You are not logged in.
When i tried update with command:
sudo pacman -Syu
I get this error:
error: 7zip: signature from "T.J. Townsend <blakkheim@archlinux.org>" is invalid
:: File /var/cache/pacman/pkg/7zip-25.01-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.
What i tried:
1) sudo pacman -Scc
sudo pacman -Syyu
2) sudo pacman -Sy archlinux-keyring
sudo pacman-key --populate archlinux
sudo pacman -Syu
3) sudo rm -rf /etc/pacman.d/gnupg
sudo pacman-key --init
sudo pacman-key --populate archlinux
sudo pacman -S archlinux-keyring
sudo pacman -Syu
4) sudo pacman-key --keyserver hkps://keyserver.ubuntu.com --recv-keys 9F4D2C6A
#gpg: keyserver receive failed: No data
#==> ERROR: Remote key not fetched correctly from keyserver.
5) sudo pacman-key --keyserver hkps://pgp.mit.edu --recv-keys 9F4D2C6A
#gpg: keyserver receive failed: No data
#==> ERROR: Remote key not fetched correctly from keyserver.
6) curl -s https://keyserver.ubuntu.com/pks/lookup … 0x9F4D2C6A | gpg --import
#gpg: no valid OpenPGP data found.
#gpg: Total number processed: 0
7) sudo pacman-key --keyserver hkps://keyserver.ubuntu.com --refresh-keys
8) sudo pacman-key --init
sudo pacman-key --populate archlinux
sudo pacman-key --refresh-keys
9) sudo pacman -Sc
10)sudo rm /var/cache/pacman/pkg/7zip-25.01-1-x86_64.pkg.tar.zst
#rm: cannot remove '/var/cache/pacman/pkg/7zip-25.01-1-x86_64.pkg.tar.zst': No such file or directory
sudo pacman-key --init
sudo pacman-key --populate archlinux
sudo pacman-key --refresh-keys
sudo pacman -S 7zip
#resolving dependencies...
#looking for conflicting packages...
#
#Packages (1) 7zip-25.01-1
#
#Total Download Size: 1.89 MiB
#Total Installed Size: 6.25 MiB
#Net Upgrade Size: 0.07 MiB
#
#:: Proceed with installation? [Y/n] y
#:: Retrieving packages...
# 7zip-25.01-1-x86_64 1930.4 KiB 575 KiB/s 00:03 [###################################] 100%
#(1/1) checking keys in keyring [###################################] 100%
#(1/1) checking package integrity [###################################] 100%
#error: 7zip: signature from "T.J. Townsend <blakkheim@archlinux.org>" is invalid
#:: File /var/cache/pacman/pkg/7zip-25.01-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
#Do you want to delete it? [Y/n] y
#error: failed to commit transaction (invalid or corrupted package (PGP signature))
#Errors occurred, no packages were upgraded.
11) I tried all it with and without vpn.
Questions:
1) Is this key (9F4D2C6A) missing from the official Arch keyring?
2) Is there an alternative trusted source for this key?
3) Could this be an issue with the 7zip package signature in the repository?
P. S. : Sorry if something looks strange — this is my first message on the Arch Forum
Last edited by difirincial (2025-08-14 13:04:46)
Offline
The error is that the sig is invalid, not that it's missing. First, try using a different mirror.
Offline
signature also shows up as unknown trust in https://bbs.archlinux.org/viewtopic.php?id=307575 (albeit misspelled, so pot. free interpretation of the error - we'll see)
Online
reflector --country "Netherlands" --latest 10 --sort rate --save /etc/pacman.d/mirrorlist
Also add these two server to mirrirlist:
Server = https://mirror.koddos.net/archlinux/$repo/os/$arch
Server = https://mirror.i3d.net/pub/archlinux/$repo/os/$arch
Problem solved.
Offline
Please always remember to mark resolved threads by editing your initial posts subject - so others will know that there's no task left, but maybe a solution to find.
Thanks.
(you'll probably have to shorten the subject a bit)
Online