Artix Linux Forum

Artix Linux => Applications & Software => Topic started by: phunc20 on 05 June 2021, 05:58:52

Title: [SOLVED] signature from "Artix Buildbot <[email protected]>" is unknown
Post by: phunc20 on 05 June 2021, 05:58:52
Excuse me, this seems to be an FAQ, but I cannot seem to find a solution to my particular situation... Maybe lack of experience.

I have tried all three mentioned methods on <https://wiki.archlinux.org/title/Pacman#Signature_from_%22User_%[email protected]%3E%22_is_unknown_trust,_installation_failed>, but none of them solves the problem.

I would really appreciate if someone out there can help me save my artix.

Code: [Select]
[phunc20@homography-x220t ~]$ pacman -Syu
...
 texlive-pstricks-2021.58293-1-any             25.5 MiB   164 KiB/s 02:39 [#########################################] 100%
 texlive-publishers-2021.58683-1-any           18.7 MiB   148 KiB/s 02:10 [#########################################] 100%
 python-xlib-0.30-1-any                       241.3 KiB   119 KiB/s 00:02 [#########################################] 100%
 qutebrowser-2.2.3-1-any                        2.1 MiB   147 KiB/s 00:15 [#########################################] 100%
(183/183) checking keys in keyring                                        [#########################################] 100%
(183/183) checking package integrity                                      [#########################################] 100%
error: alsa-card-profiles: signature from "Artix Buildbot <[email protected]>" is unknown trust
:: File /var/cache/pacman/pkg/alsa-card-profiles-1:0.3.29-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package
(PGP signature)).
Do you want to delete it? [Y/n] Y
error: linux-api-headers: signature from "Artix Buildbot <[email protected]>" is unknown trust
:: File /var/cache/pacman/pkg/linux-api-headers-5.12.3-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: filesystem: signature from "Artix Buildbot <[email protected]>" is unknown trust
:: File /var/cache/pacman/pkg/filesystem-2021.05.31-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] ^C
Interrupt signal received

[phunc20@homography-x220t ~]$
Title: Re: signature from "Artix Buildbot <[email protected]>" is unknown trust
Post by: tintin on 05 June 2021, 06:11:40
Bonjour,

And if you try sudo pacman -Syyu
Title: Re: signature from "Artix Buildbot <[email protected]>" is unknown trust
Post by: phunc20 on 05 June 2021, 06:23:21
Bonjour Tintin,

I haven't tried that. Maybe I should but I never really quite understand what -Syyu does.
Title: Re: signature from "Artix Buildbot <[email protected]>" is unknown trust
Post by: phunc20 on 05 June 2021, 06:26:03
oh, sorry, I should have consulted myself. I kind of see where it is documented:

Code: [Select]
 (man pacman)
       -y, --refresh
           Download a fresh copy of the master package database from the server(s) defined in pacman.conf(5). This
           should typically be used each time you use --sysupgrade or -u. Passing two --refresh or -y flags will force
           a refresh of all package databases, even if they appear to be up-to-date.

Title: Re: signature from "Artix Buildbot <[email protected]>" is unknown trust
Post by: phunc20 on 05 June 2021, 06:29:54
I am doing -Syyu as Tintin suggested. That might take quite some time. I shall report later.

In the mean time, I think maybe the following might help others help me:

Code: [Select]
[phunc20@homography-x220t ~]$ pacman-key -l [email protected]
gpg: Note: trustdb not writable
pub   rsa4096 2017-06-18 [SC]
      0A3EB6BB142C56653300420C1247D995F165BBAC
uid           [ unknown] Artix Buildbot <[email protected]>
sub   rsa4096 2017-06-18 [E]

[phunc20@homography-x220t ~]$
Title: Re: signature from "Artix Buildbot <[email protected]>" is unknown trust
Post by: phunc20 on 05 June 2021, 06:35:19
@tintin, -Syyu still failed like before. The same error message with unknown trust from "Artix Buildbot".
Title: Re: signature from "Artix Buildbot <[email protected]>" is unknown trust
Post by: tintin on 05 June 2021, 07:13:08
@tintin, -Syyu still failed like before. The same error message with unknown trust from "Artix Buildbot".

