up to date -- reinstalling
resolving dependencies...
looking for conflicting packages...

Packages (3) archlinux-keyring-20211028-1  gnupg-2.2.32-1  manjaro-keyring-20210910-2

Total Download Size:    3,33 MiB
Total Installed Size:  11,49 MiB
Net Upgrade Size:       1,38 MiB

:: Proceed with installation? [Y/n] y
:: Retrieving packages...
 gnupg-2.2.32-1-x86_64                          2,4 MiB  1492 KiB/s 00:02 [##########################################] 100%
 archlinux-keyring-20211028-1-any             979,1 KiB  2,48 MiB/s 00:00 [##########################################] 100%
 Total (2/2)                                    3,3 MiB  1584 KiB/s 00:02 [##########################################] 100%
(3/3) checking keys in keyring                                            [##########################################] 100%
downloading required keys...
:: Import PGP key FC1B547C8D8172C8, "Levente Polyak <anthraxx@archlinux.org>"? [Y/n] y
:: Import PGP key 6D42BDD116E0068F, "Christian Hesse <arch@eworm.de>"? [Y/n] y
(3/3) checking package integrity                                          [##########################################] 100%
error: gnupg: signature from "Levente Polyak <anthraxx@archlinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/gnupg-2.2.32-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: archlinux-keyring: signature from "Christian Hesse (Arch Linux Package Signing) <arch@eworm.de>" is unknown trust
:: File /var/cache/pacman/pkg/archlinux-keyring-20211028-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.

No, you do not need change the trust level. That is right default like my output. But I have no issue. :man_shrugging:

The issue is a bit deeper, I still can’t figure out the exact source.

@saintjules , to conclude:
By the Pacman troubleshooting - Manjaro instruction you did the steps 1, 3-6 and then step 2 of

sudo pacman -Sy gnupg archlinux-keyring manjaro-keyring

was with error messages and was not complete successfully, right?


May be you have firewall on PC or router, which prevents you some connections? If have, do not turn it off, wait for other community members suggestions.


I feel the need to call qualified help of @Manjaro-Team : the issue is more than a day old and regulars participated here perhaps somewhere close, but still can’t help to fix it, but every package installation for the PC is blocked.

  • Two packages were probably hacked in the mirror repository or during the transfer, so they are untrusted after verification.

Or

  • These packages are probably not correct in the some mirror repository.
    :thinking:

Yep, your summary is accurate.

No firewall in place.

I also want to thank you guys for all the support you’re trying to give me, that’s highly appreciated!

Try Pacui option
Z Fix Pacman Errors

If not installable you can download the script and run it

wget https://raw.githubusercontent.com/excalibur1234/pacui/master/pacui
bash pacui

                         Package manager UI                       
 +----------------------------------------------------------------+
 |     1  Update System            2  Maintain System             |
 |     3  Install Packages         4  Remove Packages and Deps    |
 |----------------------------------------------------------------|
 |     5  Dependency Tree          6  Reverse Dependency Tree     |
 |     7  List Package Files       8  Search Package Files        |
 +----------------------------------------------------------------+
       9  Roll Back System         Z  Fix Pacman Errors 
       Y  Edit Config Files        X  List Packages by Size 
 +----------------------------------------------------------------+
 |     W  Force Update AUR         V  List Installed from AUR     |
 +----------------------------------------------------------------+

  Press number or marked letter             H  Help        0  Quit 
2 Likes

If unsuccessful with Pacui, try suggestion of

You might have issues to install this update by missing Maintainers keys

in the [Stable Update] 2021-11-19 - Kernels, Gnome 41.1, Plasma 5.23.3, Frameworks 5.88, LxQt 1.0, Xorg-Server 21.1, Mesa - #2 by philm post.

But before to do those instructions, clear local cache of packages and signatures also by:

sudo pacman -Scc

(y for both it’s questions)
or the same initial clearing by the

pamac clean

Delete the contents of /var/lib/pacman/sync/ and refresh database using Pamac.

