Arch Linux

cdwijs

Member

Registered: 2010-04-24

Posts: 303

[SOLVED]new install pacstrap fails on signature from Frederik Schw

I'm doing a new install. I've booted archlinux-2024.01.01-x86_64.iso from a memory stick using ventoy.

I've issued these commands:

# fdisk -l /dev/mmcblk1
# mkfs.fat -F 32 /dev/mmcblk1p1
# mkswap /dev/mmcblk1p2
# mkfs.btrfs /dev/mmcblk1p3
# swapon /dev/mmcblk1p2
# mount /dev/mmcblk1p3 /mnt
# mount --mkdir /dev/mmcblk1p1 /mnt/boot
# timedatectl
# pacstrap -K /mnt base linux linux-firmware

Then I get this error:

(128/128) checking keys in keyring                 [######################] 100%
(128/128) checking package integrity               [######################] 100%
error: linux-api-headers: signature from "Frederik Schwan <frederik.schwan@linux.com>" is unknown trust
:: File /mnt/var/cache/pacman/pkg/linux-api-headers-6.13-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
<snip>
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.
==> ERROR: Failed to install packages to new root
pacstrap -K /mnt base linux linux-firmware  27.83s user 17.92s system 75% cpu 1:00.20 total

I've tried the following commands, but it didn't change the error:

# killall gpg-agent
# rm -rf /etc/pacman.d/gnupg/*
# pacman-key --init
# pacman -Su
# pacman -Sy
# pacstrap -K /mnt base linux linux-firmware

Terminal output:

1 root@archiso ~ # killall gpg-agent
root@archiso ~ # rm -rf /etc/pacman.d/gnupg/*
zsh: sure you want to delete all 9 files in /etc/pacman.d/gnupg [yn]? y
root@archiso ~ # pacman-key --init
gpg: /etc/pacman.d/gnupg/trustdb.gpg: trustdb created
gpg: no ultimately trusted keys found
==> Generating pacman master key. This may take some time.
gpg: Generating pacman keyring master key...
gpg: directory '/etc/pacman.d/gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/etc/pacman.d/gnupg/openpgp-revocs.d/F396F5834874ABD124F086D104366FD1D271C7FA.rev'
gpg: Done
==> Updating trust database...
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
root@archiso ~ # pacman-key --populate archlinux
==> Appending keys from archlinux.gpg...
==> Locally signing trusted keys in keyring...
  -> Locally signed 5 keys.
==> Importing owner trust values...
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: inserting ownertrust of 4
gpg: setting ownertrust to 4
==> Disabling revoked keys in keyring...
  -> Disabled 44 keys.
==> Updating trust database...
gpg: Note: third-party key signatures using the SHA1 algorithm are rejected
gpg: (use option "--allow-weak-key-signatures" to override)
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   5  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:   5  signed:  86  trust: 0-, 0q, 0n, 5m, 0f, 0u
gpg: depth: 2  valid:  64  signed:  20  trust: 64-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2025-07-01
pacman-key --populate archlinux  47.01s user 6.21s system 97% cpu 54.432 total
root@archiso ~ # pacman -Su
warning: database file for 'core' does not exist (use '-Sy' to download)
warning: database file for 'extra' does not exist (use '-Sy' to download)
:: Starting full system upgrade...
 there is nothing to do
root@archiso ~ # pacman -Sy
:: Synchronizing package databases...
 core                  118.6 KiB   790 KiB/s 00:00 [######################] 100%
 extra                   7.7 MiB  3.51 MiB/s 00:02 [######################] 100%
root@archiso ~ # pacstrap -K /mnt base linux linux-firmware
==> Creating install root at /mnt
==> Installing packages to /mnt
:: Synchronizing package databases...
 core is up to date
 extra is up to date
resolving dependencies...
<snip>
:: Retrieving packages...
 gcc-libs-14.2.1+...    35.0 MiB  3.38 MiB/s 00:10 [######################] 100%
<snip>
 libsysprof-captu...    49.2 KiB  1231 KiB/s 00:00 [######################] 100%
 Total (8/8)            55.0 MiB  3.34 MiB/s 00:16 [######################] 100%
(128/128) checking keys in keyring                 [######################] 100%
(128/128) checking package integrity               [######################] 100%
error: linux-api-headers: signature from "Frederik Schwan <frederik.schwan@linux.com>" is unknown trust
:: File /mnt/var/cache/pacman/pkg/linux-api-headers-6.13-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: glibc: signature from "Frederik Schwan <frederik.schwan@linux.com>" is unknown trust
:: File /mnt/var/cache/pacman/pkg/glibc-2.41+r9+ga900dbaf70f0-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: gcc-libs: signature from "Frederik Schwan <frederik.schwan@linux.com>" is unknown trust
:: File /mnt/var/cache/pacman/pkg/gcc-libs-14.2.1+r753+g1cd744a6828f-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
<snip>
error: binutils: signature from "Frederik Schwan <frederik.schwan@linux.com>" is unknown trust
:: File /mnt/var/cache/pacman/pkg/binutils-2.44-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.
==> ERROR: Failed to install packages to new root
pacstrap -K /mnt base linux linux-firmware  21.89s user 16.34s system 97% cpu 39.391 total
1 root@archiso ~ #  

