You are not logged in.

#1 2017-09-18 13:57:04

Bronze
Member
Registered: 2016-12-23
Posts: 61

signature from "Anatol Pomozov <anatol.pomozov@gmail.com>" is unknown

I ran into some installation issue due to the signature of Anatol Pomozov not being trusted:

error: libcap-ng: signature from "Anatol Pomozov <anatol.pomozov@gmail.com>" is unknown trust
:: File /var/cache/pacman/pkg/libcap-ng-0.7.8-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: libaio: signature from "Anatol Pomozov <anatol.pomozov@gmail.com>" is unknown trust
:: File /var/cache/pacman/pkg/libaio-0.3.110-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y

I fixed that, eventually, with:

# pacman-key --lsign-key 753E0F1F
# pacman-key -r 753E0F1F

Adding keys manually doesn't strike me as the best solution. However, I did manage to finish installation. Should I remove the manually added key?

Running "pacman-key --refresh-keys" after installation:

[..]
gpg: key B02854ED753E0F1F: "Anatol Pomozov <anatol.pomozov@gmail.com>" not changed
[..]

Offline

#2 2017-09-18 14:13:38

Scimmia
Fellow
Registered: 2012-09-01
Posts: 11,466

Re: signature from "Anatol Pomozov <anatol.pomozov@gmail.com>" is unknown

That key is signed by 5 Master Keys. It's fully trusted. See what `pacman-key --list-sigs Anatol` tells you.

Edit: Re-read; if this was on the install disk, it sounds like you used an ancient ISO.

Last edited by Scimmia (2017-09-18 14:14:57)

Offline

#3 2017-09-18 14:20:36

Bronze
Member
Registered: 2016-12-23
Posts: 61

Re: signature from "Anatol Pomozov <anatol.pomozov@gmail.com>" is unknown

I used the February 2017 ISO. But I also found Anatol's signature untrusted on the April 2017 ISO. Not sure if February is ancient, but yeah, not the latest smile

Apart from using a more recent ISO, what should have been my solution to get around the lack of trust? keyring refresh didn't do it.

Last edited by Bronze (2017-09-18 14:20:59)

Offline

#4 2017-09-18 14:22:51

Scimmia
Fellow
Registered: 2012-09-01
Posts: 11,466

Re: signature from "Anatol Pomozov <anatol.pomozov@gmail.com>" is unknown

A keyring refresh would have done it. The key on the ISO likely just expired.

Offline

#5 2017-09-18 17:11:03

mrunion
Member
From: Jonesborough, TN
Registered: 2007-01-26
Posts: 1,938
Website

Re: signature from "Anatol Pomozov <anatol.pomozov@gmail.com>" is unknown

Glad it's solved! And in a rolling release like Arch, February is ancient! 9/1 ISO is out as far as I know....

Last edited by mrunion (2017-09-18 17:11:21)


Matt

"It is very difficult to educate the educated."

Offline

#6 2017-09-18 20:58:50

Bronze
Member
Registered: 2016-12-23
Posts: 61

Re: signature from "Anatol Pomozov <anatol.pomozov@gmail.com>" is unknown

The 9/1 ISO gave me various issues when trying to install it on WSL.
See https://bbs.archlinux.org/viewtopic.php … 2#p1736632

the 4/1 ISO may have worked for me, had I known that manually adding Pomozov's key was fine.
I haven't tried an ISO between 4/1 and 9/1.

Offline

#7 2017-09-19 12:18:00

mrunion
Member
From: Jonesborough, TN
Registered: 2007-01-26
Posts: 1,938
Website

Re: signature from "Anatol Pomozov <anatol.pomozov@gmail.com>" is unknown

That makes sense. But you should also know that Arch is not supported as a WSL. Make sure you mention you are using it as WSL when you ask for help.


Matt

"It is very difficult to educate the educated."

Offline

#8 2017-09-19 16:19:52

anatolik
Developer
Registered: 2012-09-27
Posts: 458

Re: signature from "Anatol Pomozov <anatol.pomozov@gmail.com>" is unknown

I think the workaround for 4/1 image is to install the latest version of `archlinux-keyring` package first.

But I agree that you should use the latest version of Arch ISO. If there are problems with the latest image then it is better to focus on solving it instead of going to an ancient image.


Read it before posting http://www.catb.org/esr/faqs/smart-questions.html
Ruby gems repository done right https://bbs.archlinux.org/viewtopic.php?id=182729
Fast initramfs generator with security in mind https://wiki.archlinux.org/index.php/Booster

Offline

Board footer

Powered by FluxBB