Invalid Signature Errors

treeman1111 · 2013-02-18 15:48:31

Hey all,
I have posted stuff on this topic before, but have never gotten a definitive answer regarding how to fix this:

I have already tried:

 pacman-key --init

 pacman-key --populate archlinux

 pacman-key --refresh-keys

and I get this:

 error: nouveau-dri: signature from "Andreas Radke <andyrtr@archlinux.org>" is invalid

 error: failed to commit transaction (invalid or corrupted package (PGP signature))

 Errors occured, no packages were upgraded.

Note:
The system is an i686 based PC running on a school network -- could my school's filter be blocking this?

Thanks for the help.

Pougnet · 2013-02-18 21:45:54

Are you running an up-to-date version of pacman, and have you refreshed your package list?

WorMzy · 2013-02-18 22:48:31

"invalid or corrupted package"

Have you tried removing it and re-downloading it?

treeman1111 · 2013-02-19 00:25:55

I am running off of an archiso I downloaded less than a week ago.

treeman1111 · 2013-02-19 00:26:37

WorMzy: How would I do that?

ewaller · 2013-02-19 00:45:03

treeman1111 wrote:

WorMzy: How would I do that?

man pacman wrote:

SYNC OPTIONS
-c, --clean
Remove packages that are no longer installed from the cache as well as currently unused sync databases to free up disk
space. When pacman downloads packages, it saves them in a cache directory. In addition, databases are saved for every
sync DB you download from, and are not deleted even if they are removed from the configuration file pacman.conf(5). Use
one --clean switch to only remove packages that are no longer installed; use two to remove all files from the cache. In
both cases, you will have a yes or no option to remove packages and/or unused downloaded databases.
If you use a network shared cache, see the CleanMethod option in pacman.conf(5).
....
-y, --refresh
Download a fresh copy of the master package list from the server(s) defined in pacman.conf(5). This should typically be
used each time you use --sysupgrade or -u. Passing two --refresh or -y flags will force a refresh of all package lists
even if they appear to be up to date.

First, try pacman -Syyu
If that does not do it, try pacman -Scc followed by pacman -Syu
Note that that cleans out your cache of installed packages making it harder to downgrade to things you had installed previously.

treeman1111 · 2013-02-19 01:56:25

I have already done pacman -Syyu, however, I will try the other option.

treeman1111 · 2013-02-19 15:37:15

Ok, after I did

 pacman -Sc and pacman -Syu

I ended up with:

 error: coreutils: signature from "Allan McRae <me@allanmcrae.com>" is invalid

 error: failed to commit transaction (invalid or corrupted package (PGP signature))

 Errors occured, no packages were upgraded.

igndenok · 2013-02-19 15:43:54

Around a week ago I got the same problem. Turns out it's because my system clock (ntpd out of sync after restart).
Need to sync my system clock, refresh the signature keys for sure and it works. Maybe yours same with me!?

jc61990 · 2013-02-19 15:45:55

i had this problem yesterday when i was making a new vm. i went into /var/cache/pacman/pkg/ and removed everything rm * then pacman -Syyu ; pacman-key --populate archlinux , pacman-key --refresh-keys has worked for me too

treeman1111 · 2013-02-19 16:36:01

Just a note, during the pacman -Syyu I get errors like:

 error: failed retrieving file 'xxxxxxx' from xxxxxx.org: HTTP server doesn't seem to support byte ranges: cannot resume.

And, of course, I get the exact same errors....

Yes, my system time is current.

cfr · 2013-02-19 22:50:51

Change mirrors?

Last edited by cfr (2013-02-19 22:51:15)

treeman1111 · 2013-02-19 23:22:33

I will try that tomorrow -- it is a computer at my school.

ewaller · 2013-02-19 23:33:03

treeman1111 wrote:

I will try that tomorrow -- it is a computer at my school.

Hmmm, that brings up a couple questions.

1. You do have permission to install Arch onto that computer, right?

2. Any chance that the infrastructure at the school is blocking you? It is possible that ftp is blocked; make certain you are using http. Even then, I have seen some very aggressive file filtering my some school's firewalls.