Eventually :
pacman-key --populate
pacman-key --refresh-keys

But I prefer to let the specialists answer...
Title: Re: signature from "Artix Buildbot <[email protected]>" is unknown trust
Post by: phunc20 on 05 June 2021, 08:48:53
I found this page https://wiki.artixlinux.org/Main/Troubleshooting#Invalid_or_corrupted_packages_.28PGP_signature.29 (https://wiki.artixlinux.org/Main/Troubleshooting#Invalid_or_corrupted_packages_.28PGP_signature.29)

I think one of my problem is that I have missed some of the commands with `artix`. I think this might solve my problem. Thanks for your help (y)!
Title: Re: signature from "Artix Buildbot <[email protected]>" is unknown trust
Post by: tintin on 05 June 2021, 08:57:44
I found this page https://wiki.artixlinux.org/Main/Troubleshooting#Invalid_or_corrupted_packages_.28PGP_signature.29 (https://wiki.artixlinux.org/Main/Troubleshooting#Invalid_or_corrupted_packages_.28PGP_signature.29)
Relevant information!   8)


Quote
I think one of my problem is that I have missed some of the commands with `artix`.
It happens to me often  :)



Quote
I think this might solve my problem. Thanks for your help (y)!
You're welcome



Title: Re: signature from "Artix Buildbot <[email protected]>" is unknown trust
Post by: alium on 05 June 2021, 09:05:33
you will really eventually learn to read the wiki,  8)  we are happy about that  :D
Title: Re: [SOLVED] signature from "Artix Buildbot <[email protected]>" is unknown
Post by: tintin on 05 June 2021, 09:08:58
you will really eventually learn to read the wiki,  8)  we are happy about that  :D
Every day I realize more that this wiki is great   8)
Title: Re: [SOLVED] signature from "Artix Buildbot <[email protected]>" is unknown
Post by: phunc20 on 06 June 2021, 07:35:56
Hi, allow me to mark this again unsolved, because yesterday the wiki did not seem to fully solve the problem. I have followed the steps of the wiki, but in the end, there are other, new problems about marginal trust (as show below.) Could I ask some guidance here? Is my next step to modify some SigLevel thing in /etc/pacman.conf?

Code: [Select]
[phunc20@homography-x220t ~]$ pacman -Syyu
...
(188/188) checking keys in keyring                                        [#########################################] 100%
(188/188) checking package integrity                                      [#########################################] 100%
error: neovim: signature from "Balló György <[email protected]>" is marginal trust
:: File /var/cache/pacman/pkg/neovim-0.4.4-2-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)
).
Do you want to delete it? [Y/n] y
error: python-xlib: signature from "Morten Linderud <[email protected]>" is marginal trust
:: File /var/cache/pacman/pkg/python-xlib-0.30-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature
)).
Do you want to delete it? [Y/n] y
error: qutebrowser: signature from "Morten Linderud <[email protected]>" is marginal trust
:: File /var/cache/pacman/pkg/qutebrowser-2.2.3-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signatur
e)).
Do you want to delete it? [Y/n] y
error: texlive-bibtexextra: signature from "Rémy Oudompheng <[email protected]>" is marginal trust
:: File /var/cache/pacman/pkg/texlive-bibtexextra-2021.58697-1-any.pkg.tar.zst is corrupted (invalid or corrupted package
(PGP signature)).
Do you want to delete it? [Y/n] y
error: texlive-games: signature from "Rémy Oudompheng <[email protected]>" is marginal trust
:: File /var/cache/pacman/pkg/texlive-games-2021.56833-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP s
ignature)).
Do you want to delete it? [Y/n] y
error: texlive-humanities: signature from "Rémy Oudompheng <[email protected]>" is marginal trust
:: File /var/cache/pacman/pkg/texlive-humanities-2021.58589-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (
PGP signature)).
Do you want to delete it? [Y/n]
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.
[phunc20@homography-x220t ~]$
Title: Re: [SOLVED] signature from "Artix Buildbot <[email protected]>" is unknown
Post by: alium on 06 June 2021, 08:08:28
you wrote us not, what you did, so... what  EXACTLY yesterday you did?

hint: i guess archlinux keys need be populate again
Title: Re: [SOLVED] signature from "Artix Buildbot <[email protected]>" is unknown
Post by: phunc20 on 06 June 2021, 10:31:46
Oh, I mentioned that I did the steps in the wiki; more precisely, they are

