[SOLVED] signature from "Dave Reisner <d@falconindy.com>" is invalid

theking2 · 2012-07-28 11:14:52

Nowedays I make it a habit of always doing

 sudo pacman-key --init  && sudo pacman-key --populate archlinux

which could be include in pacman standardly anyway.

But today this was not enough
after

pacman -Syu

I got

error: coreutils: signature from "Dave Reisner <d@falconindy.com>" is invalid
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.

I also followed the suggestion in https://wiki.archlinux.org/index.php/Pa … l_the_keys

but ended up with the same.

Btw suggestions to use google are not appreciated as they don't offer a solution.

Last edited by theking2 (2013-10-14 16:52:31)

Pierre · 2012-07-28 11:29:26

You did recreate your keyring and removed the packages from the cache and it still does not work? In that case the package might indeed be corrupted. I also don't get the remark about running always --init and populate; you only need to do this once. Also the new installer does it for you.

theking2 · 2012-07-28 14:59:08

Thanks Pierre

The question is which packages? Is there a way to find this out? Btw as we are talking about a NAS here there is very little fiddling going on from my side. It is just a standard arch install and has been for years. How could a package get corrupted?

Targets (62): bash-4.2.037-1  binutils-2.22-9  bison-2.6-1  coreutils-8.17-3  dbus-1.6.4-1  dbus-core-1.6.4-1  dnsutils-9.9.1.P2-1  elfutils-0.154-1  filesystem-2012.7-1  gcc-4.7.1-5
              gcc-libs-4.7.1-5  glib2-2.32.4-1  glibc-2.16.0-2  glibmm-2.32.1-1  gnutls-3.0.21-2  gparted-0.13.0-1  gpm-1.20.6-10  grep-2.13-2  gtk-update-icon-cache-2.24.11-2
              gtk2-2.24.11-2  hwids-20120711-1  iana-etc-2.30-3  initscripts-2012.07.5-1  iputils-20101006-4  kbd-1.15.3-3  khrplatform-devel-8.0.4-2  kmod-9-2  libcups-1.5.4-1
              libegl-8.0.4-2  libgl-8.0.4-2  libglapi-8.0.4-2  libmp4v2-2.0.0-2  libpng-1.5.12-1  libpulse-2.1-1  libsystemd-187-2  linux-3.4.6-1  linux-api-headers-3.4.6-1
              linux-headers-3.4.6-1  lirc-utils-1:0.9.0-22  mc-4.8.4-1  minidlna-1.0.25-1  mpg123-1.14.4-1  nettle-2.5-1  pcre-8.31-1  php-5.4.5-1  php-apache-5.4.5-1  pkg-config-0.27-1
              procps-ng-3.3.3-3  pyqt-4.9.4-2  pyqt-common-4.9.4-2  python2-pyqt-4.9.4-2  qt-4.8.2-3  readline-6.2.004-1  syslog-ng-3.3.5-2  systemd-tools-187-2  transmission-cli-2.61-1
              tzdata-2012d-1  usbutils-006-1  util-linux-2.21.2-5  vim-7.3.600-1  vim-runtime-7.3.600-1  vsftpd-3.0.0-4

o, I see it is coreutils

Last edited by theking2 (2012-07-28 15:02:52)

theking2 · 2012-07-28 15:03:35

Does Dave have to update his signature? Can I forcible update coreutils?

falconindy · 2012-07-28 15:06:41

No, I don't need to update my signature. You have a corrupt package in your cache.

Last edited by falconindy (2012-07-28 15:06:59)

2ManyDogs · 2012-07-28 15:12:33

theking2 wrote:

Can I forcible update coreutils?

Please don't do this, unless you want to break your system. See this topic: https://bbs.archlinux.org/viewtopic.php?id=145729

jakobcreutzfeldt wrote:

The recent and somehow-still-ongoing glibc debacle has revealed more than ever that a good number of users actually use Pacman's --force flag even though it's repeatedly advised against pretty much everywhere on the archlinux.org domain.
...
Is there any other way to convince these users that --force is *not* ok unless the devs recommend it, without resorting to hand-holding?

(emphasis added)

theking2 · 2012-07-29 10:14:30

Ok, so it indeed looked like the coreutils package was corrupted on my system. The reported problem with the signature was just a side effect of that and the error message in itslef quite confusing (failed to commit transaction ("invalid or corrupted package (PGP signature)" could mean at least two things. Please provide better intel on these kind of messages)

I ended up by temporarely disabling signature with

SigLevel = nothing

in the "[core]" section of /etc/pacman.conf

than with

pacman -S coreutils

I was prompted that the package was corrupted and if I wanted it deleted.

:: File /var/cache/pacman/pkg/coreutils-8.17-3-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (checksum)).
Do you want to delete it? [Y/n]

which I confirmed.

After that the package was downloaded and reinstalled and I only had to resolve the glibc '/lib' conflict which is a different story.

fsckd · 2012-07-29 14:50:29

Please mark this thread as solved and please file a bug report requesting better error messages for corrupted packages.

Arch Linux

#1 2012-07-28 11:14:52

[SOLVED] signature from "Dave Reisner <d@falconindy.com>" is invalid

#2 2012-07-28 11:29:26

Re: [SOLVED] signature from "Dave Reisner <d@falconindy.com>" is invalid

#3 2012-07-28 14:59:08

Re: [SOLVED] signature from "Dave Reisner <d@falconindy.com>" is invalid

#4 2012-07-28 15:03:35

Re: [SOLVED] signature from "Dave Reisner <d@falconindy.com>" is invalid

#5 2012-07-28 15:06:41

Re: [SOLVED] signature from "Dave Reisner <d@falconindy.com>" is invalid

#6 2012-07-28 15:12:33

Re: [SOLVED] signature from "Dave Reisner <d@falconindy.com>" is invalid

#7 2012-07-29 10:14:30

Re: [SOLVED] signature from "Dave Reisner <d@falconindy.com>" is invalid

#8 2012-07-29 14:50:29

Re: [SOLVED] signature from "Dave Reisner <d@falconindy.com>" is invalid

Board footer