1 Like

@codesardine
Vitor, thanks! Only saintjules have the issue: I fixed it for me in the same post I got it (Unable to update (key issues / corrupted packages) - #13 by alven)
Please suggest to them.


@saintjules , I will try to translate to lower level (of commands to execute):
to delete old databases of packages:

sudo rm -f /var/lib/pacman/sync/*

to force to get refresh versions of them:

pamac update --force-refresh

Same errors when it gets to checking integrity (signature is unknown trust ).

This seems to have worked!! Lowering the security check on the keys (sorry can’t find the right wording) did the trick. After upgrading the packages I got:

  It seems the update succeded because of the temporary lack of key checks. 
  Should PacUI prevent all future key / keyring errors? [y|N] 

to which I answered Y

Am I good now??

…not quite, I guess.
System is fully updated now, but I can’t install new packages because of the same errors.

Very glad to read this! Did you update the OS via pacui?


saintjules, give a bit more debug info, please:
Overall current keys count (actually not a keys count, but only output lines count, which depends on keys count):

sudo pacman-key -l | wc -l

and current keys state of the pacman, gnupg, archlinux-keyring, manjaro-keyring packager keys:

sudo pacman-key -l 5F7078DF1E0FDF8745D5B984108E0767D5F34DE4 86CFFCA918CF3AF47147588051E8B148A9999C34 02FD1C7A934E614545849F19A6234074498E9CEE 39F0EC1AE50B37E5F3196F09DAD3B211663CA268


saintjules, the next spoiler is not for your actions, please wait suggestion of more qualified (than me) members.

Suggestion

If trust level of “4 core keys” are still unknown:

  1. To try to fix keys count and trust levels by keys renewal (steps 4, 5 in the Pacman troubleshooting - Manjaro article)
  2. Was the trust level changed after that?
my OS debug data: tracing of key addition from the scratch
~/Desktop ❯ rm -r ~/.gnupg                              
rm: cannot remove '/home/m/.gnupg': No such file or directory
~/Desktop ❯ sudo rm -r /etc/pacman.d/gnupg              
~/Desktop ❯ sudo rm -r /etc/pacman.d/gnupg 
rm: cannot remove '/etc/pacman.d/gnupg': No such file or directory
~/Desktop ❯ sudo pacman-key -l
==> ERROR: You do not have sufficient permissions to read the pacman keyring.
==> Use 'pacman-key --init' to correct the keyring permissions.
~/Desktop ❯ sudo pacman-key --init                      
gpg: /etc/pacman.d/gnupg/trustdb.gpg: trustdb created
gpg: no ultimately trusted keys found
gpg: starting migration from earlier GnuPG versions
gpg: porting secret keys from '/etc/pacman.d/gnupg/secring.gpg' to gpg-agent
gpg: migration succeeded
==> Generating pacman master key. This may take some time.
gpg: Generating pacman keyring master key...
gpg: key 601F2078157D111B marked as ultimately trusted
gpg: directory '/etc/pacman.d/gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/etc/pacman.d/gnupg/openpgp-revocs.d/98609D2BE03FC81198503F29601F2078157D111B.rev'
gpg: Done
==> Updating trust database...
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
~/Desktop ❯ sudo pacman-key -l | wc -l                  
6
~/Desktop ❯ sudo pacman-key -l        
/etc/pacman.d/gnupg/pubring.gpg
-------------------------------
pub   rsa4096 2021-11-29 [SC]
      98609D2BE03FC81198503F29601F2078157D111B
uid           [ultimate] Pacman Keyring Master Key <pacman@localhost>
~/Desktop ❯ sudo pacman -Sy gnupg archlinux-keyring manjaro-keyring
:: Synchronising package databases...
 core is up to date
 extra is up to date
 community is up to date
 multilib is up to date
 chaotic-aur                                                                         1649.1 KiB  2.23 MiB/s 00:01 [####################################################################] 100%
warning: gnupg-2.2.32-2 is up to date -- reinstalling
warning: archlinux-keyring-20211028-1 is up to date -- reinstalling
warning: manjaro-keyring-20210910-2 is up to date -- reinstalling
resolving dependencies...
looking for conflicting packages...

