• Status Unconfirmed
  • Percent Complete
    0%
  • Task Type Bug Report
  • Category Packages
  • Assigned To No-one
  • Operating System i686
  • Severity Critical
  • Priority Very Low
  • Reported Version
  • Due in Version Undecided
  • Due Date Undecided
  • Votes
  • Private
Attached to Project: Arch Linux 32
Opened by Mike - 07.07.2024

FS#360 - Archlinux32-Keyring was trusted but became untrusted

some months ago I installed archlinux32 on my eeepc. I followed the steps on the archlinux32.org downloads page to fix my keyring. I was able to use pacman just fine. Yesterday I went to update the system and got trust issues with the archlinux32-keyring. I think this has something to do with the updated archlinux-keyring. I have removed archlinux-keyring from the system.

I joined the IRC and have been working on how to resolve the issue with no luck.

First i updated the mirrorlist from the link in the downloads page as noted to fix pacman with a working install.
I forced the pacman-key to update the trust database my editing /usr/bin/pacman-key line 613 to

if ! "${GPG_PACMAN[@]}" --batch --check-trustdb --yes; then

so Here is what happens when I try to pacman -Syu:

[Loops@eeepc901 ~]$ sudo pacman -Syu                                                                                                                        
:: Synchronizing package databases...
 core                                                              131.4 KiB   128 KiB/s 00:01 [#######################################################] 100%
 extra                                                               7.5 MiB  2.10 MiB/s 00:04 [#######################################################] 100%
 community is up to date
:: Starting full system upgrade...
resolving dependencies...
looking for conflicting packages...

Packages (43) alsa-lib-1.2.12-1.0  alsa-ucm-conf-1.2.12-1.0  aom-3.9.1-1.0  ca-certificates-20240618-1.0  ca-certificates-mozilla-3.101-1.0
              ca-certificates-utils-20240618-1.0  e2fsprogs-1.47.1-4.0  ell-0.66-1.0  findutils-4.10.0-1.0  fribidi-1.0.15-1.0  git-2.45.2-1.0
              hicolor-icon-theme-0.18-1.0  hwdata-0.383-1.0  libcups-2:2.4.10-1.0  libdrm-2.4.122-1.0  libevdev-1.13.2-1.0  libgcrypt-1.11.0-2.0
              libinput-1.26.1-1.0  libnghttp2-1.62.1-1.0  libogg-1.3.5-2.0  libproxy-0.5.7-1.0  librsvg-2:2.58.1-1.0  libwacom-2.12.1-1.0
              linux-6.9.7.arch1-1.2  linux-api-headers-6.7-1.1  linux-firmware-20240610.9c10a208-1.0  linux-firmware-whence-20240610.9c10a208-1.0
              lynx-2.9.2-1.0  mkinitcpio-39.2-2.0  nettle-3.10-1.0  nspr-4.35-3.0  nss-3.101-1.0  openssh-9.8p1-1.1  openssl-3.3.1-1.0
              pacman-mirrorlist-20240616-1.2  pciutils-3.13.0-1.0  qt5-base-5.15.14+kde+r141-1.0  qt5-translations-5.15.14-1.0  sqlite-3.46.0-1.0
              wayland-1.23.0-1.0  xkeyboard-config-2.42-1.0  xz-5.6.2-1.0  zstd-1.5.6-1.0

Total Download Size:     1.47 MiB
Total Installed Size:  515.71 MiB
Net Upgrade Size:      -59.78 MiB

