You are not logged in.

#1 2012-07-07 14:00:08

linuxkids
Member
Registered: 2012-07-07
Posts: 4

[Solved]error: package-query: miss missing required signature

i am a newbie for archlinux.and i am trying to install archlinux on my laptop,i read the wiki ,and do everything step by step ,but  when i installed yaourt and there were some error.

error: package-query:  missing required signature
error:yaourt: missing required signature

i try to set "siglevel = never" to make it work,but failed. what should i do to this ? thanks very much for help

Last edited by linuxkids (2012-07-08 09:03:51)

Offline

#2 2012-07-07 14:26:01

ewaller
Administrator
From: Pasadena, CA
Registered: 2009-07-13
Posts: 13,800

Re: [Solved]error: package-query: miss missing required signature

Please post the exact command you used, and the contents of your /etc/pacman.conf file.
Is yaourt the only thing that won't install, or is the the first thing that you tried to install?
Have you followed this article's advice?

Edit: Oh, and welcome to Arch Linux smile

Last edited by ewaller (2012-07-07 14:26:30)


Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
You assume people are rational and influenced by evidence.  You must not work with the public much. -- Trilby
----
How to Ask Questions the Smart Way

Offline

#3 2012-07-07 16:06:11

angelfalls
Member
Registered: 2012-03-26
Posts: 139

Re: [Solved]error: package-query: miss missing required signature

try these commands follow:

pacman-key --init
pacman-key --populate archlinux

it takes a long time. (~1h30')

read this news: https://www.archlinux.org/news/having-p … -packages/

hopes it can be help you.

btw: wellcome to Arch.

Last edited by angelfalls (2012-07-07 16:07:00)

Offline

#4 2012-07-07 16:20:51

progandy
Member
Registered: 2012-05-17
Posts: 2,152

Re: [Solved]error: package-query: miss missing required signature

angelfalls wrote:
pacman-key --init

it takes a long time. (~1h30')

That is not entirely true.

https://wiki.archlinux.org/index.php/Pacman-key
For this initialization, entropy is required. Moving your mouse around, pressing random characters at the keyboard or running some disk-based activity (for example in another console running ls -R / or find / -name foo) should generate entropy. If your system does not already have sufficient entropy, this step may take hours; if you actively generate entropy, it will complete much more quickly.

Offline

#5 2012-07-07 17:15:30

angelfalls
Member
Registered: 2012-03-26
Posts: 139

Re: [Solved]error: package-query: miss missing required signature

yep, i confirms that. i missed these lines.

Wiki wrote:

The Linux kernel generates entropy from keyboard timings, mouse movements, and IDE timings and makes the random character data available to other operating system processes through the special files /dev/random and /dev/urandom. This capability was introduced in Linux version 1.3.30.

Offline

#6 2012-07-08 08:04:24

linuxkids
Member
Registered: 2012-07-07
Posts: 4

Re: [Solved]error: package-query: miss missing required signature

thanks for help.i taken a long time to  install desktop =.=

that's the command

[kids@kids-archlinux ~]$ sudo pacman -S yaourt
resolving dependencies...
looking for inter-conflicts...

Targets (3): package-query-1.0.1-1  yajl-2.0.4-1  yaourt-1.1-1

Total Download Size:    0.10 MiB
Total Installed Size:   0.64 MiB

Proceed with installation? [Y/n]
:: Retrieving packages from community...
yajl-2.0.4-1-x86_64       33.9 KiB   288K/s 00:00 [######################] 100%
:: Retrieving packages from archlinuxfr...
package-query-1.0.1...    21.7 KiB  2.12K/s 00:10 [######################] 100%
yaourt-1.1-1-any          44.7 KiB  10.1K/s 00:04 [######################] 100%
(3/3) checking package integrity                   [######################] 100%
error: package-query: missing required signature
error: yaourt: missing required signature
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.

and my pacman.conf
http://pastebin.com/sXFAqfWx
pacman-key --init
pacman-key --populate archlinux

i have made it at first time ,and then ,i try to make "siglever=never" , but it didn't work

Last edited by linuxkids (2012-07-08 08:45:46)