Package (3)             Old Version  New Version  Net Change  Download Size

core/archlinux-keyring  20211028-1   20211028-1     0.00 MiB       0.96 MiB
core/gnupg              2.2.32-2     2.2.32-2       0.00 MiB       2.38 MiB
core/manjaro-keyring    20210910-2   20210910-2     0.00 MiB       0.14 MiB

Total Download Size:    3.47 MiB
Total Installed Size:  11.49 MiB
Net Upgrade Size:       0.00 MiB

:: Proceed with installation? [Y/n] 
:: Retrieving packages...
 manjaro-keyring-20210910-2-any                                                       141.6 KiB   253 KiB/s 00:01 [####################################################################] 100%
 gnupg-2.2.32-2-x86_64                                                                  2.4 MiB  2.43 MiB/s 00:01 [####################################################################] 100%
 archlinux-keyring-20211028-1-any                                                     979.1 KiB   489 KiB/s 00:02 [####################################################################] 100%
 Total (3/3)                                                                            3.5 MiB  1735 KiB/s 00:02 [####################################################################] 100%
(3/3) checking keys in keyring                                                                                    [####################################################################] 100%
downloading required keys...
:: Import PGP key 51E8B148A9999C34, "Evangelos Foutras <foutrelis@archlinux.org>"? [Y/n] 
:: Import PGP key 6D42BDD116E0068F, "Christian Hesse <arch@eworm.de>"? [Y/n] 
:: Import PGP key DAD3B211663CA268, "Bernhard Landauer <oberon@manjaro.org>"? [Y/n] 
(3/3) checking package integrity                                                                                  [####################################################################] 100%
error: gnupg: signature from "Evangelos Foutras <foutrelis@archlinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/gnupg-2.2.32-2-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: archlinux-keyring: signature from "Christian Hesse (Arch Linux Package Signing) <arch@eworm.de>" is unknown trust
:: File /var/cache/pacman/pkg/archlinux-keyring-20211028-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: manjaro-keyring: signature from "Bernhard Landauer <bernhard@manjaro.org>" is unknown trust
:: File /var/cache/pacman/pkg/manjaro-keyring-20210910-2-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.
~/Desktop ❯ sudo pacman-key -l | wc -l                             
25
~/Desktop ❯ sudo pacman-key -l                                     
/etc/pacman.d/gnupg/pubring.gpg
-------------------------------
pub   rsa4096 2021-11-29 [SC]
      98609D2BE03FC81198503F29601F2078157D111B
uid           [ultimate] Pacman Keyring Master Key <pacman@localhost>

pub   rsa2048 2010-11-12 [SC]
      86CFFCA918CF3AF47147588051E8B148A9999C34
uid           [ unknown] Evangelos Foutras <foutrelis@archlinux.org>
sub   rsa2048 2010-11-12 [E]

pub   rsa2048 2011-08-12 [SC]
      02FD1C7A934E614545849F19A6234074498E9CEE
uid           [ unknown] Christian Hesse (Arch Linux Package Signing) <arch@eworm.de>
sub   rsa2048 2011-08-12 [E]
sub   ed25519 2019-08-29 [S]
sub   cv25519 2019-08-29 [E]

