Pacman untrusted key

lakiluk · 2012-01-17 21:37:16

Hi, I can not update the system. I have errors with GPG Key. So I added to /etc/pacman.conf
<code>SigLevel = Never</code>
It did not work.
<code>audacity: signature from "Eric Belanger <eric@archlinux.org>" is unknow trust</code> etc

pls Help.

karol · 2012-01-17 21:38:03

Did you merge pacnew files?

Uchiha · 2012-01-17 21:58:48

I'm with the same problem!

karol · 2012-01-17 22:07:34

I can offer you the same solution: merge the pacnew files.

If you have done it and you're still getting errors, please post your pacman.conf.

Uchiha · 2012-01-17 22:30:19

I read in other topic to do this, and I did. Also set SigLevel = Optional TrustAll. But the pacman persists in download the SIGs.
This is my pacman.conf:

#
# /etc/pacman.conf
#
# See the pacman.conf(5) manpage for option and repository directives

#
# GENERAL OPTIONS
#
[options]
# The following paths are commented out with their default values listed.
# If you wish to use different paths, uncomment and update the paths.
#RootDir     = /
#DBPath      = /var/lib/pacman/
#CacheDir    = /var/cache/pacman/pkg/
#LogFile     = /var/log/pacman.log
#GPGDir      = /etc/pacman.d/gnupg/
HoldPkg     = pacman glibc
# If upgrades are available for these packages they will be asked for first
SyncFirst   = pacman
#XferCommand = /usr/bin/curl -C - -f %u > %o
XferCommand = /usr/bin/axel -n 7 -v -a -o %o %u
#XferCommand = /usr/bin/wget --passive-ftp -c -O %o %u
#CleanMethod = KeepInstalled
Architecture = auto

# Pacman won't upgrade packages listed in IgnorePkg and members of IgnoreGroup
#IgnorePkg   =
#IgnoreGroup =

#NoUpgrade   =
#NoExtract   =

# Misc options
#UseSyslog
#UseDelta
#TotalDownload
CheckSpace
#VerbosePkgLists

# PGP signature checking
# NOTE: None of this will work without running `pacman-key --init` first.
# The compiled in default is equivalent to the following line. This requires
# you to locally sign and trust packager keys using `pacman-key` for them to be
# considered valid.
#SigLevel = Optional TrustedOnly
# If you wish to check signatures but avoid local sign and trust issues, use
# the following line. This will treat any key imported into pacman's keyring as
# trusted.
SigLevel = Optional TrustAll
# For now, off by default unless you read the above.
SigLevel = Optional TrustAll

#
# REPOSITORIES
#   - can be defined here or included from another file
#   - pacman will search repositories in the order defined here
#   - local/custom mirrors can be added here or in separate files
#   - repositories listed first will take precedence when packages
#     have identical names, regardless of version number
#   - URLs will have $repo replaced by the name of the current repo
#   - URLs will have $arch replaced by the name of the architecture
#
# Repository entries are of the format:
#       [repo-name]
#       Server = ServerName
#       Include = IncludePath
#
# The header [repo-name] is crucial - it must be present and
# uncommented to enable the repo.
#

# The testing repositories are disabled by default. To enable, uncomment the
# repo name header and Include lines. You can add preferred servers immediately
# after the header, and they will be used before the default mirrors.

#[testing]
#SigLevel = Never
#Include = /etc/pacman.d/mirrorlist

[core]
SigLevel = Optional TrustAll
Include = /etc/pacman.d/mirrorlist

[extra]
SigLevel = Optional TrustAll
Include = /etc/pacman.d/mirrorlist

#[community-testing]
#SigLevel = Optional TrustAll
#Include = /etc/pacman.d/mirrorlist

[community]
SigLevel = Optional TrustAll
Include = /etc/pacman.d/mirrorlist

# An example of a custom package repository.  See the pacman manpage for
# tips on creating your own repositories.
#[custom]
#SigLevel = Optional TrustAll
#Server = file:///home/custompkgs

karol · 2012-01-17 22:49:41

Have you run 'pacman-key --init'? Can you post the whole pacman output you're getting?

You don't have to use 'SigLevel = Optional TrustAll' in every possible place, keep the first one, but you can comment out the rest.

'SigLevel = Optional TrustAll' in the repos part, like

[core]
SigLevel = Optional TrustAll
Include = /etc/pacman.d/mirrorlist

should be used when you want this setting enabled only for this repo.

Mr.Elendig · 2012-01-17 23:01:18

https://wiki.archlinux.org/index.php/Pa … r_PGP_keys etc
Also you might want to change the keyserver to mit, since the gnu one is a bit unstable atm.

