[Solved] Pacman 4 Looking for <repo>.db.sig files which aren't there?

DarkSniper · 2012-01-17 02:12:32

After some forum searching and wiki reading, I finally got pacman 4 setup with package signatures. However, when I run a -Sy, it's throwing 404's at me for the signature files for the databases [the databases still work correctly]. Is this caused by my mirrors not syncing fast enough, or is it something else?
Here's a little of my output illustrating this:

  -> Downloading core.db.sig

2012-01-16 18:01:32.430384 NOTICE - ServerStat file /etc/pacget.stats loaded successfully.

2012-01-16 18:01:32.745747 ERROR - CUID#6 - Download aborted. URI=http://mirrors.lax1.thegcloud.com/arch//core/os/x86_64/core.db.sig
Exception: [AbstractCommand.cc:303] errorCode=3 URI=http://mirrors.lax1.thegcloud.com/arch//core/os/x86_64/core.db.sig
  -> [HttpSkipResponseCommand.cc:211] errorCode=3 Resource not found

2012-01-16 18:01:32.998759 ERROR - CUID#7 - Download aborted. URI=http://ftp.osuosl.org/pub/archlinux/core/os/x86_64/core.db.sig
Exception: [AbstractCommand.cc:303] errorCode=3 URI=http://ftp.osuosl.org/pub/archlinux/core/os/x86_64/core.db.sig
  -> [HttpSkipResponseCommand.cc:211] errorCode=3 Resource not found

Last edited by DarkSniper (2012-01-17 05:31:01)

karol · 2012-01-17 02:42:51

Can you post your pacman.conf? What command did you run to get this output - it doesn't look like the standard one.

Did you set up database signature checking e.g.

[core]
SigLevel = DatabaseRequired

?

DarkSniper · 2012-01-17 03:08:17

I'm using aria2 [via the pacget script] as my dlagent, as opposed to the built in pacman one. Other than that, I uncommented multilib, and turned on signature checking.
Here's the whole thing: http://pastebin.com/GWkvKtXH

The built-in download manager doesn't complain about the lack of these signatures, but it gives a signature fail message if I try to put the option you mentioned on any of the repos: "error: database 'core' is not valid (invalid or corrupted database (PGP signature))"

falconindy · 2012-01-17 03:27:53

I can only recommend using the internal downloader.

"Optional" extends to "DatabaseOptional" which means your downloader will attempt to grab the sig file. You'll need to add in DatabaseNever to your SigLevel if you want to avoid this behavior with an external downloader.

DarkSniper · 2012-01-17 04:39:21

Okay, I'll use the internal downloader then.

To satisfy my curiosity: Is there a reason why the .sig files aren't on the mirrors at the moment?

Allan · 2012-01-17 05:22:49

Because the databases are not signed yet. The process for doing that is still being worked out...

DarkSniper · 2012-01-17 05:30:48

Ah, I thought it was something along those lines. Thanks for the info!

dp · 2015-02-14 19:34:05

just found this while switching from the internal downloader to one handling FTP connection closures with reconnecting retries and run into the same 404 on sig files. was there any progress in having sig files on mirrors?

cfr · 2015-02-15 23:19:53

dp wrote:

just found this while switching from the internal downloader to one handling FTP connection closures with reconnecting retries and run into the same 404 on sig files. was there any progress in having sig files on mirrors?

I don't think the databases are signed so there are no files to put on the mirrors.

But this is an old thread and necromancy is frowned upon...

But the advice to use the internal downloader is still good.

weirddan455 · 2015-02-16 08:45:11

Allan wrote:

Because the databases are not signed yet. The process for doing that is still being worked out...

This. I've never had it output errors to the console so I don't know why yours did that. I have ran Wireshark while doing a Pacman sync and it always asks for the repo sig files (to which the server replies "file not found") but Pacman just seems to ignore this and carry on regardless. Never would have known unless I looked at the raw packets.

gnumdk · 2016-08-26 06:43:48

SigLevel = Required DatabaseNever

This fix the issue with curl as external downloader.

jasonwryan · 2016-08-26 09:08:12

Please don't necrobump, especially solved threads: https://wiki.archlinux.org/index.php/Co … bumping.22

Closing

Arch Linux

#1 2012-01-17 02:12:32

[Solved] Pacman 4 Looking for <repo>.db.sig files which aren't there?

#2 2012-01-17 02:42:51

Re: [Solved] Pacman 4 Looking for <repo>.db.sig files which aren't there?

#3 2012-01-17 03:08:17

Re: [Solved] Pacman 4 Looking for <repo>.db.sig files which aren't there?

#4 2012-01-17 03:27:53

Re: [Solved] Pacman 4 Looking for <repo>.db.sig files which aren't there?

#5 2012-01-17 04:39:21

Re: [Solved] Pacman 4 Looking for <repo>.db.sig files which aren't there?

#6 2012-01-17 05:22:49

Re: [Solved] Pacman 4 Looking for <repo>.db.sig files which aren't there?

#7 2012-01-17 05:30:48

Re: [Solved] Pacman 4 Looking for <repo>.db.sig files which aren't there?

#8 2015-02-14 19:34:05

Re: [Solved] Pacman 4 Looking for <repo>.db.sig files which aren't there?

#9 2015-02-15 23:19:53

Re: [Solved] Pacman 4 Looking for <repo>.db.sig files which aren't there?

#10 2015-02-16 08:45:11

Re: [Solved] Pacman 4 Looking for <repo>.db.sig files which aren't there?

#11 2016-08-26 06:43:48

Re: [Solved] Pacman 4 Looking for <repo>.db.sig files which aren't there?

#12 2016-08-26 09:08:12

Re: [Solved] Pacman 4 Looking for <repo>.db.sig files which aren't there?

Board footer