pub   rsa2048 2015-07-12 [SC]
      39F0EC1AE50B37E5F3196F09DAD3B211663CA268
uid           [ unknown] Bernhard Landauer <bernhard@manjaro.org>
uid           [ unknown] Bernhard Landauer <oberon@manjaro.org>
sub   dsa2048 2015-10-01 [S]
sub   rsa2048 2015-07-12 [E]
~/Desktop ❯ sudo pacman-key --populate archlinux manjaro
==> Appending keys from archlinux.gpg...
==> Appending keys from manjaro.gpg...
gpg: error reading key: No public key
gpg: error reading key: No public key
==> Locally signing trusted keys in keyring...
  -> Locally signed 28 keys.
==> Importing owner trust values...
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: inserting ownertrust of 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
==> Disabling revoked keys in keyring...
  -> Disabled 47 keys.
==> Updating trust database...
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 1EB2638FF56C0C53: no user ID for key signature packet of class 10
gpg: key 1EB2638FF56C0C53: no user ID for key signature packet of class 10
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:  28  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:  28  signed:  84  trust: 0-, 0q, 0n, 28m, 0f, 0u
gpg: depth: 2  valid:  79  signed:  26  trust: 79-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2022-01-20
~/Desktop ❯ sudo pacman-key -l | wc -l                  
1042
~/Desktop ❯ sudo pacman-key -l 5F7078DF1E0FDF8745D5B984108E0767D5F34DE4 86CFFCA918CF3AF47147588051E8B148A9999C34 02FD1C7A934E614545849F19A6234074498E9CEE 39F0EC1AE50B37E5F3196F09DAD3B211663CA268
pub   rsa2048 2010-11-12 [SC]
      86CFFCA918CF3AF47147588051E8B148A9999C34
uid           [  full  ] Evangelos Foutras <evangelos@foutrelis.com>
uid           [  full  ] Evangelos Foutras <foutrelis@archlinux.org>
uid           [  full  ] Evangelos Foutras <foutrelis@gmail.com>
sub   rsa2048 2010-11-12 [E]

pub   rsa2048 2011-08-12 [SC]
      02FD1C7A934E614545849F19A6234074498E9CEE
uid           [marginal] Christian Hesse <eworm@archlinux.org>
uid           [  full  ] Christian Hesse (Arch Linux Package Signing) <arch@eworm.de>
sub   rsa2048 2011-08-12 [E]
sub   ed25519 2019-08-29 [S]
sub   cv25519 2019-08-29 [E]

pub   rsa2048 2015-07-12 [SC]
      39F0EC1AE50B37E5F3196F09DAD3B211663CA268
uid           [  full  ] Bernhard Landauer <bernhard@manjaro.org>
uid           [  full  ] Bernhard Landauer <oberon@manjaro.org>
sub   dsa2048 2015-10-01 [S]
sub   rsa2048 2015-07-12 [E]
~/Desktop ❯ sudo pacman-key --refresh-keys                         
gpg: key 51E8B148A9999C34: "Evangelos Foutras <evangelos@foutrelis.com>" 3 new signatures
gpg: Total number processed: 1
gpg:         new signatures: 3
pub   rsa2048 2010-11-12 [SC]
      86CFFCA918CF3AF47147588051E8B148A9999C34
...
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10
gpg: public key DB323392796CA067 is 3037 days newer than the signature
gpg: key 1EB2638FF56C0C53: no user ID for key signature packet of class 10
gpg: key 1EB2638FF56C0C53: no user ID for key signature packet of class 10
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:  27  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:  27  signed:  86  trust: 0-, 0q, 0n, 27m, 0f, 0u
gpg: depth: 2  valid:  79  signed:  26  trust: 79-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2022-01-20
~/Desktop ❯ sudo pacman-key -l | wc -l
1067
~/Desktop ❯ sudo pacman-key -l 5F7078DF1E0FDF8745D5B984108E0767D5F34DE4 86CFFCA918CF3AF47147588051E8B148A9999C34 02FD1C7A934E614545849F19A6234074498E9CEE 39F0EC1AE50B37E5F3196F09DAD3B211663CA268
pub   rsa2048 2010-11-12 [SC]
      86CFFCA918CF3AF47147588051E8B148A9999C34
uid           [  full  ] Evangelos Foutras <evangelos@foutrelis.com>
uid           [  full  ] Evangelos Foutras <foutrelis@archlinux.org>
uid           [  full  ] Evangelos Foutras <foutrelis@gmail.com>
sub   rsa2048 2010-11-12 [E]