Uchiha · 2012-01-18 00:03:00

karol wrote:

Have you run 'pacman-key --init'? Can you post the whole pacman output you're getting?

You don't have to use 'SigLevel = Optional TrustAll' in every possible place, keep the first one, but you can comment out the rest.
'SigLevel = Optional TrustAll' in the repos part, like
[core]
SigLevel = Optional TrustAll
Include = /etc/pacman.d/mirrorlist
should be used when you want this setting enabled only for this repo.

I did it, but nothing has changed! There's no updates now, but the pacman still persists in download the SIGs.

[keoma@bacon ~]$ sudo pacman -Syu
:: Sincronizando a base de dados de pacotes...
Initializing download: http://www.las.ic.unicamp.br/pub/archlinux/core/os/i686/core.db
File size: 109243 bytes
Opening output file /var/lib/pacman/sync/core.db.part
Starting download

Connection 0 finished                                                          ]
Connection 1 finished                                                          ]
Connection 4 finished                                                          ]
Connection 3 finished                                                          ]
Connection 2 finished                                                          ]
Connection 5 finished                                                          ]
[100%] [..................................................] [  67,8KB/s] [00:00]

Downloaded 106,7 kilobytes in 1 second. (67,79 KB/s)
Initializing download: http://www.las.ic.unicamp.br/pub/archlinux/core/os/i686/core.db.sig
HTTP/1.1 404 Not Found
Initializing download: http://www.las.ic.unicamp.br/pub/archlinux/extra/os/i686/extra.db
File size: 1209448 bytes
Opening output file /var/lib/pacman/sync/extra.db.part
Starting download

Connection 0 finished                                                          ]
Connection 1 finished                                                          ]
Connection 3 finished                                                          ]
Connection 2 finished                                                          ]
Connection 4 finished                                                          ]
Connection 5 finished                                                          ]
[100%] [..................................................] [ 451,2KB/s] [00:00]

Downloaded 1181,1 kilobytes in 2 seconds. (451,21 KB/s)
Initializing download: http://www.las.ic.unicamp.br/pub/archlinux/extra/os/i686/extra.db.sig
HTTP/1.1 404 Not Found
Initializing download: http://www.las.ic.unicamp.br/pub/archlinux/community/os/i686/community.db
File size: 1050847 bytes
Opening output file /var/lib/pacman/sync/community.db.part
Starting download

Connection 0 finished                                                          ]
Connection 1 finished                                                          ]
Connection 2 finished                                                          ]
Connection 4 finished                                                          ]
Connection 3 finished                                                          ]
Connection 5 finished                                                          ]
[100%] [..................................................] [ 367,5KB/s] [00:00]

Downloaded 1026,2 kilobytes in 2 seconds. (367,50 KB/s)
Initializing download: http://www.las.ic.unicamp.br/pub/archlinux/community/os/i686/community.db.sig
HTTP/1.1 404 Not Found
:: Iniciando atualização completa do sistema...
 não há nada a fazer
[keoma@bacon ~]$

karol · 2012-01-18 00:13:27

That's what I thought.
The databases are not signed, only the packages are. https://bbs.archlinux.org/viewtopic.php … 8#p1042148

Uchiha · 2012-01-18 01:34:01

karol wrote:

That's what I thought.
The databases are not signed, only the packages are. https://bbs.archlinux.org/viewtopic.php … 8#p1042148

I see. So, I have just to wait? Can this disturb the update?

EDIT

I got it, now it's running perfectly! I just merge the default pacman.conf.pacnew in pacman.conf.
Thanks karol and Mr.Elendig!

Last edited by Uchiha (2012-01-18 17:28:30)

karol · 2012-01-20 08:48:28

Please remember to mark the thread as solved.

Allan · 2012-01-20 08:55:18

What downloader are you using. Pacman always attempts to download .sig files if Optional or Required are used but the internal downloader handles them being missing properly.

Arch Linux

#1 2012-01-17 21:37:16

Pacman untrusted key

#2 2012-01-17 21:38:03

Re: Pacman untrusted key

#3 2012-01-17 21:58:48

Re: Pacman untrusted key

#4 2012-01-17 22:07:34

Re: Pacman untrusted key

#5 2012-01-17 22:30:19

Re: Pacman untrusted key

#6 2012-01-17 22:49:41

Re: Pacman untrusted key

#7 2012-01-17 23:01:18

Re: Pacman untrusted key

#8 2012-01-18 00:03:00

Re: Pacman untrusted key

#9 2012-01-18 00:13:27

Re: Pacman untrusted key

#10 2012-01-18 01:34:01

Re: Pacman untrusted key

#11 2012-01-20 08:48:28

Re: Pacman untrusted key

#12 2012-01-20 08:55:18

Re: Pacman untrusted key

Board footer