Artix Linux Forum

Artix Linux => Package management => Topic started by: someone on 13 November 2017, 14:36:52

Title: [SOLVED] Issue with buildbot key
Post by: someone on 13 November 2017, 14:36:52
Hello everyone,

I'm having an issue with my install with pacman balking at builbot's key. I've followed the instructions from this thread (https://artixlinux.org/forum/index.php?topic=148.0), but it wasn't helpful for me.

Here is the output from gpg after running thefallenrat's suggestion:

 
Code: [Select]
 sudo pacman-key --edit-key 0A3EB6BB142C56653300420C1247D995F165BBAC


pub  rsa4096/1247D995F165BBAC
     created: 2017-06-18  expires: never       usage: SC 
     trust: ultimate      validity: ultimate
sub  rsa4096/0732C0B856D19AB4
     created: 2017-06-18  expires: never       usage: E  
[ultimate] (1). Artix Buildbot <buildbot@artixlinux.org>
[ revoked] (2)  Cromnix (Buildbot) <cromnix@cromnix.org>

gpg>

How should I proceed? Thanks!
Title: Re: Issue with buildbot key
Post by: thefallenrat on 13 November 2017, 14:48:47

 
Code: [Select]
 

gpg>

How should I proceed? Thanks!


You may quit from gpg console by running quit ..


Can you at least post the exact error message?
Title: Re: Issue with buildbot key
Post by: someone on 13 November 2017, 15:43:31
Hello thefallenrat,

Yes, I know to quit after updating the trust and '-Syyu' afterwards. That was posted for verification that the trust was ultimate. The output afterwards is as follows:

Code: [Select]
error: qt5-base: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid
:: File /var/cache/pacman/pkg/qt5-base-5.9.2-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.

So on and so forth for the rest of the backlog.

I've followed the steps outlined in the original thread carefully. I cleared the cache, updated the mirrorlist removing SourceForge's servers, repopulated both Arch's and Artix's keyrings (https://artixlinux.org/forum/index.php?topic=27.msg1059#msg1059), ect. Still no dice for me.


EDIT: I should mention, if this is relevant, my install is two years old. I went from Arch > Arch OpenRC > Artix.
Title: Re: Issue with buildbot key
Post by: nous on 13 November 2017, 16:07:06
Code: [Select]
% sudo pacman -S qt5-base
resolving dependencies...
looking for conflicting packages...

Packages (1) qt5-base-5.9.2-2

Total Download Size:   11.55 MiB
Total Installed Size:  57.10 MiB
Net Upgrade Size:       0.00 MiB

:: Proceed with installation? [Y/n]
:: Retrieving packages...
 qt5-base-5.9.2-2-x86_64                                                                            11.5 MiB  1991K/s 00:06 [---------------------------------------------------------------------------] 100%
(1/1) checking keys in keyring                                                                                              [---------------------------------------------------------------------------] 100%
(1/1) checking package integrity                                                                                            [---------------------------------------------------------------------------] 100%
(1/1) loading package files                                                                                                 [---------------------------------------------------------------------------] 100%
(1/1) checking for file conflicts                                                                                           [---------------------------------------------------------------------------] 100%
:: Processing package changes...
(1/1) upgrading qt5-base                                                                                                    [---------------------------------------------------------------------------] 100%

I can't reproduce it here. However, removing /etc/pacman.d/gnupg and reinstalling the keyrings gave me errors on 2 Artix keys, which I had to sign locally.

Code: [Select]
% sudo pacman-key --lsign A55C3F1BA61CAA63036D82BAFA91071797BEEEC2
% sudo pacman-key --lsign 0A3EB6BB142C56653300420C1247D995F165BBAC

If this doesn't solve your error, please run
Code: [Select]
sudo pacman -S --debug qt5-base
and post the output.
Title: Re: Issue with buildbot key
Post by: someone on 13 November 2017, 16:27:48
Hi nous,

OK, I deleted /etc/pacman.d/gnugp, and reinitialized the keyring. I got the error posted below. I then ran both your 'pacman-key --lsign' commands and got the same output.