pub   rsa2048 2011-08-12 [SC]
      02FD1C7A934E614545849F19A6234074498E9CEE
uid           [marginal] Christian Hesse <eworm@archlinux.org>
uid           [  full  ] Christian Hesse (Arch Linux Package Signing) <arch@eworm.de>
sub   rsa2048 2011-08-12 [E]
sub   ed25519 2019-08-29 [S]
sub   cv25519 2019-08-29 [E]

pub   rsa2048 2015-07-12 [SC]
      39F0EC1AE50B37E5F3196F09DAD3B211663CA268
uid           [  full  ] Bernhard Landauer <bernhard@manjaro.org>
uid           [  full  ] Bernhard Landauer <oberon@manjaro.org>
sub   dsa2048 2015-10-01 [S]
sub   rsa2048 2015-07-12 [E]
~/Desktop ❯ sudo pacman -Sy gnupg archlinux-keyring manjaro-keyring
:: Synchronising package databases...
 core is up to date
 extra is up to date
 community is up to date
 multilib is up to date
 chaotic-aur                                                                         1649.1 KiB   461 KiB/s 00:04 [####################################################################] 100%
warning: gnupg-2.2.32-2 is up to date -- reinstalling
warning: archlinux-keyring-20211028-1 is up to date -- reinstalling
warning: manjaro-keyring-20210910-2 is up to date -- reinstalling
resolving dependencies...
looking for conflicting packages...

Package (3)             Old Version  New Version  Net Change  Download Size

core/archlinux-keyring  20211028-1   20211028-1     0.00 MiB       0.96 MiB
core/gnupg              2.2.32-2     2.2.32-2       0.00 MiB       2.38 MiB
core/manjaro-keyring    20210910-2   20210910-2     0.00 MiB       0.14 MiB

Total Download Size:    3.47 MiB
Total Installed Size:  11.49 MiB
Net Upgrade Size:       0.00 MiB

:: Proceed with installation? [Y/n] 
:: Retrieving packages...
 manjaro-keyring-20210910-2-any                                                       141.6 KiB   335 KiB/s 00:00 [####################################################################] 100%
 archlinux-keyring-20211028-1-any                                                     979.1 KiB  1399 KiB/s 00:01 [####################################################################] 100%
 gnupg-2.2.32-2-x86_64                                                                  2.4 MiB  1851 KiB/s 00:01 [####################################################################] 100%
 Total (3/3)                                                                            3.5 MiB  2.53 MiB/s 00:01 [####################################################################] 100%
(3/3) checking keys in keyring                                                                                    [####################################################################] 100%
(3/3) checking package integrity                                                                                  [####################################################################] 100%
(3/3) loading package files                                                                                       [####################################################################] 100%
(3/3) checking for file conflicts                                                                                 [####################################################################] 100%
(3/3) checking available disk space                                                                               [####################################################################] 100%
:: Processing package changes...
(1/3) reinstalling gnupg                                                                                          [####################################################################] 100%
(2/3) reinstalling archlinux-keyring                                                                              [####################################################################] 100%
==> Appending keys from archlinux.gpg...
gpg: public key DB323392796CA067 is 3037 days newer than the signature
==> Updating trust database...
gpg: next trustdb check due at 2022-01-20
==> Updating trust database...
gpg: next trustdb check due at 2022-01-20
(3/3) reinstalling manjaro-keyring                                                                                [####################################################################] 100%
==> Appending keys from manjaro.gpg...
gpg: public key DB323392796CA067 is 3037 days newer than the signature
gpg: error reading key: No public key
gpg: error reading key: No public key
==> Disabling revoked keys in keyring...
  -> Disabled 2 keys.
==> Updating trust database...
gpg: next trustdb check due at 2022-01-20
:: Running post-transaction hooks...
(1/3) Arming ConditionNeedsUpdate...
(2/3) Refreshing PackageKit...
(3/3) Updating the info directory file...
~/Desktop ❯ 

