[SOLVED] Cannot upgrade packages (PGP signature)

Arsakes · 2018-09-12 07:11:01

Recently our server was moved into internal network (it is inside VPN if it is relevant and some ports may be broken)

After atempting to update system

pacman -Syu

I've got packages downloaded properly and error at the end:

....
 [#############################################################################] 100%
error:  linux-api-headers: signature from "Bartlomiej Piotrowski <b@bpiotrowski.pl>" is incorrect
:: File /var/cache/pacman/pkg/linux-api-headers-4.17.11-1-any.pkg.tar.xz is damaged (wrong or damaged package (PGP signature)).

To *fix* it i've followed this thread https://bbs.archlinux.org/viewtopic.php?id=202442 , changed mirrors and run this:
So issued commands:

pacman-key --init
pacman-key --populate archlinux
sudo pacman -Syyuv

Now its even worse I cant event connect to database!

error: GPGME error: No data
error: GPGME error: No data
error: GPGME error: No data
:: Synchronizing package databases...
 core                                    3.8 KiB  0.00B/s 00:00 [##################################] 100%
 core.sig                                3.8 KiB  0.00B/s 00:00 [##################################] 100%
error: GPGME error: No data
error: failed to update core (invalid or corrupted database (PGP signature))
 extra                                   3.8 KiB  0.00B/s 00:00 [##################################] 100%
 extra.sig                               3.8 KiB  0.00B/s 00:00 [##################################] 100%
error: GPGME error: No data
error: failed to update extra (invalid or corrupted database (PGP signature))
 community                               3.8 KiB  0.00B/s 00:00 [##################################] 100%
 community.sig                           3.8 KiB  0.00B/s 00:00 [##################################] 100%
error: GPGME error: No data
error: failed to update community (invalid or corrupted database (PGP signature))
error: failed to synchronize all databases

Last edited by Arsakes (2018-09-12 14:06:23)

jasonwryan · 2018-09-12 08:15:13

1. -Sy is not an update.

2. Paste the full output in English: https://wiki.archlinux.org/index.php/Co … s_and_code

Slithery · 2018-09-12 08:16:05

Please post to the boards in English...
CoC - Pasting pictures and code

loqs · 2018-09-12 09:19:32

Arch does not sign the databases. The server offering files that should not exist and all the files being the same size suggest a captive portal to me.
Please examine one of those files to see if it is the html for a captive portal.

Arsakes · 2018-09-12 12:02:31

So 2 out of 3 people were here to enforce forum rules.
So useful, thanks. I did what you asked.

Great Thanks loqs you may be right:
It seems the computer does not have access to broad interent.
This is what I'm getting

    curl -C - -f "http://arch.midov.pl/arch/core/os/x86_64/core.db" > file

"file" content:

Your request is being redirected to :<a href="http://10.240.0.1:8080">here</a>.

It is like this for other mirrors too (i've checked).

The question is now following:

I really need to add some package to that machine and I have ssh access. Can I copy packages there manually through scp (from other's machine /var/cache/pacman/pkg?)
Can I force pacman to forget those signatures?
How can I skip asking for those or udate databases manually if can't normally use pacman?

Last edited by Arsakes (2018-09-12 12:08:31)

loqs · 2018-09-12 12:58:57

I would investigate the address the portal is redirecting you to http://10.240.0.1:8080

eschwartz · 2018-09-12 13:58:39

Arsakes wrote:

I really need to add some package to that machine and I have ssh access. Can I copy packages there manually through scp (from other's machine /var/cache/pacman/pkg?)

No. You also need a working database. I guess you could scp those over too...

You could also host a proxy mirror and tell pacman to download from there instead.

Can I force pacman to forget those signatures?

Yes -- they are files in /var/lib/pacman/sync

This won't help you download new, valid databases though.

How can I skip asking for those or udate databases manually if can't normally use pacman?

Simply don't use -Syu when you don't have the ability to do so successfully? Just use -S to install new packages, then update once your internet works. I'm not sure what exactly you're trying to accomplish here.

...

Ultimately every one of your questions can really be answered by "fix the proxy so it no longer interrupts pacman". Figure out why it is blocking pacman and make it stop. Do you need to be "logged in" to the internet? Do you need to add the mirror url to some whitelist?

Last edited by eschwartz (2018-09-12 14:00:42)

Arsakes · 2018-09-12 14:05:57

Thanks for help people.
Unfortunately I can force admins to give me access - so i had to cheat:

I've copied whole database from my local machine to troubled server to

pacman/sync/

and did the same with packages I needed and put them into

/var/cache/pacman/pkg

Then installed needed packages with:

pacman -U

Pacman didn't need to download any new info and packages were installed properly

NOTE: For all having seemingly similar problem - I used a hack, since I know now problem lies with pacman being unable to contact any mirrors.

Last edited by Arsakes (2018-09-12 14:08:09)

Arch Linux

#1 2018-09-12 07:11:01

[SOLVED] Cannot upgrade packages (PGP signature)

#2 2018-09-12 08:15:13

Re: [SOLVED] Cannot upgrade packages (PGP signature)

#3 2018-09-12 08:16:05

Re: [SOLVED] Cannot upgrade packages (PGP signature)

#4 2018-09-12 09:19:32

Re: [SOLVED] Cannot upgrade packages (PGP signature)

#5 2018-09-12 12:02:31

Re: [SOLVED] Cannot upgrade packages (PGP signature)

#6 2018-09-12 12:58:57

Re: [SOLVED] Cannot upgrade packages (PGP signature)

#7 2018-09-12 13:58:39

Re: [SOLVED] Cannot upgrade packages (PGP signature)

#8 2018-09-12 14:05:57

Re: [SOLVED] Cannot upgrade packages (PGP signature)

Board footer