Code: [Select]
Package (1)     Old Version  New Version  Net Change

world/qt5-base  5.9.1-1      5.9.2-1        1.15 MiB

Total Installed Size:  57.10 MiB
Net Upgrade Size:       1.15 MiB

:: Proceed with installation? [Y/n]
debug: using cachedir: /var/cache/pacman/pkg/
debug: using cachedir: /var/cache/pacman/pkg/
checking keyring...
debug: GPGME version: 1.9.0
debug: GPGME engine info: file=/usr/bin/gpg, home=/etc/pacman.d/gnupg/
debug: looking up key 1247D995F165BBAC locally
debug: key lookup success, key exists
checking package integrity...
debug: found cached pkg: /var/cache/pacman/pkg/qt5-base-5.9.2-1-x86_64.pkg.tar.xz
debug: sig data: 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
debug: checking signature for /var/cache/pacman/pkg/qt5-base-5.9.2-1-x86_64.pkg.tar.xz
debug: 1 signatures returned
debug: fingerprint: 1247D995F165BBAC
debug: summary: red
debug: status: Bad signature
debug: timestamp: 0
debug: exp_timestamp: 0
debug: validity: unknown; reason: Success
debug: key: 0A3EB6BB142C56653300420C1247D995F165BBAC, Cromnix (Buildbot) <cromnix@cromnix.org>, owner_trust unknown, disabled 0
debug: signature is not valid
error: qt5-base: signature from "Cromnix (Buildbot) <cromnix@cromnix.org>" is invalid
:: File /var/cache/pacman/pkg/qt5-base-5.9.2-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
Title: Re: Issue with buildbot key
Post by: nous on 13 November 2017, 16:55:33
That's not right, the cromnix id I mean. Could you run
Code: [Select]
pacman-key --populate
pacman-key --refresh-keys
The correct output afterwards should be
Code: [Select]
% pacman-key -l buildbot
gpg: Note: trustdb not writable
pub   rsa4096 2017-06-18 [SC]
      0A3EB6BB142C56653300420C1247D995F165BBAC
uid           [  full  ] Artix Buildbot <buildbot@artixlinux.org>
sub   rsa4096 2017-06-18 [E]
Title: Re: Issue with buildbot key
Post by: someone on 13 November 2017, 17:23:18
I had to change keyservers in my /etc/pacman.d/gnupg/gpg.conf to MIT's keyserver. Having done that and '--refresh-keys', 'pacman-key -l buildbot' outputs:

Code: [Select]
pub   rsa4096 2017-06-18 [SC]
      0A3EB6BB142C56653300420C1247D995F165BBAC
uid           [  full  ] Artix Buildbot <buildbot@artixlinux.org>
sub   rsa4096 2017-06-18 [E]

EDIT: I get the same pacman gpg error as before when installing qt5-base
Title: Re: Issue with buildbot key
Post by: nous on 13 November 2017, 17:54:15
Make sure qt5-base is from Artix repos and not from Arch. If in doubt, issue pacman -Scc and re-download.

As a last resort, you can install without sig checking:
Code: [Select]
pacman -U /var/cache/pacman/pkg/qt5-base-5.9.2-1-x86_64.pkg.tar.xz
Title: Re: Issue with buildbot key
Post by: thefallenrat on 13 November 2017, 20:49:29
Code: [Select]
error: qt5-base: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid
:: File /var/cache/pacman/pkg/qt5-base-5.9.2-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).


That's because it happened on world repo and I can reproduce the error. It seems this is the package fault

Code: [Select]
world/qt5-base  5.9.2-2      5.9.2-1        0.00 MiB      11.55 MiB

Total Download Size:   11.55 MiB
Total Installed Size:  57.10 MiB
Net Upgrade Size:       0.00 MiB

:: Proceed with installation? [Y/n] y
:: Retrieving packages...
 qt5-base-5.9.2-1-x86_64                                                       11.5 MiB  1172K/s 00:10 [------------------------------------------------------------] 100%
(1/1) checking keys in keyring                                                                         [------------------------------------------------------------] 100%
(1/1) checking package integrity                                                                       [------------------------------------------------------------] 100%
error: qt5-base: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid
:: File /home/thefallenrat/.pacmancache/qt5-base-5.9.2-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.

Of course my method didn't work because it only solves marginal trust issue. not invalid issue.
But that was not entirely your fault from beginning, @someone . This is package fault alright.....

@nous can you clean your package and try installing qt5-base from world repo?