1.  pacman -Sy archlinux-keyring artix-keyring
2.  pacman-key --init
3.  pacman-key --populate archlinux artix
4. pacman -Scc
5. pacman -Syyu

Roughly like this. The first time I did step 1, I couldn't do it, so I did `rm -rf /etc/pacman.d/gnupg`

I tried the whole procedure two to three times, every time with a reboot of the computer before.
But I always get the marginal trust error message above.
Title: Re: [SOLVED] signature from "Artix Buildbot <[email protected]>" is unknown
Post by: ####### on 06 June 2021, 13:55:01
https://forum.artixlinux.org/index.php/topic,2687.msg17692.html#new (https://forum.artixlinux.org/index.php/topic,2687.msg17692.html#new)
https://bugs.archlinux.org/task/71083 (https://bugs.archlinux.org/task/71083)
https://lists.archlinux.org/pipermail/pacman-dev/2021-June/025210.html (https://lists.archlinux.org/pipermail/pacman-dev/2021-June/025210.html)
https://lists.archlinux.org/pipermail/pacman-dev/2021-June/025192.html (https://lists.archlinux.org/pipermail/pacman-dev/2021-June/025192.html)
Try updating your mirrorlist, currently there is a pacman bug where if you get a 404 at some point then you get package corruption.
Possibly in that case this procedure will help, besides deleting the corrupted packages:
Code: [Select]
# rm /var/lib/pacman/sync/*
# pacman-key --init
# pacman-key --populate archlinux artix
# pacman -Syy
# pacman -Syu

Or perhaps if it was a normal key error, this would help, it takes a while to run:
Code: [Select]
# pacman-key --refresh-keys
Title: Re: [SOLVED] signature from "Artix Buildbot <[email protected]>" is unknown
Post by: phunc20 on 06 June 2021, 18:22:29
Thanks,  @#######, sorry for replying late because I was thinking trying your suggestions first and report success later.

Unfortunately, every pacman -Syyu took long on my machine (probably due to LaTeX packages), I can only reply now. I haven't found a solution yet. However, you provides a number of tracks for me to try. I will try all of them, and maybe there are solutions in your suggestions to my problems. Thanks a lot!
Title: Re: [SOLVED] signature from "Artix Buildbot <[email protected]>" is unknown
Post by: phunc20 on 06 June 2021, 18:48:28
It seems that my problem can be called (temporarily) solved. Thanks to @#####, he hinted me to delete some packages; since there were only about 8 packages complaining marginal trust, so I deleted them (`neovim, ueberzug, python-xlib, texlive-sth`). Then pacman -Syyu command got executed without complaining anything any more. So I guess that meant fine.

Just that when I pacman -Ss neovim, there was no more packages called neovim. Maybe it's been removed from artix. I don't know.
Title: Re: [SOLVED] signature from "Artix Buildbot <[email protected]>" is unknown
Post by: strajder on 06 June 2021, 19:03:02
Neovim is in community repository, and visible on my system. Do you have community repository enabled?

I'm using: (/etc/pacman.d/mirrorlist)
Code: [Select]
## Europe
#Server = https://mirrors.dotsrc.org/artix-linux/repos/$repo/os/$arch
#Server = http://ftp.ntua.gr/pub/linux/artix-linux/$repo/os/$arch
#Server = https://ftp.cc.uoc.gr/mirrors/linux/artixlinux/$repo/os/$arch
Server = https://quantum-mirror.hu/mirrors/pub/artix-linux/$repo/os/$arch
# ...etc...

(/etc/pacman.d/mirrorlist-arch)
Code: [Select]
## Worldwide
Server = https://mirror.f4st.host/archlinux/$repo/os/$arch
Server = https://mirror.selfnet.de/archlinux/$repo/os/$arch

# ...etc...
(/etc/pacman.conf)
Code: [Select]

[community]
Include = /etc/pacman.d/mirrorlist-arch
Title: Re: [SOLVED] signature from "Artix Buildbot <[email protected]>" is unknown
Post by: phunc20 on 10 June 2021, 02:29:50
@strajder Thanks a lot. Indeed, it seems that all those operations I have done has altered my /etc/pacman.conf.

