You are not logged in.
Hello,
When upgrading dmd (or any package in the dlang group), I get trust errors:
$ sudo pacman -S dmd
resolving dependencies...
looking for conflicting packages...
Packages (2) libphobos-devel-1:2.073.0-1 dmd-1:2.073.0-1
Total Download Size: 5.16 MiB
Total Installed Size: 83.03 MiB
:: Proceed with installation? [Y/n] y
:: Retrieving packages...
libphobos-devel-1:2.073.0-1-x86_64 3.8 MiB 5.98M/s 00:01 [##############################################################################] 100%
dmd-1:2.073.0-1-x86_64 1386.6 KiB 6.33M/s 00:00 [##############################################################################] 100%
(2/2) checking keys in keyring [##############################################################################] 100%
(2/2) checking package integrity [##############################################################################] 100%
error: libphobos-devel: signature from "Dicebot <public@dicebot.lv>" is marginal trust
:: File /var/cache/pacman/pkg/libphobos-devel-1:2.073.0-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: dmd: signature from "Dicebot <public@dicebot.lv>" is marginal trust
:: File /var/cache/pacman/pkg/dmd-1:2.073.0-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.
I already tried
pacman-key --refresh-keys
and even rebuilt my keys as suggested here, like so:
rm -R /etc/pacman.d/gnupg
rm -R /root/.gnupg
dirmngr </dev/null
pacman-key --init
pacman-key --populate archlinux
pacman-key --refresh-keys
I still get the same error, and my guess is that Dicebot is no longer a trusted user, at least he is not listed here.
How can I install the dmd toolchain again?
Last edited by Kalua (2017-02-22 20:39:54)
Offline
That isn’t a problem on your side. The package is indeed signed by dicebot¹ and the key has only marginal trust. There is already a newer package² in the repo, signed with Levente Polyak’s key³. Just wait for it to be delivered to your mirror — it has been rolled out just few hours ago.
--- edit:
The current packager has confirmed that nothing smelly has occured, so just wait for your mirror to receive the update.
____
¹ 40440DC037C05620984379A6761FAD69BA06C6A9
² Packages: dmd
³ E240B57E2C4630BA768E2F26FC1B547C8D8172C8, Trusted users: anthraxx
Last edited by mpan (2017-02-22 20:13:28)
Sometimes I seem a bit harsh — don’t get offended too easily!
Offline
Thanks, I'm having this problem for a few days and of course it gets resolved the moment I post here xD
dmd installs fine now, waiting for the other dlang packages now and marking this solved.
Offline
Thanks, I'm having this problem for a few days and of course it gets resolved the moment I post here xD
It got resolved because of your post. A bug report would have been better as that's a much more sure way to notifiy the right people of the issue, but this was enough this time.
Offline
Don’t scold them. I was puzzled myself for a moment and I believe many regulars would first suspect something wrong with they local keyring. If Kalua has no experience with Arch or Linux in general then from their point of view it was something wrong on their side only. In such case the forum or the IRC is the right place to ask. I am pretty sure you don’t want to see people reporting bug on every problem they have with the system, if they’re not sure that the issue is caused by the package itself.
Last edited by mpan (2017-02-23 20:43:47)
Sometimes I seem a bit harsh — don’t get offended too easily!
Offline