Code: [Select]
sudo pacman -S world/qt5-base

If it does fail maybe we need to update that package on server ...
Title: Re: Issue with buildbot key
Post by: someone on 13 November 2017, 21:25:21
Hello again everyone,

I was able to get pacman to upgrade per nous's advice on post #7. Pacman first spit the same error with qt5-base as before, but with '-U', it installed and afterwards I was able to '-Syu' with no further errors. Then I rebooted... Now my system drops into an emergency shell with an error which I'll write down and share after I post this. This issue I'm not sure belongs in this thread because technically my gpg issue can be marked as solved. What's the propper protocol, new thread?

Incidentally, I found out that the Artix i3 live disc don't support either my TP-Link AC1900, nor my trusty Alfa AWUS036H wifi adapters!


EDIT: OK, my boot error is as follows:

Code: [Select]
Scanning for Btrfs filesystems
ERROR: device '/dev/mapper/artix' not found. Skipping fsck.
mount: /new_root: no filesystem type specified.
You are now being dropped into an emergency shell.
sh: can't access tty: job control turned off
[rootfs] #
Title: Re: Issue with buildbot key
Post by: Dudemanguy on 13 November 2017, 21:59:26
Ah, are you also using lvm? It looks like it. Could you post your /etc/fstab and /etc/default/grub as well as anything else relevant to booting?
Title: Re: Issue with buildbot key
Post by: someone on 13 November 2017, 23:27:00
I doubt it's my boot configs as they have held up switching from Arch>Arch OpenRC>Artix with minor alterations.

Here they are though:

syslinux.conf:

Code: [Select]
PROMPT 0
TIMEOUT 30
MENU HIDDEN

#DEFAULT artix-hardened
DEFAULT artix-lts

MENU SEPARATOR

LABEL artix-hardened
    MENU INDENT 1
    MENU LABEL ^1] Artix Linux (Hardened)
            LINUX ../vmlinuz-linux-hardened
            APPEND cryptdevice=/dev/disk/by-uuid/9afa8aed-3aba-4010-bdeb-a974261746c7:artix root=/dev/mapper/artix rootflags=subvolid=2685 vga=0x034d,current rw
            INITRD ../initramfs-linux-hardened.img

LABEL artix-lts
MENU INDENT 1
MENU LABEL ^2] Artix Linux (LTS)
            LINUX ../vmlinuz-linux-lts
            APPEND cryptdevice=/dev/disk/by-uuid/9afa8aed-3aba-4010-bdeb-a974261746c7:artix root=/dev/mapper/artix rootflags=subvolid=2685 vga=0x034d,current rw
            INITRD ../initramfs-linux-lts.img

MENU SEPARATOR


LABEL reboot
        MENU LABEL ^R] Reboot
                COM32 reboot.c32

LABEL poweroff
        MENU LABEL ^O] Poweroff
                COM32 poweroff.c32

MENU CLEAR


My fstab relevant to booting Artix:

Code: [Select]
/dev/mapper/artix 						/      			btrfs   rw,noatime,compress=zlib,autodefrag,clear_cache,space_cache,subvolid=2685		0 1
/dev/disk/by-uuid/28580d67-d395-4a93-bbd7-b605f066055f     /boot ext4 rw,noatime,relatime,data=ordered                0 1
/dev/mapper/artix /home btrfs   rw,nodev,nosuid,noatime,compress=zlib,clear_cache,autodefrag,space_cache,subvolid=258 0 1
Title: Re: Issue with buildbot key
Post by: nous on 13 November 2017, 23:38:41
@nous can you clean your package and try installing qt5-base from world repo?
Code: [Select]
sudo pacman -S world/qt5-base
If it does fail maybe we need to update that package on server ...

You're right, the package in [world] has got a bad signature.
Code: [Select]
% sudo pacman -S world/qt5-base
warning: downgrading package qt5-base (5.9.2-2 => 5.9.2-1)
resolving dependencies...
looking for conflicting packages...

