So I've been anxiously looking for information for the last two days about this. I've found a lot of similar problems but the fixes that work there don't work here.
I've been getting a similar "signature from "David Runge [...] is marginal trust" error to several people on this forum, but I don't have Universe enabled or archlinux-keyring on my system. This comes after a mere five days or so of being away from my laptop and not doing a full upgrade in that time. I normally run pacman -Syu about once per boot.
lib32-libcap-2.65-1-x86_64.pgk.tar.zst seems to be the package at issue.
I have tried reinstalling the keyring and refreshing the keys as everyone says. I've done this about eight times.
sudo pacman -Sy artix-keyring && sudo pacman-key --populate artix && sudo pacman-key --refresh-keys
The first two commands show no errors, --refresh-keys takes a long, long time with a lot of refused connections and errors and so on. It probably prints about a thousand lines to the console. Then when I try "pacman -Syuu" the error is reproduced exactly as before.
Here is the full "sudo pacman -Syuu" output of my most recent attempt. (I normally use yay but this is the output of pacman itself, and neither have been behaving any differently wrt this error.)
:: Synchronizing package databases...
system is up to date
world is up to date
galaxy is up to date
community is up to date
extra is up to date
multilib is up to date
lib32-gremlins is up to date
lib32 is up to date
:: Starting full system upgrade...
resolving dependencies...
looking for conflicting packages...
Packages (180) audacity-1:3.1.3-1 babl-0.1.92-1 base-3-1
ca-certificates-mozilla-3.81-1 cmake-3.23.3-1 firefox-103.0-1
gcc-12.1.0-3 gcc-libs-12.1.0-3 gegl-0.4.38-1 go-2:1.18.4-1.3
gsm-1.0.20-1 harfbuzz-5.0.1-1 harfbuzz-icu-5.0.1-1
haskell-adjunctions-4.4.1-18 haskell-aeson-1.5.6.0-121
haskell-aeson-pretty-0.8.9-72 haskell-ansi-terminal-0.11.3-7
haskell-asn1-encoding-0.9.6-180 haskell-asn1-parse-0.9.5-180
haskell-asn1-types-0.3.4-159 haskell-assoc-1.0.2-149
haskell-async-2.2.4-86 haskell-attoparsec-0.14.4-27
haskell-base-compat-batteries-0.12.1-39
haskell-base-orphans-0.8.6-57
haskell-base16-bytestring-1.0.2.0-33
haskell-base64-bytestring-1.2.1.0-54
haskell-bifunctors-5.5.12-13 haskell-blaze-html-0.9.1.2-177
haskell-blaze-markup-0.8.2.8-83 haskell-call-stack-0.4.0-91
haskell-case-insensitive-1.2.1.0-156 haskell-citeproc-0.7-5
haskell-colour-2.3.6-116 haskell-commonmark-0.2.2-6
haskell-commonmark-extensions-0.2.3.2-3
haskell-commonmark-pandoc-0.2.1.2-60 haskell-comonad-5.0.8-152
haskell-conduit-1.3.4.2-69 haskell-conduit-extra-1.3.6-10
haskell-connection-0.3.1-207 haskell-cryptonite-0.30-23
haskell-data-default-0.7.1.1-238
haskell-data-default-instances-dlist-0.0.1-251
haskell-data-fix-0.3.2-55 haskell-dbus-1.2.22-76
haskell-distributive-0.6.2.1-155 haskell-dlist-1.0-173
haskell-doclayout-0.4-3 haskell-doctemplates-0.10.0.2-1
haskell-emojis-0.1.2-27 haskell-free-5.1.9-7
haskell-glob-0.10.2-43 haskell-haddock-library-1.10.0-149
haskell-hashable-1.4.0.2-28 haskell-hinotify-0.4.1-124
haskell-hourglass-0.2.12-199 haskell-hslua-2.2.0-5
haskell-hslua-aeson-2.2.0-5 haskell-hslua-classes-2.2.0-5
haskell-hslua-core-2.2.0-5 haskell-hslua-marshalling-2.2.0-5
haskell-hslua-module-doclayout-1.0.4-28
haskell-hslua-module-path-1.0.1-32
haskell-hslua-module-system-1.0.1-32
haskell-hslua-module-text-1.0.1-32
haskell-hslua-module-version-1.0.1-32
haskell-hslua-objectorientation-2.2.0-5
haskell-hslua-packaging-2.2.0-5 haskell-hsyaml-0.2.1.1-11
haskell-http-4000.4.1-14 haskell-http-client-0.7.11-37
haskell-http-client-tls-0.3.6.1-32
haskell-http-conduit-2.3.8-212 haskell-http-types-0.12.3-249
haskell-indexed-traversable-instances-0.1.1-39
haskell-invariant-0.6-4 haskell-iproute-1.7.12-31
haskell-ipynb-0.2-31 haskell-jira-wiki-markup-1.4.0-66
haskell-juicypixels-3.3.7-23 haskell-kan-extensions-5.2.5-7
haskell-lens-5.1.1-20 haskell-libmpd-0.10.0.0-101
haskell-libyaml-0.1.2-233 haskell-lpeg-1.0.3-2
haskell-lua-2.2.1-3 haskell-memory-0.17.0-19
haskell-mono-traversable-1.0.15.3-66 haskell-network-3.1.2.7-31
haskell-network-uri-2.6.4.1-88 haskell-onetuple-0.3.1-28
haskell-pandoc-lua-marshal-0.1.6-2
haskell-pandoc-types-1.22.2-27 haskell-pem-0.2.4-236
haskell-primitive-0.7.4.0-17 haskell-profunctors-5.6.2-94
haskell-quickcheck-2.14.2-336 haskell-random-1.2.1.1-34
haskell-reflection-2.1.6-149 haskell-resourcet-1.2.6-3