Last edited by cdwijs (2025-04-06 16:27:45)

Scimmia

Fellow

Registered: 2012-09-01

Posts: 12,607

Re: [SOLVED]new install pacstrap fails on signature from Frederik Schw

Yeah, that happens when you run an ISO that's over a year old. Update archlinux-keyring in the live env or get a newer ISO.

mackin_cheese

Member

Registered: 2025-01-07

Posts: 445

Re: [SOLVED]new install pacstrap fails on signature from Frederik Schw

why are you using an old ISO?

cdwijs

Member

Registered: 2010-04-24

Posts: 303

Re: [SOLVED]new install pacstrap fails on signature from Frederik Schw

Yeah, that happens when you run an ISO that's over a year old. Update archlinux-keyring in the live env or get a newer ISO.

I've upgraded archlinux-keyring:

# pacman -S archlinux-keyring
resolving dependencies...
looking for conflicting packages...

Packages (1) archlinux-keyring-20250123-1

Total Download Size:   1.18 MiB
Total Installed Size:  1.68 MiB
Net Upgrade Size:      0.03 MiB

:: Proceed with installation? [Y/n] 
:: Retrieving packages...
 archlinux-keyrin...  1206.9 KiB  2.21 MiB/s 00:01 [######################] 100%
(1/1) checking keys in keyring                     [######################] 100%
(1/1) checking package integrity                   [######################] 100%
(1/1) loading package files                        [######################] 100%
(1/1) checking for file conflicts                  [######################] 100%
(1/1) checking available disk space                [######################] 100%
:: Processing package changes...
(1/1) upgrading archlinux-keyring                  [######################] 100%
==> Appending keys from archlinux.gpg...
==> Disabling revoked keys in keyring...
  -> Disabled 1 keys.
==> Updating trust database...
gpg: Note: third-party key signatures using the SHA1 algorithm are rejected
gpg: (use option "--allow-weak-key-signatures" to override)
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   5  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:   5  signed: 101  trust: 0-, 0q, 0n, 5m, 0f, 0u
gpg: depth: 2  valid:  78  signed:  21  trust: 78-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2025-06-16
:: Running post-transaction hooks...
(1/2) Reloading system manager configuration...
(2/2) Arming ConditionNeedsUpdate...
pacman -S archlinux-keyring  24.38s user 3.55s system 90% cpu 30.762 total

Now pacstrap works. Thank you.

cdwijs

Member

Registered: 2010-04-24

Posts: 303

Re: [SOLVED]new install pacstrap fails on signature from Frederik Schw

why are you using an old ISO?

I've tried to boot with archlinux-2025.04.01-x86_64.iso. Ventoy boots, then I choose the Archlinux iso. Then i see a single line stating something like:  "booting in 15 seconds". When I then pressed e. Then the countdown stopped, but I could not see the grub command line interface, so I could not append "nomodeset" to the kernel parameters.

Without that kernel parameter, my pc gives a black screen.

On the old iso, I was able to add the kernel parameter by pressing e while in grub. After that my PC booted OK.