Arch Linux

pkropf

Member

Registered: 2022-12-27

Posts: 9

Installation Woes - linux-firmware signature is unknown trust

I'm trying Arch linux for the first time. Installing from the ISO I downloaded and following the instructions from https://wiki.archlinux.org/title/Installation_guide. The command:

pacstrap -K /mnt base linux linux-firmware

throws lots of errors like:

error: linux-firmware: signature from "Laurent Carlier <lordheavy@archlinux.org>" is unknown trust.

I've tried various fixed I've found like:

pacman -S archlinux-keyring (fails with similar "is unknown trust" error)

and

pacman-key --refresh-keys (completed successfully)

I'm at a loss as to how to get past this and actually install Arch. Any help would be appreciated.

- Peter

Head_on_a_Stick

Member

From: London

Registered: 2014-02-20

Posts: 7,732

Website

Re: Installation Woes - linux-firmware signature is unknown trust

Try

# pacman -Sy archlinux-keyring

Just don't ever use -Sy in an installed system: https://wiki.archlinux.org/title/System … nsupported

EDIT: corrected package name. D'oh!

Last edited by Head_on_a_Stick (2022-12-27 21:07:39)

---

Are you infected with Wetiko?

pkropf

Member

Registered: 2022-12-27

Posts: 9

Re: Installation Woes - linux-firmware signature is unknown trust

Results in:

error: archlinux-keyring: signature from "Christian Hesse <eworm@archlinux.org>" is unknown trust.

Head_on_a_Stick

Member

From: London

Registered: 2014-02-20

Posts: 7,732

Website

Re: Installation Woes - linux-firmware signature is unknown trust

Is this with archlinux-2022.12.01-x86_64.iso? I've just tried in a VM with that ISO and my suggestion gets things working there.

---

Are you infected with Wetiko?

pkropf

Member

Registered: 2022-12-27

Posts: 9

Re: Installation Woes - linux-firmware signature is unknown trust

That's what I'm trying to install. Will start again from scratch and see if there's something that I've missed in the installation steps.

pkropf

Member

Registered: 2022-12-27

Posts: 9

Re: Installation Woes - linux-firmware signature is unknown trust

If I try running the

# pacman -Sy archlinux-keyring

command before

# pacstrap -K /mnt base linux linux-firmware

I get a error:

warning: Public keyring not found; have you run 'pacman-key --init'?

Should that command be run?

Head_on_a_Stick

Member

From: London

Registered: 2014-02-20

Posts: 7,732

Website

Re: Installation Woes - linux-firmware signature is unknown trust

I reinstalled the keyring after the pacstrap command failed. Try that. EDIT: disregard, see below.

Last edited by Head_on_a_Stick (2022-12-27 23:05:12)

---

Are you infected with Wetiko?

Scimmia

Fellow

Registered: 2012-09-01

Posts: 11,544

Re: Installation Woes - linux-firmware signature is unknown trust

You're trying to do all of this before pacman-init.service is finished, so the keyring isn't set up yet. You can get around it by https://wiki.archlinux.org/title/Pacman … l_the_keys or reboot and make sure the service finishes before trying to use pacman/pacstrap.

pkropf

Member

Registered: 2022-12-27

Posts: 9

Re: Installation Woes - linux-firmware signature is unknown trust

Now I'm very confused. I'm following the instructions from https://wiki.archlinux.org/title/Installation_guide. At what point do I either need to wait for the pacman-init.service to finish? Or reboot? Or perform the mentioned steps to reset all keys?

Scimmia

Fellow

Registered: 2012-09-01

Posts: 11,544

Re: Installation Woes - linux-firmware signature is unknown trust

pacman-init.service runs when you boot the ISO. It sets up the keyring. If you try to use the keyring before it's finished (especially on low entropy system like VMs), you'll get errors like you're seeing. You either need to wait for the service to finish (systemctl status pacman-init.service), or if you've already screwed up the keyring by trying to use it, see the link.

And yes, you will need to update archlinux-keyring with pacman like was said earlier. The keyring on the current ISO is out of date, so you'll get errors later.

Last edited by Scimmia (2022-12-27 23:31:54)

pkropf

Member

Registered: 2022-12-27

Posts: 9

Re: Installation Woes - linux-firmware signature is unknown trust

I've rebooted from the ISO and connected to my local wifi network.

systemctl status pacman-init

shows:

pacman-init.service - Initializes Pacman keyring
  Loaded: loaded (/etc/systemd/system/pacman-init.service; enabled; preset: disable)
  Active: inactive (dead)

The /etc/pacman.d/gnupg directory is empty.

Waited an hour+, status shows the same and the directory's still empty.

pkropf

Member

Registered: 2022-12-27

Posts: 9

Re: Installation Woes - linux-firmware signature is unknown trust

At this point I think I need to pass on Arch Linux. If I'm encountering this much trouble with the installation, I can't see that maintenance and general use will be any better.

Thanks to everyone who helped answer my questions.

pkropf

Member

Registered: 2022-12-27

Posts: 9

Re: Installation Woes - linux-firmware signature is unknown trust

A quick follow up for anyone who may come across this thread and be discouraged from using Arch Linux. Leave the the installation of Arch from https://archlinux.org/ to those mad souls who've already been through the crucible and instead install EndeavourOS or Manjaro. They're both distributions based on Arch and are much more straight forward to work with.

Slithery

Administrator

From: Norfolk, UK

Registered: 2013-12-01

Posts: 5,776

Re: Installation Woes - linux-firmware signature is unknown trust

A quick follow up for anyone who may come across this thread and be discouraged from using Arch Linux. Leave the the installation of Arch from https://archlinux.org/ to those mad souls who've already been through the crucible and instead install EndeavourOS or Manjaro. They're both distributions based on Arch and are much more straight forward to work with.

And neither of them are supported here.

---

No, it didn't "fix" anything. It just shifted the brokeness one space to the right. - jasonwryan
Closing -- for deletion; Banning -- for muppetry. - jasonwryan

aur - dotfiles