Offline

#7 2012-07-08 08:08:27

jasonwryan
Anarchist
From: .nz
Registered: 2009-05-09
Posts: 20,075
Website

Re: [Solved]error: package-query: miss missing required signature

1. Please use code tags when pasting to the boards
https://wiki.archlinux.org/index.php/Fo … s_and_Code

2. You have set SigLevel = PackageRequired for archlinux.fr repo

3. Don't use archlinux.fr - learn how to use makepkg...


Arch + dwm   •   Mercurial repos  •   Github

Registered Linux User #482438

Offline

#8 2012-07-08 08:47:16

linuxkids
Member
Registered: 2012-07-07
Posts: 4

Re: [Solved]error: package-query: miss missing required signature

jasonwryan wrote:

1. Please use code tags when pasting to the boards
https://wiki.archlinux.org/index.php/Fo … s_and_Code

2. You have set SigLevel = PackageRequired for archlinux.fr repo

3. Don't use archlinux.fr - learn how to use makepkg...

i will try it right now. thanks very much

=================================================

i remove "siglevel=packagerequired",and it works.thanks all of you

Last edited by linuxkids (2012-07-08 09:03:28)

Offline

#9 2013-04-10 19:47:20

diederick76
Member
From: Amsterdam
Registered: 2010-02-14
Posts: 65
Website

Re: [Solved]error: package-query: miss missing required signature

jasonwryan wrote:

3. Don't use archlinux.fr - learn how to use makepkg...

Why is that? I find yaourt very convenient. Is it insecure? Can it lead to other problems?

Offline

#10 2013-04-12 21:53:27

maofree
Member
Registered: 2012-11-04
Posts: 8
Website

Re: [Solved]error: package-query: miss missing required signature

Hi
another solution is this:
in /etc/pacman.conf use this code to add archlinuxfr's repository

[archlinuxfr]
SigLevel = Optional TrustAll
Server = http://repo.archlinux.fr/x86_64

Offline

#11 2013-04-12 22:36:13

WorMzy
Forum Moderator
From: Scotland
Registered: 2010-06-16
Posts: 5,903
Website

Re: [Solved]error: package-query: miss missing required signature

diederick76 wrote:
jasonwryan wrote:

3. Don't use archlinux.fr - learn how to use makepkg...

Why is that? I find yaourt very convenient. Is it insecure? Can it lead to other problems?

It makes you lazy, and removes the need for you to know what's actually happening when you "-S aurpackage", leading to frivolous "Help, 'yaourt -Syu' stopped working and I don't know why, and I'm too lazy to search the forums" posts.


Sakura:-
Mobo: ASUS P8Z77-V PRO // Processor: Intel Core i7-3770K 3.4GHz // GFX: nVidia GeForce GTX 970 Ti // RAM: 32GB (4x 8GB) Corsair DDR3 (@ 2133MHz) // Storage: 1x 3TB Seagate SATAII 5x 1TB Samsung SATAII, 2x 120GB Corsair SSD

Making lemonade from lemons since 2015.

Offline

#12 2013-04-13 08:06:29

diederick76
Member
From: Amsterdam
Registered: 2010-02-14
Posts: 65
Website

Re: [Solved]error: package-query: miss missing required signature

WorMzy wrote:
diederick76 wrote:
jasonwryan wrote:

3. Don't use archlinux.fr - learn how to use makepkg...

Why is that? I find yaourt very convenient. Is it insecure? Can it lead to other problems?

It makes you lazy, and removes the need for you to know what's actually happening when you "-S aurpackage", leading to frivolous "Help, 'yaourt -Syu' stopped working and I don't know why, and I'm too lazy to search the forums" posts.

I see. Thanks.

Offline

#13 2013-07-25 21:13:07

thiagowfx
Member
Registered: 2013-07-09
Posts: 532

Re: [Solved]error: package-query: miss missing required signature

WorMzy wrote:

It makes you lazy, and removes the need for you to know what's actually happening when you "-S aurpackage", leading to frivolous "Help, 'yaourt -Syu' stopped working and I don't know why, and I'm too lazy to search the forums" posts.