Packages (1) qt5-base-5.9.2-1

Total Download Size:   11.55 MiB
Total Installed Size:  57.10 MiB
Net Upgrade Size:       0.00 MiB

:: Proceed with installation? [Y/n]
:: Retrieving packages...
 qt5-base-5.9.2-1-x86_64                                                                            11.5 MiB  1948K/s 00:06 [---------------------------------------------------------------------------]  99%
(1/1) checking keys in keyring                                                                                              [---------------------------------------------------------------------------] 100%
(1/1) checking package integrity                                                                                            [---------------------------------------------------------------------------] 100%
error: qt5-base: signature from "Artix Buildbot <buildbot@artixlinux.org>" is invalid
:: File /var/cache/pacman/pkg/qt5-base-5.9.2-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.


Then I rebooted... Now my system drops into an emergency shell with an error which I'll write down and share after I post this. This issue I'm not sure belongs in this thread because technically my gpg issue can be marked as solved. What's the propper protocol, new thread?

Code: [Select]
Scanning for Btrfs filesystems
ERROR: device '/dev/mapper/artix' not found. Skipping fsck.
mount: /new_root: no filesystem type specified.
You are now being dropped into an emergency shell.
sh: can't access tty: job control turned off
[rootfs] #

The mkinitcpio package has changed. Since you're using LVM, you must put lvm after block hook in /etc/mkinitcpio.conf (and before filesystems). Can you boot with the fallback initramfs?
Title: Re: Issue with buildbot key
Post by: someone on 14 November 2017, 00:09:19
nous, I have a fallback for LTS, but not in my syslinux.conf. I'm going to add it and edit this post with the results.

I've edited my mkinitcpio.conf (with your recommendation), chroot, and 'mkinitcpio -p linux-lts', I then get the following:

Code: [Select]
==> Building image from preset: /etc/mkinitcpio.d/linux-lts.preset: 'default'
  -> -k /boot/vmlinuz-linux-lts -c /etc/mkinitcpio.conf -g /boot/initramfs-linux-lts.img
hexdump: error while loading shared libraries: libtinfo.so.6: cannot open shared object file: No such file or directory
==> ERROR: invalid kernel specified: `/boot/vmlinuz-linux-lts'
==> Building image from preset: /etc/mkinitcpio.d/linux-lts.preset: 'fallback'
  -> -k /boot/vmlinuz-linux-lts -c /etc/mkinitcpio.conf -g /boot/initramfs-linux-lts-fallback.img -S autodetect
hexdump: error while loading shared libraries: libtinfo.so.6: cannot open shared object file: No such file or directory
==> ERROR: invalid kernel specified: `/boot/vmlinuz-linux-lts'



EDIT: Actually, I have initramfs-linux-lst-fallback, but not the vmlinuz-linux-lts-fallback, so I cant' post those results.
Title: Re: Issue with buildbot key
Post by: Dudemanguy on 14 November 2017, 00:49:27
Try rebuilding ncurses5-compat-libs from AUR. I believe that's where libtinfo comes from. See if you can run mkinitcpio again after that.

Sorry that's not right. libtinfo.so.6 should come from the latest version of ncurses which is 6.0. Do you have an old version of libtinfo or something?
Title: Re: Issue with buildbot key
Post by: someone on 14 November 2017, 01:26:54
Dudemanguy, I was about to post that the ncurses5-compat-libs would break a bucketfull of dependancies! Glad to have seen the edit.


Code: [Select]
# pacman -Qs libtinfo
local/libtinfo5 5-18
    symlink to ncurses for use in cuda and other packages (legacy)
local/ncurses-full 6.0+20170902-1
    System V Release 4.0 curses emulation library, with static and shared libraries, Inclusion of libTinfo.

How does that look?
Title: Re: Issue with buildbot key
Post by: Dudemanguy on 14 November 2017, 01:34:16
Hmm, any reason why you have the ncurses-full AUR package instead of the ncurses package in the system repo? Looking at the version numbers, the one in system is actually a later version (6.0+20170902-3). Try installing that and see if it gives you /usr/lib/libtinfo.so.6.
Title: Re: Issue with buildbot key
Post by: someone on 14 November 2017, 01:48:31
AH-HA, progress! I removed 'ncurses-full' and installed 'ncurses' and mkinitcpio didn't complain. I have no idea why that was installed. My box has alot of cruft it seems. I'm going to reboot and report back.

EDIT: Fuck yeah! There's no place like /home!! Thanks for your help Dudemanguy, nous, and thefallenrat! I think I finally mark this thread as solved!