If there are still problems, then:
-) manual installation of that “4 core keys” from mirror server’s file: unpack content of archlinux-keyring and manjaro-keyring packages and to install keys and their trust levels manually
OR
-) temporal manual trust with 5th trust level on those “core keys” (example in Possible issue of keyring renew algorithm - #3 by alven)

But the main question for the project is: what could lead to this issue? Hardware (storage, CPU, RAM) issues? What else?

Keys count: 151

sudo pacman-key -l 5F7078DF1E0FDF8745D5B984108E0767D5F34DE4 86CFFCA918CF3AF47147588051E8B148A9999C34 02FD1C7A934E614545849F19A6234074498E9CEE 39F0EC1AE50B37E5F3196F09DAD3B211663CA268
pub   rsa2048 2015-07-12 [SC]
      39F0EC1AE50B37E5F3196F09DAD3B211663CA268
uid           [  full  ] Bernhard Landauer <oberon@manjaro.org>
sub   rsa2048 2015-07-12 [E]
sub   dsa2048 2015-10-01 [S]

pub   rsa2048 2011-08-12 [SC]
      02FD1C7A934E614545849F19A6234074498E9CEE
uid           [ unknown] Christian Hesse (Arch Linux Package Signing) <arch@eworm.de>
sub   rsa2048 2011-08-12 [E]
sub   ed25519 2019-08-29 [S]
sub   cv25519 2019-08-29 [E]

Yes, but see my previous post.

1 Like

151 is not enough, but many keys are missing. There should be more than 1000 keys.


Can you show which mirrors you use:
cat /etc/pacman.d/mirrorlist

##
## Manjaro Linux custom mirrorlist
## Generated on 2021-11-30 00:06
##
## Please use 'pacman-mirrors -id' To reset custom mirrorlist
## Please use 'pacman-mirrors -c all' To reset custom mirrorlist
## To remove custom config run  'pacman-mirrors -c all'
##