Sorry for posting in this bit old thread, but I'm curious about your comment.

In this case, considering your argument, pacman -S officialpackage is also lazy. What is not lazy for you? The Gentoo way, of compiling all the packages? I can't see why yaourt is not convenient. In this case, pacman -S officialpackage can also lead to breakage.

Offline

#14 2013-07-25 21:18:49

jasonwryan
Anarchist
From: .nz
Registered: 2009-05-09
Posts: 20,075
Website

Re: [Solved]error: package-query: miss missing required signature

thiagowfx wrote:
WorMzy wrote:

It makes you lazy, and removes the need for you to know what's actually happening when you "-S aurpackage", leading to frivolous "Help, 'yaourt -Syu' stopped working and I don't know why, and I'm too lazy to search the forums" posts.

Sorry for posting in this bit old thread, but I'm curious about your comment.

In this case, considering your argument, pacman -S officialpackage is also lazy. What is not lazy for you? The Gentoo way, of compiling all the packages? I can't see why yaourt is not convenient. In this case, pacman -S officialpackage can also lead to breakage.

It obscures from users (particularly new users) that AUR is an usupported repository, and that propagates a lazy attitude about the way the rest of Arch works. You only have to look through these boards around any upgrade to pacman to see a host of threads about how pacman is broken, because people don't realize that yaourt/packagekit != pacman.

It has nothing to do with compiling: that is a misdirection. It's about a simple expectation that Arch users will have some clue about what they are actually doing...


Arch + dwm   •   Mercurial repos  •   Github

Registered Linux User #482438

Offline

#15 2013-07-25 22:01:39

WorMzy
Forum Moderator
From: Scotland
Registered: 2010-06-16
Posts: 5,903
Website

Re: [Solved]error: package-query: miss missing required signature

The packages in Arch's official repositories (core and extra), and to a slightly lesser extent the pre-compiled packages in community have been tested with, and complied against the rest of the packages in the official repositories. A number of these (core packages and potentially problematic packages in particular*) then go through testing and bugs are picked up along the way and fixed. By the time packages reach the repositories proper, the packages are usually stable and users can pacman -Syu and get away with it. AUR packages are a, if you'll forgive the imagery, a tumour on the side of the official/semi-official repositories. They are independent. Packages operate on their maintainers timescale. And the packaging guidelines are often treated as a guideline, not a set of rules to be adhered to (assuming that the maintainer is aware of them at all). My opinion is thus:

"# pacman -Syu" will update your *official* packages to the next stable version of packages. (not counting third-party repos)
"# <aurhelper> -Syu" will update your official packages to the next stable version, and will update any AUR packages that may or may not have been updated to reflect the changes in the official packages, and will leave untouched a number of packages that may, or may not require a rebuild after the recent changes the official packages have gone through.

The forums are littered with people who have fallen into the habit of using an AUR helper as though it was an official replacement for pacman, and have ended up with a broken system or an "unresolvable" conflict that their AUR helper was unequipped to deal with.  Worse still, some of these people have then tried to force through updates that should never be forced, resulting in worse problems. This is why I say it encourages laziness. I have nothing against AUR packages personally, I currently have 41 of them installed. I even maintain a handful. The problem is with users who rely on unsupported tools but demand support all the same.


*I can't claim all official packages go through testing, because this isn't true. All core packages do, as far as I know, and any packages that have had major changes (e.g. soname bumps) get held back until affected packages get rebuilt/updated to work with the new package.

Note that I am not a Developer, nor a Trusted User, so feel free to disregard my opinions. I am simply drawing on my own conclusions from browsing the forums and reading the mailing lists, any semblance of being "right" is mere coincidence. tongue

Last edited by WorMzy (2013-07-25 22:10:08)


Sakura:-
Mobo: ASUS P8Z77-V PRO // Processor: Intel Core i7-3770K 3.4GHz // GFX: nVidia GeForce GTX 970 Ti // RAM: 32GB (4x 8GB) Corsair DDR3 (@ 2133MHz) // Storage: 1x 3TB Seagate SATAII 5x 1TB Samsung SATAII, 2x 120GB Corsair SSD

Making lemonade from lemons since 2015.

