[SOLVED] [pacman] My 'pacman-key --init' issue

metre · 2011-10-14 09:36:38

pacman-key --init
gpg: Generating pacman keychain master key...

Not enough random bytes available.  Please do some other work to give
the OS a chance to collect more entropy! (Need 211 more bytes)

Well, I thought that I could resolve it using random bytes from RANDOM.ORG (http://www.random.org/, in particularly http://www.random.org/bytes/), a really useful website.
Is it a good solution, or is it mandatory to generate random bytes using my PC? And in that case, how can I use random bytes generated from that site?

Last edited by metre (2011-10-14 09:48:31)

wonder · 2011-10-14 09:38:13

i did cat /udev/urandom and move a window

Last edited by wonder (2011-10-14 09:41:21)

metre · 2011-10-14 09:40:38

wonder wrote:

i did cat /udev/urandom and move the a window

Can you be please more illuminating in the second part of the action?
I also did "cat /dev/urandom", and after that...?

Thank you!

wonder · 2011-10-14 09:42:44

so while gpg is asking for more bytes, do cat /dev/urandom and move a window from your desktop, the window with a terminal, with a browser, you can press keys. generate some random moves

metre · 2011-10-14 09:48:20

wonder wrote:

so while gpg is asking for more bytes, do cat /dev/urandom and move a window from your desktop, the window with a terminal, with a browser, you can press keys. generate some random moves

Astonishing... thank you, of course it worked, have a wonderful day

hussam · 2011-10-14 11:27:03

I installed pacman 4.0 from testing. I did pacman-key --init
but now I can't install anything again
trying to install hplip

Proceed with installation? [Y/n] y
(1/1) checking package integrity [####################################] 100%
error: hplip: key "FCF2CB179205AC90" is unknown
:: Import PGP key 9205AC90, "Eric Belanger <eric@archlinux.org>", created 2011-04-20? [Y/n] y
(1/1) checking package integrity [####################################] 100%
error: hplip: signature from "Eric Belanger <eric@archlinux.org>" is unknown trust
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.

Last edited by hussam (2011-10-14 11:28:25)

wonder · 2011-10-14 11:31:12

@hussam for now, edit pacman.conf and uncomment SigLevel = Optional TrustAll

hussam · 2011-10-14 11:36:10

wonder wrote:

@hussam for now, edit pacman.conf and uncomment SigLevel = Optional TrustAll

ok, thank you

byte · 2011-10-15 10:58:04

... or sign each new KeyID manually with 'pacman-key --lsign-key XXXXXX'.

T-u-N-i-X · 2011-10-15 15:35:02

Hey There,

I have an Arch box inside a VM which doesn't even have a DE. I just start it via VBoxHeadless -s VMNAME and do ssh into it. When I initiate pacman-key --init and it asks me for more entrophy, I type things, start another gnu screen session and do cat /dev/urandom in it but it never continues to create keys.

Can someone please help me on this?

karol · 2011-10-15 16:46:35

T-u-N-i-X wrote:

Hey There,
I have an Arch box inside a VM which doesn't even have a DE. I just start it via VBoxHeadless -s VMNAME and do ssh into it. When I initiate pacman-key --init and it asks me for more entrophy, I type things, start another gnu screen session and do cat /dev/urandom in it but it never continues to create keys.
Can someone please help me on this?

So you didn't solve it with

When I ran rngd -f -r /dev/urandom and ran pacman-key --init, it completed
in seconds. Issue solved. This is probably about being inside a VM which
limits the entropy level somehow.

?

T-u-N-i-X · 2011-10-15 16:52:23

Yes just solved it.

meijin · 2011-10-16 17:39:16

some keys importing is taking long time (more then a minute per key)
what can i do for helping that out?

falconindy · 2011-10-16 18:26:19

The default keyserver is a round robin which tends to be... bad. Set it to a local keyserver such as hkp://pgp.mit.edu

fredbezies · 2011-10-17 13:54:48

Thanks for the tip. I replaced keyserver in /etc/pacman.d/gnupg/gpg.conf

Would be great if it could be the default one

Last edited by fredbezies (2011-10-17 13:56:48)

fredbezies · 2011-10-17 17:21:03

Opened bug #26487 related to this issue : https://bugs.archlinux.org/task/26487

swanson · 2011-10-17 18:05:42

Pacman 4.0.0.2 seems to be working fine on my two arch machines. I had to remove pacman-color though.

ShionjiYuuko · 2011-10-20 04:01:07

I got errors like this:

(17/17) checking package integrity                                                              [########################################################] 100%
error: libarchive: key "5C2E46A0F53A76ED" is unknown
error: linux: key "771DF6627EDF681F" is unknown
error: linux-headers: key "771DF6627EDF681F" is unknown
error: pth: key "1EB2638FF56C0C53" is unknown
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.

the previous upgrade was fine, but on this last upgrade pacman didn't show developers' names and emails, and didn't retrieve keys from server. I wonder why...

