Artix Linux Forum

Artix Linux => Installation / Migration / Configuration => Topic started by: pietrom on 30 December 2022, 23:47:23

Title: Cannot update my system: error: package: signature from ... is unknown trust
Post by: pietrom on 30 December 2022, 23:47:23
In the last few months I have not been able to update my Artix system (x86-64 laptop, AMD Ryzen 2700, Lenovo).

This is what I do:

1) Update the mirror list: 
Code: [Select]
sudo pacman -U ./artix-mirrorlist-20221209-1-any.pkg.tar.zst
2) Rename the mirror list file name: 
Code: [Select]
sudo mv /etc/pacman.d/mirrorlist.pacnew /etc/pacman.d/mirrorlist
3) Launch Pacman: 
Code: [Select]
sudo pacman -Syyu
Code: [Select]
Everything seems to be going all right: "Retrieving packages", "checking keys in keyring", "checking package integrity" are successful.

Then, I get a series of questions such as:

Code: [Select]
error: archlinux-keyring: signature from "Dudemanguy <[email protected]>" is unknown trust
:: File /var/cache/pacman/pkg/archlinux-keyring-20221220-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]

No matter what I enter (y or n), at the end I get to the following error message:

Code: [Select]
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.

I tried to reinstall Artix from scrach, with no improvement.

Thank you for your help.
Title: Re: Cannot update my system: error: package: signature from ... is unknown trust
Post by: Dudemanguy on 31 December 2022, 04:12:10
Just update artix-keyring first. It should be version 20220901-1.
Title: Re: Cannot update my system: error: package: signature from ... is unknown trust
Post by: pietrom on 01 January 2023, 16:08:58
@Dudemanguy - My artix-keyring is already at version 20220901-1.
It must be something else.
Title: Re: Cannot update my system: error: package: signature from ... is unknown trust
Post by: gripped on 01 January 2023, 17:34:20
Edit: Sorry nonsense reply. Try again !
One thing to try if you wish. 

If it isn't installed install pacutils.
You may have to download it (https://mirrors.dotsrc.org/artix-linux/repos/galaxy/os/x86_64/pacutils-0.11.1-1-x86_64.pkg.tar.zst) manually and install it with
Code: [Select]
sudo pacman -U pacutils-0.11.1-1-x86_64.pkg.tar.zst
Then run
Code: [Select]
paccheck --list-broken
(if you get any permissions errors you can run as sudo)
artix-branding-base will show as broken but almost certainly that's just because it deletes some of it's own files on first run so you can ignore that.
Title: Re: Cannot update my system: error: package: signature from ... is unknown trust
Post by: pietrom on 01 January 2023, 18:01:38
Here is what I get:

Code: [Select]
% sudo paccheck --list-broken
artix-branding-base
openbox
Title: Re: Cannot update my system: error: package: signature from ... is unknown trust
Post by: gripped on 01 January 2023, 18:59:39
Run the same as do below and see if your checksums match mine ?
Code: [Select]
md5sum /var/cache/pacman/pkg/archlinux-keyring-20221220-1-any.pkg.tar.zst*
78ed09ee425a8f2f1068eb8514a1e59d  /var/cache/pacman/pkg/archlinux-keyring-20221220-1-any.pkg.tar.zst
886e4937e56b62f783dcb0ba10bb375d  /var/cache/pacman/pkg/archlinux-keyring-20221220-1-any.pkg.tar.zst.sig
Title: Re: Cannot update my system: error: package: signature from ... is unknown trust
Post by: pietrom on 01 January 2023, 22:15:41
% md5sum /var/cache/pacman/pkg/archlinux-keyring-20221220-1-any.pkg.tar.zst*
78ed09ee425a8f2f1068eb8514a1e59d  /var/cache/pacman/pkg/archlinux-keyring-20221220-1-any.pkg.tar.zst
886e4937e56b62f783dcb0ba10bb375d  /var/cache/pacman/pkg/archlinux-keyring-20221220-1-any.pkg.tar.zst.sig

% md5sum /var/cache/pacman/pkg/artix-keyring-20220901-1-any.pkg.tar.zst*
8b21e9d7a99f56e62e2ce4daf370f9d6  /var/cache/pacman/pkg/artix-keyring-20220901-1-any.pkg.tar.zst
787979bf7716c48ac837bf580e45f3eb  /var/cache/pacman/pkg/artix-keyring-20220901-1-any.pkg.tar.zst.sig
Title: Re: Cannot update my system: error: package: signature from ... is unknown trust
Post by: gripped on 01 January 2023, 22:24:24
This post and thread from very recently seems like it might be related ?
https://forum.artixlinux.org/index.php/topic,4910.msg31417.html#msg31417
Quote
I modified the sh script to install artix-keyring first and it still gives me Dudeman error

* pacman-key --refresh fixes this issue after installing artix-keyring archlinux-keyring and artix-archlinux-support. 
Other than that I'm not sure sorry.
Title: Re: Cannot update my system: error: package: signature from ... is unknown trust
Post by: pietrom on 01 January 2023, 23:15:11
@gripped - No improvement with that, either. Thank you for your help, anyway.
Title: Re: Cannot update my system: error: package: signature from ... is unknown trust
Post by: jspaces on 02 January 2023, 01:23:31
The whole issue really sounds like the pacman gnupg folder may have the incorrect permissions.
Code: [Select]
#ls -l /etc/pacman.d
drwxr-xr-x 5 root root  4096 Dec 22 00:32 gnupg
If one uses gnupg directly on the /etc/pacman.d/gnupg folder it will complain about permissions. If you change it, pacman will no longer be able to function correctly in my experience.

Or maybe the whole /etc/pacman.d/gnupg folder is broken somehow.
Code: [Select]
#mv /etc/pacman.d/gnupg /etc/pacman.d/gnupg-original
#pacman-key --init
Comment out the Archlinux repos or any non Artix ones in /etc/pacman.conf. Once the Artix keyring is re-initialized, pacman -Syyu should function again. Then try to do the archlinux stuff afterwards.

I cannot say for sure if this is your issue though since you did say you try a fresh install without success. Some type of hardware issue maybe causing gremlins for you.
I would also try to get another new version of the installation media and see if you can use pacman through it. If it does, it is possible to point the installation pacman to the root of the system's file structure once the systems file partitions in /etc/fstab have been mounted.
Code: [Select]
(The system root partition has been mounted to /mnt/artix.)
#pacman --root  /mnt/artix  -Syu <what packages you want>
This would be the way I would try to get the pacman-key artixlinux-keyring functioning without starting from scratch if everything else fails. It is the basic manually way to install the whole OS so it should not fail.