haskell-safe-exceptions-0.1.7.3-11
haskell-scientific-0.3.7.0-66 haskell-semigroupoids-5.3.7-47
haskell-skylighting-0.12.3.1-6
haskell-skylighting-core-0.12.3.1-6 haskell-socks-0.6.1-183
haskell-split-0.2.3.4-198 haskell-splitmix-0.1.0.4-82
haskell-streaming-commons-0.2.2.4-27 haskell-strict-0.4.0.1-123
haskell-syb-0.7.2.1-152 haskell-tagsoup-0.14.8-179
haskell-temporary-1.3-435 haskell-texmath-0.12.5.1-4
haskell-text-conversions-0.3.1.1-13 haskell-text-icu-0.8.0.2-1
haskell-th-compat-0.1.3-50 haskell-th-lift-instances-0.1.19-39
haskell-these-1.1.1.1-150 haskell-time-compat-1.9.6.1-50
haskell-tls-1.6.0-5 haskell-transformers-base-0.4.6-55
haskell-typed-process-0.2.10.1-6
haskell-unicode-collation-0.1.3.2-12
haskell-unicode-data-0.3.0-20
haskell-unicode-transforms-0.4.0.1-19
haskell-uniplate-1.6.13-137
haskell-unordered-containers-0.2.19.1-21
haskell-utf8-string-1.0.2-103 haskell-uuid-types-1.0.5-70
haskell-vector-0.12.3.1-109
haskell-vector-algorithms-0.8.0.4-118 haskell-void-0.7.3-156
haskell-x11-xft-0.3.4-20 haskell-x509-1.7.7-9
haskell-x509-store-1.6.9-34 haskell-x509-system-1.6.7-37
haskell-x509-validation-1.6.12-39
haskell-xml-conduit-1.9.1.1-124 haskell-yaml-0.11.8.0-40
haskell-zip-archive-0.4.2.1-23 haskell-zlib-0.6.3.0-13
hwloc-2.8.0-1 iso-codes-4.11.0-1 lame-3.100-4 ldb-2:2.5.2-1
lib32-gcc-libs-12.1.0-3 lib32-harfbuzz-5.0.1-1
lib32-libcap-2.65-1 lib32-llvm-libs-14.0.6-2
lib32-mesa-22.1.4-1 lib32-wayland-1.21.0-1 libcap-2.65-1
libmm-glib-1.18.10-2 libplacebo-4.208.0-1 libsbsms-2.3.0-3
libspiro-1:20220722-1 libuv-1.44.2-1 linux-5.18.14.artix1-1
llvm-libs-14.0.6-2 lv2-1.18.6-1 mesa-22.1.4-1
mobile-broadband-provider-info-20220725-1 nss-3.81-1
pacman-6.0.1-7 pandoc-2.18-12 perl-www-mechanize-2.12-1
python-pip-22.2-1 python-trove-classifiers-2022.7.22-1
qt5-base-5.15.5+kde+r174-1 qt5-wayland-5.15.5+kde+r38-2
serd-0.30.14-1 smbclient-4.16.4-1 sndio-1.9.0-1
sord-0.16.12-3 vlc-3.0.17.4-7 webkit2gtk-2.36.5-1
xmobar-0.40-4 xorg-xinput-1.6.3-3.1
Total Installed Size: 2362.35 MiB
Net Upgrade Size: 61.19 MiB
:: Proceed with installation? [Y/n] y
(180/180) checking keys in keyring [######################] 100%
(180/180) checking package integrity [######################] 100%
error: lib32-libcap: signature from "David Runge <[email protected]>" is marginal trust
:: File /var/cache/pacman/pkg/lib32-libcap-2.65-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.
Is this a "wait for the maintainers to sort something out" error? Or is there something I'm not doing?
I guess you have enabled artix-archlinux-support before it has been moved to the universe repository.
To fix your issue, you should enable the universe repository as described here (https://wiki.artixlinux.org/Main/Repositories).
If a subsequent
pacman -Syyu
doesn't solve your problem, try uninstalling the offending package, upgrade and reinstall.
Compare this thread:
https://forum.artixlinux.org/index.php/topic,4314.msg27830.html#msg27830
Hope this helps.
Thank you! Once universe was enabled, the same error recurred so I uninstalled lib32-libcap and the entire dependency chain (Wine was what I had explicitly installed that came with that dependency) and ran an upgrade, after which wine reinstalled perfectly well. Thanks a lot... I hadn't made the connection with the recent news about artix-archlinux-support moving repos. One of those stupid oversights...
I had had the same issue a few days ago - I didn't think the connection to the repo move was so obvious, but eventually I came across the solution.
Anyway, I'm glad that solved your issue! :)
@ACLangham Can you edit your post title and add a "[SOLVED]" to the beginning of it?
I thought clicking "solve" would do that, my apologies. It's done now.
On signatures.
It is highly recommended to read the pacman manual or consult the arch wiki on common pacman commands.
https://wiki.archlinux.org/title/Pacman
Among these commands is
pacman -Sc
and
pacman -Scc
which clean the local package cache.
After the cache is cleaned, it is very likely, your sig problems go away.
Since artix and arch packages do come with same version numbers and naming, any arch package in the cache will produce a sig clash if artix have added these previously exclusively arch packages to the artix repos.
This is one reason why arch support package was removed from artix repos, but there are more.
All artix packages are signed by an artixlinux email associated. Anything else is not signed by artix.