## Country : Switzerland
Server = https://manjaro.osmir.ch/stable/$repo/$arch

## Country : Switzerland
Server = https://mirror.init7.net/manjaro/stable/$repo/$arch

## Country : Germany
Server = https://manjaro.moson.eu/stable/$repo/$arch

## Country : Germany
Server = https://mirror.moson.org/manjaro/stable/$repo/$arch

## Country : Belgium
Server = https://mirror.futureweb.be/manjaro/stable/$repo/$arch

## Country : Netherlands
Server = https://manjaro.mirrors.lavatech.top/stable/$repo/$arch

## Country : Bulgaria
Server = https://mirror.telepoint.bg/manjaro/stable/$repo/$arch

## Country : Finland
Server = https://manjaro.kyberorg.fi/stable/$repo/$arch

## Country : United_Kingdom
Server = http://manjaro.mirrors.uk2.net/stable/$repo/$arch

## Country : United_Kingdom
Server = https://mirrors.gethosted.online/manjaro/repos/stable/$repo/$arch

## Country : Ukraine
Server = https://fastmirror.pp.ua/manjaro/stable/$repo/$arch

## Country : Hungary
Server = https://quantum-mirror.hu/mirrors/pub/manjaro/stable/$repo/$arch

## Country : Spain
Server = https://ftp.caliu.cat/pub/distribucions/manjaro/stable/$repo/$arch

## Country : Poland
Server = https://repo.skni.umcs.pl/manjaro/stable/$repo/$arch

## Country : Germany
Server = https://mirror.netcologne.de/manjaro/stable/$repo/$arch

## Country : United_Kingdom
Server = https://mirror.cyberhost.uk/sites/manjaro/stable/$repo/$arch

## Country : Bulgaria
Server = http://manjaro.telecoms.bg/stable/$repo/$arch

## Country : Netherlands
Server = https://mirror.koddos.net/manjaro/stable/$repo/$arch

## Country : Belarus
Server = http://mirror.datacenter.by/pub/mirrors/manjaro/stable/$repo/$arch

## Country : Italy
Server = https://manjaro.mirror.garr.it/manjaro/stable/$repo/$arch

## Country : Germany
Server = https://mirror.alpix.eu/manjaro/stable/$repo/$arch

## Country : Germany
Server = https://mirror.23m.com/manjaro/stable/$repo/$arch

## Country : United_Kingdom
Server = https://www.mirrorservice.org/sites/repo.manjaro.org/repos/stable/$repo/$arch

## Country : Czech
Server = https://mirror.dkm.cz/manjaro/stable/$repo/$arch

## Country : Denmark
Server = https://mirrors.dotsrc.org/manjaro/stable/$repo/$arch

## Country : Russia
Server = https://mirror.yandex.ru/mirrors/manjaro/stable/$repo/$arch

## Country : Bulgaria
Server = https://manjaro.ipacct.com/manjaro/stable/$repo/$arch

## Country : Russia
Server = https://mirror.truenetwork.ru/manjaro/stable/$repo/$arch

## Country : France
Server = http://ftp.free.org/mirrors/repo.manjaro.org/repos/stable/$repo/$arch

## Country : Germany
Server = http://ftp.tu-chemnitz.de/pub/linux/manjaro/stable/$repo/$arch

## Country : Austria
Server = http://mirror.easyname.at/manjaro/stable/$repo/$arch

## Country : Belgium
Server = http://ftp.belnet.be/mirrors/manjaro/repos/stable/$repo/$arch

## Country : Portugal
Server = http://ftp.dei.uc.pt/pub/linux/manjaro/stable/$repo/$arch

## Country : Italy
Server = https://ct.mirror.garr.it/mirrors/manjaro/stable/$repo/$arch

## Country : Sweden
Server = https://ftp.lysator.liu.se/pub/manjaro/stable/$repo/$arch

## Country : Bulgaria
Server = https://mirrors.netix.net/manjaro/stable/$repo/$arch

## Country : Netherlands
Server = http://ftp.snt.utwente.nl/pub/linux/manjaro/stable/$repo/$arch

## Country : Germany
Server = https://ftp.gwdg.de/pub/linux/manjaro/stable/$repo/$arch

## Country : Germany
Server = https://ftp.halifax.rwth-aachen.de/manjaro/stable/$repo/$arch

## Country : Netherlands
Server = https://ftp.nluug.nl/pub/os/Linux/distr/manjaro/stable/$repo/$arch

## Country : Poland
Server = http://ftp.vectranet.pl/manjaro/stable/$repo/$arch

## Country : Greece
Server = https://ftp.cc.uoc.gr/mirrors/linux/manjaro/stable/$repo/$arch

## Country : Italy
Server = https://ba.mirror.garr.it/mirrors/manjaro/stable/$repo/$arch

I checked these mirrors that are OK. I do not know why is the number of keys 151. Maybe you missed these commands of @alven.

Let’s Manjaro Team to help, I “spammed” a lot, but together we were able to update OS, and expose the problem of low keys count and their not effective trust levels (Unable to update (key issues / corrupted packages) - #39 by saintjules) I should leave the thread in reading mode for me now, cause we already called Manjaro Team for help as we can’t solve this and OP can’t install many packages cause have

which I agree with.
Hm, may be meantime we also can invite the huge electricity discharge here which possibly can have ideas to tryout to fire the issue the OP have? :cloud_with_lightning: @megavolt if them has time now.

1 Like

Thanks again for trying, guys. I’m starting to get a bit worried now, I have no idea how my system could get so messed up just because I haven’t updated for a while. This certainly shouldn’t happen.

1 Like