:: Proceed with installation? [Y/n] 
:: Retrieving packages...
 libgcrypt-1.11.0-2.0-pentium4                                     612.7 KiB   726 KiB/s 00:01 [#######################################################] 100%
 libdrm-2.4.122-1.0-pentium4                                       343.2 KiB  2.13 MiB/s 00:00 [#######################################################] 100%
 libinput-1.26.1-1.0-pentium4                                      292.8 KiB  1331 KiB/s 00:00 [#######################################################] 100%
 libcups-2:2.4.10-1.0-pentium4                                     261.6 KiB  1355 KiB/s 00:00 [#######################################################] 100%
 Total (4/4)                                                      1510.3 KiB   717 KiB/s 00:02 [#######################################################] 100%
(43/43) checking keys in keyring                                                               [#######################################################] 100%
(43/43) checking package integrity                                                             [#######################################################] 100%
error: alsa-ucm-conf: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/alsa-ucm-conf-1.2.12-1.0-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]  
error: linux-api-headers: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/linux-api-headers-6.7-1.1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: alsa-lib: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/alsa-lib-1.2.12-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: aom: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/aom-3.9.1-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: findutils: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/findutils-4.10.0-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: openssl: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/openssl-3.3.1-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: sqlite: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/sqlite-3.46.0-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: e2fsprogs: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/e2fsprogs-1.47.1-4.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: libgcrypt: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/libgcrypt-1.11.0-2.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: xz: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/xz-5.6.2-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: zstd: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/zstd-1.5.6-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: ca-certificates-utils: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/ca-certificates-utils-20240618-1.0-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: ca-certificates-mozilla: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/ca-certificates-mozilla-3.101-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: ca-certificates: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/ca-certificates-20240618-1.0-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: ell: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/ell-0.66-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: fribidi: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/fribidi-1.0.15-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: libnghttp2: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/libnghttp2-1.62.1-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: git: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/git-2.45.2-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: hicolor-icon-theme: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/hicolor-icon-theme-0.18-1.0-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: hwdata: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/hwdata-0.383-1.0-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: nettle: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/nettle-3.10-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: libcups: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/libcups-2:2.4.10-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: libdrm: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/libdrm-2.4.122-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: libevdev: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/libevdev-1.13.2-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: libwacom: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/libwacom-2.12.1-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: libinput: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/libinput-1.26.1-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: libogg: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/libogg-1.3.5-2.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: libproxy: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/libproxy-0.5.7-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: librsvg: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/librsvg-2:2.58.1-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: mkinitcpio: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/mkinitcpio-39.2-2.0-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: linux: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/linux-6.9.7.arch1-1.2-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: linux-firmware-whence: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/linux-firmware-whence-20240610.9c10a208-1.0-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: linux-firmware: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/linux-firmware-20240610.9c10a208-1.0-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: lynx: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/lynx-2.9.2-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: nspr: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/nspr-4.35-3.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: nss: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/nss-3.101-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: openssh: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/openssh-9.8p1-1.1-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: pacman-mirrorlist: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/pacman-mirrorlist-20240616-1.2-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: pciutils: signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" is unknown trust
:: File /var/cache/pacman/pkg/pciutils-3.13.0-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: qt5-translations: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/qt5-translations-5.15.14-1.0-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: wayland: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/wayland-1.23.0-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: xkeyboard-config: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/xkeyboard-config-2.42-1.0-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: qt5-base: signature from "TasosSah (Arch32 Package Signing Key) <arch32@tasossah.com>" is unknown trust
:: File /var/cache/pacman/pkg/qt5-base-5.15.14+kde+r141-1.0-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.

The Next course of action seems to be resetting the keyring It was suggested I follow a guide on the parabola wiki: https://wiki.parabola.nu/Parabola_Keyring#Resetting_the_Parabola_Keyring

Mike commented on 08.07.2024 00:32
 $ sudo pacman -Scc
 $ sudo pacman --needed -Syy archlinux32-keyring
 $ sudo mv /etc/pacman.d/gnupg /etc/pacman.d/gnupg-bak
 $ sudo pacman-key --init
 $ sudo pacman-key --populate archlinux32 

worked as a fix. Am now able to run pacman -Syu successfully

Loading...

Available keyboard shortcuts

Tasklist

Task Details

Task Editing