Arch Linux

cooltrain

Member

Registered: 2022-01-16

Posts: 3

gpg signature fail, install iso

Hi.

I have been using arch for a while and loving it. Now i wanted to bring back to life an old machine i had in storage.
I just downloaded the install ISO and the iso.sig and when i checked it failed to verify. This is my output:

$ pacman-key -v archlinux-2022.01.01-x86_64.iso.sig 
==> Checking archlinux-2022.01.01-x86_64.iso.sig... (detached)
gpg: Firmado el sáb 01 ene 2022 11:14:58 CET
gpg:                usando RSA clave 4AA4767BBC9C4B1D18AE28B77F2D434B9741E8AC
gpg:                emisor "pierre@archlinux.de"
gpg: NOTA: no se puede escribir base de datos de confianza
gpg: Firma correcta de "Pierre Schmitz <pierre@archlinux.de>" [total]
gpg:                 alias "Pierre Schmitz <pierre@archlinux.org>" [dudosa]

My system language is Spanish so that is fine, it says [suspicious] and that bothers me.
Should I proceed with the install? I dont know if i should maybe wait.

Cheers!

Last edited by cooltrain (2022-01-16 21:34:26)

Scimmia

Fellow

Registered: 2012-09-01

Posts: 11,610

Re: gpg signature fail, install iso

Prepend the command with LC_ALL=C

cooltrain

Member

Registered: 2022-01-16

Posts: 3

Re: gpg signature fail, install iso

$ LC_ALL=C pacman-key -v archlinux-2022.01.01-x86_64.iso.sig 
==> Checking archlinux-2022.01.01-x86_64.iso.sig... (detached)
gpg: Signature made Sat Jan  1 11:14:58 2022 CET
gpg:                using RSA key 4AA4767BBC9C4B1D18AE28B77F2D434B9741E8AC
gpg:                issuer "pierre@archlinux.de"
gpg: Note: trustdb not writable
gpg: Good signature from "Pierre Schmitz <pierre@archlinux.de>" [full]
gpg:                 aka "Pierre Schmitz <pierre@archlinux.org>" [marginal]

Scimmia

Fellow

Registered: 2012-09-01

Posts: 11,610

Re: gpg signature fail, install iso

So everything is fine. The signature is good.

cooltrain

Member

Registered: 2022-01-16

Posts: 3

Re: gpg signature fail, install iso

ah, i got suspicious for the translation they picked for marginal its much stronger in spanish. Thanks for the fast answer!

Last edited by cooltrain (2022-01-17 00:14:54)

Scimmia

Fellow

Registered: 2012-09-01

Posts: 11,610

Re: gpg signature fail, install iso

That's for key trust, it has nothing to do with whether the sig is good or not.