I added the lines you have kindly indicated to /etc/pacman.conf, and it's able to find the package now.
Title: Re: [SOLVED] signature from "Artix Buildbot <[email protected]>" is unknown
Post by: tintin on 10 June 2021, 05:41:45
@strajder Thanks a lot. Indeed, it seems that all those operations I have done has altered my /etc/pacman.conf.

I added the lines you have kindly indicated to /etc/pacman.conf, and it's able to find the package now.
"Warning! If you add archlinux's [community] repo, you must add [extra] repo too, otherwise you break some updates!"
https://wiki.artixlinux.org/Main/Repositories

Two days ago I broke my system because I had not read this warning.
Title: Re: [SOLVED] signature from "Artix Buildbot <[email protected]>" is unknown
Post by: strajder on 10 June 2021, 08:41:42
"Warning! If you add archlinux's [community] repo, you must add [extra] repo too, otherwise you break some updates!"
https://wiki.artixlinux.org/Main/Repositories

Two days ago I broke my system because I had not read this warning.
Anything pacman (or AUR helpers) outputs is not to be taken lightly. Sometimes you even need to press Ctrl+S to stop its output and read it (resume with Ctrl+Q, this is assuming your terminal emulator doesn't reserve those keys). Very often warnings contain important steps that need to be performed. If you just press Enter and ignore everything, or use --noconfirm, you do so on your own risk.
Title: Re: [SOLVED] signature from "Artix Buildbot <[email protected]>" is unknown
Post by: tintin on 10 June 2021, 08:56:57
Anything pacman (or AUR helpers) outputs is not to be taken lightly.
Fully agree  :-[


Quote
Sometimes you even need to press Ctrl+S to stop its output and read it (resume with Ctrl+Q, this is assuming your terminal emulator doesn't reserve those keys). Very often warnings contain important steps that need to be performed. If you just press Enter and ignore everything, or use --noconfirm, you do so on your own risk.
Does this mean that we can press these key combinations before confirming with Enter?

I use bash and xfce4-terminal


Title: Re: [SOLVED] signature from "Artix Buildbot <[email protected]>" is unknown
Post by: strajder on 10 June 2021, 09:02:57
https://tldp.org/HOWTO/Text-Terminal-HOWTO-17.html#ss17.8
Code: [Select]
  People new to Linux may unintentionally press Ctrl-S (^S) (or the "No
  Scroll" key) which mysteriously freezes the screen (although that is
  what this key is supposed to do if you use software flow-control).  To
  restore normal screen interaction, press Ctrl-Q (^Q).  Note that
  everything typed during the "freeze" gets executed but you don't see
  any report of this until you hit ^Q.  Thus when it's frozen, don't
  type anything drastic that might destroy files, etc.  One argument for
  using hardware flow-control is to prevent such freezes.
Title: Re: [SOLVED] signature from "Artix Buildbot <[email protected]>" is unknown
Post by: tintin on 10 June 2021, 09:22:25
https://tldp.org/HOWTO/Text-Terminal-HOWTO-17.html#ss17.8
Thank you for this information.
I write down and try to put into practice...
Title: Re: [SOLVED] signature from "Artix Buildbot <[email protected]>" is unknown
Post by: artoo on 10 June 2021, 10:30:39
If you enable arch repos, prepare for eventual sig clashes, because arch packages and artix packages are not the same, have different signatures, even they are named the same and have same version.
Also make sure you  populate the archlinux keyring
This is one major reason we disabled the arch repos.

Cleaning the pacman cache might help.

Code: [Select]
pacman -Sc

 or

Code: [Select]
pacman -Scc


Overall, some basic reading on how pacman works is not a disadvantage.
Title: Re: [SOLVED] signature from "Artix Buildbot <[email protected]>" is unknown
Post by: tintin on 10 June 2021, 13:32:31
Quote
Code: [Select]
pacman -Scc

This one I use regularly  8)

Quote
Overall, some basic reading on how pacman works is not a disadvantage.
Indeed !

I try to retain the most interesting functions of pacman in addition to pacman -Syyu
I remembered two very recently thanks to this forum:
Code: [Select]
pacman -Qi package_name
pacman -Qm