Offline

#16 2013-07-25 22:55:10

cfr
Member
From: Cymru
Registered: 2011-11-27
Posts: 5,675

Re: [Solved]error: package-query: miss missing required signature

It also obscures the different security issues. I have almost 90 AUR packages installed so I am not saying this to denigrate the people who contribute to AUR but every time I install an AUR package, I am making a decision to trust the packager. Having decided to use Arch, I trust the official packages. I don't mean that I couldn't come to distrust them no matter what - of course not. But if I did come to distrust them, I would be looking for a new distro and not a new package. Tools like yaourt obscure the difference in trust between -S <new-official-package> and -S <new-aur-package>. That difference is why I read pkgbuilds for AUR packages (as best I can - there's stuff I don't understand so I could easily be hood-winked - but I do what I can). I don't do that for official packages. I don't upgrade AUR packages blind either for the same reason - the pkgbuild might have changed, the maintainer might have changed, who knows really without reading it? (Basically I diff the old against the new and then read the new one if necessary. If it is just a new checksum and version, obviously there's no need.)

Also I don't run makepkg in a user account with root privileges. (Unfortunately this seems to break some builds.)


How To Ask Questions The Smart Way | Help Vampires

Arch Linux | x86_64 | GPT | EFI boot | grub2 | systemd | LVM2 on LUKS
Lenovo x121e | Intel(R) Core(TM) i3-2367M CPU @ 1.40GHz GenuineIntel | Intel Centrino Wireless-N 1000 | US keyboard with Euro | 320G 7200 RPM Seagate HDD

Offline

#17 2016-01-14 05:11:59

sixtyfiveten
Member
Registered: 2016-01-14
Posts: 1

Re: [Solved]error: package-query: miss missing required signature

Adding the french repository and "SigLevel whitelisting" (my term) solved the problem for me.  (This is an old thread, but old threads are valuable, they turn up in search engines, so it's worth chiming in on).

Some of the other "it makes you lazy" themed arguments in this thread are reasonable, but also a bit comical. smile

Tools can indeed make us lazy, but that's technolgy in general, going back to the stone age. Tools either make things easier or make things possible that otherwise would not be.

It's frankly highly annoying Pacman doesn't support installing from the AUR by default with a robust warning, or optionally with a switch.  True, that can introduce relability and security risks (I've done some work in cryptography application/algorithm development, I understand the issues), but it's *always* a tradeoff between convenience and security.

The key is, let the *individual user* decide what risks he feels are acceptable.  We're adults for the most part. In my case, this is a development VM, incrementally backed up, and practically speaking, expendible.  Were it a production server, I'd probably reluctantly go with another distro and just deal with the fact that I don't have the lightweight install flexibility I love with Arch.

Back to topic (Pacman and wrappers), Yaourt is a workaround to solve a shortcoming in pacman which many feel shouldn't exist in the first place.  So in the process of trying to solve the shortcoming, new security risks are introduced.  It's human nature to scoff at perceived unjust regulations and polcies (ask any historian about Prohibition, but I digress).

Now that I solved this extremely annoying problem with pacman thanks to the Yaourt speakeasy, I can get back to actually driving this car (sober) instead of fixing something that shouldn't be broken in the first place.

Thank you, supporters of Yaourt.
6510

P.S.:  Completely unrelated, I still enjoy playing the original 1980 game Pac-Man.

maofree wrote:

Hi
another solution is this:
in /etc/pacman.conf use this code to add archlinuxfr's repository

[archlinuxfr]
SigLevel = Optional TrustAll
Server = http://repo.archlinux.fr/x86_64

Offline

#18 2016-01-14 05:18:25

jasonwryan
Anarchist
From: .nz
Registered: 2009-05-09
Posts: 20,075
Website

Re: [Solved]error: package-query: miss missing required signature

Pacman doesn't support AUR because pacman is distro agnostic.

And please don't necrobump: https://wiki.archlinux.org/index.php/Fo … bumping.22


Closing


Arch + dwm   •   Mercurial repos  •   Github

Registered Linux User #482438

Offline

Board footer

Powered by FluxBB