Skip to main content ↑ ↓
Topic solved
This topic has been marked as solved and requires no further attention.
Topic: libavif: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid (Read 1024 times) previous topic - next topic
0 Members and 1 Guest are viewing this topic.

libavif: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid

Bonjour,

This morning after launching:
Code: [Select]
sudo pacman -Syu
I got this error message:
Quote
error: libavif: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid
:: File /var/cache/pacman/pkg/libavif-1.1.0-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]

I followed the wiki explanations:
https://wiki.artixlinux.org/Main/Troubleshooting#Invalid_or_corrupted_packages_.28PGP_signature.29

But that didn't change the problem...

Re: libavif: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid

Reply #1 –
Hi! I'm having the same problem actually.

Re: libavif: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid

Reply #2 –
Idem.

Re: libavif: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid

Reply #3 –
For me, it also says that it failed to retrieve the file: The requested url returned 404.
I am able to access the repo from the browser though.

Re: libavif: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid

Reply #4 –
Quote from: JonteP – on
For me, it also says that it failed to retrieve the file: The requested url returned 404.
I am able to access the repo from the browser though.
I had this for this file and another then I've noticed there was a new /etc/pacman.d/mirrorlist.pacnew file.
I've cleared my old mirror file and made a new one from the pacnew and it worked.
(Until I've hit the PGP signature issue)

Re: libavif: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid

Reply #5 –
Quote from: JonteP – on
For me, it also says that it failed to retrieve the file: The requested url returned 404.
I am able to access the repo from the browser though.
At the question:
Quote
Do you want to delete it? [Y/n]

I answer "Y"
And the result is:
Quote
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.

Re: libavif: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid

Reply #6 –

 I think the dev guys will fix it. Maybe they did some maintenance on the server.

Re: libavif: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid

Reply #7 –
If you don't want to wait ...

Code: [Select]
sudo pacman -Sy pandoc-cli
cd /tmp
mkdir libavif
cd libavif
wget https://gitea.artixlinux.org/packages/libavif/raw/branch/master/PKGBUILD
makepkg
sudo pacman -U libavif-1.1.0-1-x86_64.pkg.tar.zst

Then you can proceed with
Code: [Select]
sudo pacman -Syu

Re: libavif: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid

Reply #8 –
Sorry for the inconvenience. Issue has been fixed. Please allow the mirrors some time to sync.

artist
Linux is simple; use Artix, or Submit Your System To Evil Malicious D(a)emons

Re: libavif: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid

Reply #9 –
Quote from: Artist – on
Sorry for the inconvenience. Issue has been fixed. Please allow the mirrors some time to sync.
artist
Thank you for your work and for your responsiveness!
Artix = the best distribution I've ever used since 2003. 8)

Re: libavif: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid

Reply #10 –
It seems to be working now. Thanks!

Re: libavif: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid

Reply #11 –
Kernel: 6.4.10-artix1-1
cinnamon-s6-20230814
CPU: AMD Ryzen 9 5900HX with Radeon Graphics (16) @ 3.300G
GPU: AMD ATI Radeon Vega Series / Radeon Vega Mobile Serie
GPU: NVIDIA GeForce RTX 3070 Mobile / Max-Q
Memory: 888MiB / 31514MiB

Did this stuff:

s6-linux-init dirmngr
pacman-key --populate artix
pacman -S archlinux-keyring
pacman-key --refresh
pacman -Syyuu

Got this

signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid

...for these....

artix-cgroups
s6-contrib
s6-base
acpid-s6
archlinux-mirrorlist
ca-certificates
artix-mirrorlist
artix-archlinux-support
artix-branding-base
xcb-util-keysyms
libxshmfence
default-cursors
eglexternalplatform
libproxy
gsettings-system-schemas
libxdamage
harfbuzz-icu
base
base-devel
fuse-common
libblockdev-loop
dnssec-anchors
libva-mesa-driver
mesa-vdpau
mkinitcpio-openswap
numlockx
pulseaudio-alsa

is there any way, short of a full system install I can just upgrade to the newest Artix version, maybe from DVD?

QuickTime v6 (and presumably above) requires IPv6.
I block ALL of IPv6!
I also block all Amazon, Google, Microsoft/Bing/Azure/LinkedIn/Yammer, Edgecast/Fastly/ANS Comm,  Facebook/Meta, Twitter/X, as well as any other IP's which show up on my firewall (about 3% of all IPv4).  Consequently, I do NOT have email addresses nor accounts on any of these systems.  Please don't ask!

Re: libavif: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid

Reply #12 –
Quote from: TheUnknownCynic – on
is there any way, short of a full system install I can just upgrade to the newest Artix version, maybe from DVD?
You could try clearing your package cache (pacman -Scc) before trying anything more drastic.

Also in your list of stuff you did there is no
pacman-key --init

pacman-key --populate artix
should be
pacman-key --populate archlinux artix
AFTER
pacman -Sy archlinux-keyring artix-keyring

You can follow the steps in the wiki:
https://wiki.artixlinux.org/Main/Troubleshooting#Invalid_or_corrupted_packages_.28PGP_signature.29

Re: libavif: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid

Reply #13 –
VERY helpful!

Actually, someone took care of the keys overnight.

Anyway, thatnks to you and to whomever took care of the keys. 

The update went smootly.

I bookmarked the Wiki and recorded all the steps because I frequently end up chasing my tail searching the blog for answers and not really find them.  It's partly my fault for blocking Google and Microsoft.  Everything takes so long.

Anyhoo.  THANKS!

Mark this one SOLVED! 
QuickTime v6 (and presumably above) requires IPv6.
I block ALL of IPv6!
I also block all Amazon, Google, Microsoft/Bing/Azure/LinkedIn/Yammer, Edgecast/Fastly/ANS Comm,  Facebook/Meta, Twitter/X, as well as any other IP's which show up on my firewall (about 3% of all IPv4).  Consequently, I do NOT have email addresses nor accounts on any of these systems.  Please don't ask!
 
Artix forum uses a single cookie to remember youOK