Last edited by ewaller (2013-02-20 00:01:37)

treeman1111 · 2013-02-19 23:41:35

Yes, this is in a computer engineering class. : P

treeman1111 · 2013-02-19 23:42:25

I was wondering about the filtering in the beginning, in particular, a program called Netsweeper.

ewaller · 2013-02-20 00:11:05

treeman1111 wrote:

I was wondering about the filtering in the beginning, in particular, a program called Netsweeper.

You mean, this ? http://www.netsweeper.com/what-we-do/we … management

Yeah, it could bite you.

treeman1111 · 2013-02-20 00:36:29

Yeah, lol, I am well aware of the biting capabilities of Netsweeper -- yes, that is the product.

treeman1111 · 2013-02-20 00:37:05

I could probably get this fixed -- what would I ask to be unblocked for my node at school?

ewaller · 2013-02-20 00:49:51

treeman1111 wrote:

I could probably get this fixed -- what would I ask to be unblocked for my node at school?

Sorry, I don't have a clue. I would start with someone with authority in the IT department and work it from there.

Edit: You might tell them that you are trying to install Arch Linux, and provide a list of your mirrors. The company's website says the ability to unlock content for periods of time is intrinsic to their product.

Last edited by ewaller (2013-02-20 00:51:53)

hadrons123 · 2013-02-20 01:12:06

Sometimes its easier to manually delete the /etc/pacman.d/gnupg folder and run the pacman-key --init, pacman-key --populate archlinux.

Last edited by hadrons123 (2013-02-20 01:15:04)

treeman1111 · 2013-02-20 02:04:29

Oooh, I have an idea! Can I change the SigLevel in

 /etc/pacman.conf

to SigLevel = Never?

hadrons123 · 2013-02-20 02:33:42

yes. But not recommended.

Pougnet · 2013-02-20 02:35:14

Yes, but, that is not suggested as you can wind up trusting unverified keys and possibly installing malicious software. With the GPG keys, you can verify that the packages have not been tampered with since the Developers/TUs created them.

Last edited by Pougnet (2013-02-20 02:35:58)

treeman1111 · 2013-02-20 13:31:34

Well, I see no other way around this problem.

Arch Linux

#1 2013-02-18 15:48:31

Invalid Signature Errors

#2 2013-02-18 21:45:54

Re: Invalid Signature Errors

#3 2013-02-18 22:48:31

Re: Invalid Signature Errors

#4 2013-02-19 00:25:55

Re: Invalid Signature Errors

#5 2013-02-19 00:26:37

Re: Invalid Signature Errors

#6 2013-02-19 00:45:03

Re: Invalid Signature Errors

#7 2013-02-19 01:56:25

Re: Invalid Signature Errors

#8 2013-02-19 15:37:15

Re: Invalid Signature Errors

#9 2013-02-19 15:43:54

Re: Invalid Signature Errors

#10 2013-02-19 15:45:55

Re: Invalid Signature Errors

#11 2013-02-19 16:36:01

Re: Invalid Signature Errors

#12 2013-02-19 22:50:51

Re: Invalid Signature Errors

#13 2013-02-19 23:22:33

Re: Invalid Signature Errors

#14 2013-02-19 23:33:03

Re: Invalid Signature Errors

#15 2013-02-19 23:41:35

Re: Invalid Signature Errors

#16 2013-02-19 23:42:25

Re: Invalid Signature Errors

#17 2013-02-20 00:11:05

Re: Invalid Signature Errors

#18 2013-02-20 00:36:29

Re: Invalid Signature Errors

#19 2013-02-20 00:37:05

Re: Invalid Signature Errors

#20 2013-02-20 00:49:51

Re: Invalid Signature Errors

#21 2013-02-20 01:12:06

Re: Invalid Signature Errors

#22 2013-02-20 02:04:29

Re: Invalid Signature Errors

#23 2013-02-20 02:33:42

Re: Invalid Signature Errors

#24 2013-02-20 02:35:14

Re: Invalid Signature Errors

#25 2013-02-20 13:31:34

Re: Invalid Signature Errors

Board footer