You are not logged in.
I've tried to update a rarely-used system with pacman -Syu. As part of the update, it wanted to update gst-plugins-bad from 1.16.0-4 to 1.16.0-5, which depends on the new package zbar. However, I got the following error:
(415/415) checking package integrity [##################################] 100%
error: zbar: signature from "Felix Yan <felixonmars@archlinux.org>" is invalid
:: File /var/cache/pacman/pkg/zbar-0.23-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.
Error installing repo packages
I've tried a few things.
I updated archlinux-keyring.
I confirmed the system clock is correct.
PGP import is fine.
I've cleared out the old pkg cache (with sudo pacman -Sc).
I've reset all the keys with rm -r /etc/pacman.d/gnupg; pacman-key --init; pacman-key --populate archlinux.
I still got the same error. In desperation, I disabled signature checking. I now got a new error:
:: File /var/cache/pacman/pkg/zbar-0.23-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (checksum)).
This update went fine on three other Arch systems. In the end, I just transferred zbar-0.23-1-x86_64.pkg.tar.xz from the cache of one system to this system, and it installed fine. Does this suggest there was some problem with the repos?
Last edited by Salkay (2019-09-01 23:08:56)
Offline
Possibly a problem with the mirror, check https://www.archlinux.org/mirrors/status/
In desperation, I disabled signature checking.
Also, don't do this. If this was an attempt to install malware by some bad actor, you'd have just given them the keys to the kingdom. Fortunately it looks like this is package corruption problem rather than something malicious, so no harm came of it this time. Re-enable signature checking before you do anything else though.
Last edited by WorMzy (2019-09-01 10:53:16)
Sakura:-
Mobo: MSI MAG X570S TORPEDO MAX // Processor: AMD Ryzen 9 5950X @4.9GHz // GFX: AMD Radeon RX 5700 XT // RAM: 32GB (4x 8GB) Corsair DDR4 (@ 3000MHz) // Storage: 1x 3TB HDD, 6x 1TB SSD, 2x 120GB SSD, 1x 275GB M2 SSD
Making lemonade from lemons since 2015.
Offline
Possibly a problem with the mirror, check https://www.archlinux.org/mirrors/status/
The mirror status (http://mirror.internode.on.net/pub/archlinux/) looks fine there.
Offline
Package looks fine now, I can verify the signature. Do you still have a copy of the faulty package? Does it have the correct md5sum (191e640a7606c59aa5eb6f2aa38cbc9d)?
Sakura:-
Mobo: MSI MAG X570S TORPEDO MAX // Processor: AMD Ryzen 9 5950X @4.9GHz // GFX: AMD Radeon RX 5700 XT // RAM: 32GB (4x 8GB) Corsair DDR4 (@ 3000MHz) // Storage: 1x 3TB HDD, 6x 1TB SSD, 2x 120GB SSD, 1x 275GB M2 SSD
Making lemonade from lemons since 2015.
Offline
Ah. I had forgotten that I had set up my master system to share its cache as a repository using darkhttpd. Hence, when I tried to update the "broken" system, it had been using the cached zbar version anyway. The md5sum of this cached version (c8cca6ce14029330e284d45394ee214b) is different from yours and the mirror. (So presumably it installed fine before because pacman -U doesn't do the same checks as pacman -S?)
I think the problem is that zbar was moved from the community repo to extra at some point, and it seems to have been rebuilt. However, the pkgver wasn't bumped. Hence, my "broken" system synced databases, then realised it had to install the new zbar. However, my master system had the old zbar cached, and sent that instead. So I'm guessing there was a problem because pacman saw the same pkgvers, but the files were different.
Offline
Aha, yes, that seems like a plausible explanation. It seems odd that there wasn't a pkgrel bump, despite the package being rebuilt during the move, but I'm not sure if that was an oversight.
Anyway, it looks like you've identified the probable cause of your issue. If you're happy that it's solved, please remember to mark your thread as such.
Sakura:-
Mobo: MSI MAG X570S TORPEDO MAX // Processor: AMD Ryzen 9 5950X @4.9GHz // GFX: AMD Radeon RX 5700 XT // RAM: 32GB (4x 8GB) Corsair DDR4 (@ 3000MHz) // Storage: 1x 3TB HDD, 6x 1TB SSD, 2x 120GB SSD, 1x 275GB M2 SSD
Making lemonade from lemons since 2015.
Offline