== edit ==

default gnupg server is the cause. points the server to pgp.mit.edu solves this, and makes importing keys faster

Last edited by ShionjiYuuko (2011-10-20 04:04:34)

Monty · 2011-12-13 03:41:22

im trying to install alsa-utils and i get "unknown trust" errors, i acepted those keys before changing keyserver to pgp.mit.edu and before editing pacman.conf to accept all, so im a bit lost on how to accept those keys and install this package... i'll try installing some other things and check if is still happening with new keys...

Edit: seems like this discussion had been rather high on other threads, i think i need to change key id's or trust levels on those ids, im trying "pacman-key --editkey [keyowner]" and setting local sign or changing values to "fully trusted".... Maybe this will help....

Edit2: Bingo! that worked

Edit3: well it seems that any new keys gets this "unknow" status for some reason... even though i already edited pacman.conf and pacman.conf.new to accept all, can someone point me in the right direction?

Edit4: by now the only solution i found is to locally sign all the new keys as they come... lets just say its solved, but im open to a better solution

Last edited by Monty (2011-12-13 13:55:29)

amsri · 2012-01-17 15:46:24

I solved the problem of "Not enough random bytes available." using the solution given in the following site:

http://theyouri.blogspot.com/2011/11/pa … bytes.html

I am running a GUI Less Arch server installation managed by ssh and I could not have used mouse or window solution given in this thread. I tried accessing websites on the server and webmin but it did not generate the needed random data. Therefore I used rng-tools to generate random data.

karol · 2012-01-17 15:48:13

It's in the wiki already ;P
https://wiki.archlinux.org/index.php/Pa … entropy.3F

Sidhartha · 2012-01-18 00:02:57

rng_tools seems to be out of date...

karol · 2012-01-18 00:20:16

It installs fine and I haven't seen a new version, so it may be a mistake.

teratomata · 2012-01-20 19:37:45

hussam wrote:

I installed pacman 4.0 from testing. I did pacman-key --init
but now I can't install anything again
trying to install hplip
Proceed with installation? [Y/n] y
(1/1) checking package integrity [####################################] 100%
error: hplip: key "FCF2CB179205AC90" is unknown
:: Import PGP key 9205AC90, "Eric Belanger <eric@archlinux.org>", created 2011-04-20? [Y/n] y
(1/1) checking package integrity [####################################] 100%
error: hplip: signature from "Eric Belanger <eric@archlinux.org>" is unknown trust
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.

I found that my pacman.conf didn't get updated, but once I moved /etc/pacman.conf.pacnew to /etc/pacman.conf, everything worked.

MorningWood · 2012-01-21 06:07:57

teratomata wrote:

hussam wrote:
I installed pacman 4.0 from testing. I did pacman-key --init
but now I can't install anything again
trying to install hplip
Proceed with installation? [Y/n] y
(1/1) checking package integrity [####################################] 100%
error: hplip: key "FCF2CB179205AC90" is unknown
:: Import PGP key 9205AC90, "Eric Belanger <eric@archlinux.org>", created 2011-04-20? [Y/n] y
(1/1) checking package integrity [####################################] 100%
error: hplip: signature from "Eric Belanger <eric@archlinux.org>" is unknown trust
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.
I found that my pacman.conf didn't get updated, but once I moved /etc/pacman.conf.pacnew to /etc/pacman.conf, everything worked.

I just wanted to say thanks teratomata. I did everything that was mentioned and was continually being asked if I wanted to import keys. Moved pacman.conf.pacnew to pacman.conf and everything works great!

Arch Linux

#1 2011-10-14 09:36:38

[SOLVED] [pacman] My 'pacman-key --init' issue

#2 2011-10-14 09:38:13

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#3 2011-10-14 09:40:38

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#4 2011-10-14 09:42:44

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#5 2011-10-14 09:48:20

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#6 2011-10-14 11:27:03

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#7 2011-10-14 11:31:12

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#8 2011-10-14 11:36:10

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#9 2011-10-15 10:58:04

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#10 2011-10-15 15:35:02

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#11 2011-10-15 16:46:35

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#12 2011-10-15 16:52:23

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#13 2011-10-16 17:39:16

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#14 2011-10-16 18:26:19

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#15 2011-10-17 13:54:48

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#16 2011-10-17 17:21:03

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#17 2011-10-17 18:05:42

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#18 2011-10-20 04:01:07

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#19 2011-12-13 03:41:22

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#20 2012-01-17 15:46:24

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#21 2012-01-17 15:48:13

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#22 2012-01-18 00:02:57

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#23 2012-01-18 00:20:16

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#24 2012-01-20 19:37:45

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

#25 2012-01-21 06:07:57

Re: [SOLVED] [pacman] My 'pacman-key --init' issue

Board footer