You are not logged in.

Pages: 1

#1 2020-05-01 21:52:08

QCKS
Member
Registered: 2020-05-01
Posts: 5

Pacman Invalid Signature or Corrupt Package

Hi I'm working on installing Arch at the moment and I'm running into some issues I haven't been able to solve. For reference I've installed arch a couple dozen times so I'm not a total noob.

Basically the issue I'm getting is when I try to run pacstrap or pacman it failes at checking package integrity where it says 

Signature from "<Person>" is invalid 
File <file> is corrupted (invalid or corrupted package (PGP signature)).

What I've tried:

  • Clearing pacman cache

  • Refreshing keys

  • Deleting keys and repopulating

  • Updating the mirrorlist

  • Changing the keyserver

Offline

#2 2020-05-01 21:54:44

loqs
Member
Registered: 2014-03-06
Posts: 19,077

Re: Pacman Invalid Signature or Corrupt Package

Please post the full command you are using and its full output.  See the tip box from pastebin to post the output from the console.

Offline

#3 2020-05-01 22:04:54

QCKS
Member
Registered: 2020-05-01
Posts: 5

Re: Pacman Invalid Signature or Corrupt Package

Here's the output of 

pacstrap /mnt base linux
==> Creating install root at /mnt
==> Installing packages to /mnt
:: Synchronizing package databases...
downloading core.db...
downloading extra.db...
downloading community.db...
resolving dependencies...
:: There are 2 providers available for initramfs:
:: Repository core
   1) mkinitcpio
:: Repository extra
   2) dracut

Enter a number (default=1): 
looking for conflicting packages...
warning: dependency cycle detected:
warning: libelf will be installed before its curl dependency

Packages (116) acl-2.2.53-2  archlinux-keyring-20200422-1  argon2-20190702-2  attr-2.4.48-2  audit-2.8.5-6  bash-5.0.016-1  bzip2-1.0.8-3  ca-certificates-20181109-3  ca-certificates-mozilla-3.51.1-1  ca-certificates-utils-20181109-3  coreutils-8.32-1  cracklib-2.9.7-2  cryptsetup-2.3.2-1  curl-7.70.0-1  db-5.3.28-5  dbus-1.12.16-5  device-mapper-2.02.187-1  diffutils-3.7-3  e2fsprogs-1.45.6-1  expat-2.2.9-3  file-5.38-3  filesystem-2019.10-2  findutils-4.7.0-2  gawk-5.1.0-1  gcc-libs-9.3.0-1  gdbm-1.18.1-3  gettext-0.20.2-1  glib2-2.64.2-1  glibc-2.31-2  gmp-6.2.0-1  gnupg-2.2.20-1  gnutls-3.6.13-1  gpgme-1.13.1-3  grep-3.4-1  gzip-1.10-3  hwids-20200306-1  iana-etc-20200428-1  icu-67.1-1  iproute2-5.6.0-1  iptables-1:1.8.4-1  iputils-20190709-2  json-c-0.14-1  kbd-2.2.0-5  keyutils-1.6.1-3  kmod-27-1  krb5-1.18-1  less-551-3  libarchive-3.4.2-1  libassuan-2.5.3-2  libcap-2.33-1  libcap-ng-0.7.10-1  libcroco-0.6.13-1  libelf-0.178-2  libffi-3.3-3  libgcrypt-1.8.5-2  libgpg-error-1.37-1  libidn2-2.3.0-1  libksba-1.3.5-2  libldap-2.4.49-1  libmnl-1.0.4-3  libnetfilter_conntrack-1.0.8-1  libnfnetlink-1.0.1-3  libnftnl-1.1.6-1  libnghttp2-1.40.0-1  libnl-3.5.0-2  libp11-kit-0.23.20-4  libpcap-1.9.1-2  libpsl-0.21.0-2  libsasl-2.1.27-2  libseccomp-2.4.2-1  libsecret-0.20.3-1  libssh2-1.9.0-2  libtasn1-4.16.0-1  libtirpc-1.2.6-1  libunistring-0.9.10-2  libusb-1.0.23-2  libutil-linux-2.35.1-2  libxml2-2.9.10-2  licenses-20200427-1  linux-api-headers-5.4.17-1  lz4-1:1.9.2-2  mkinitcpio-27-3  mkinitcpio-busybox-1.31.1-1  mpfr-4.0.2-2  ncurses-6.2-1  nettle-3.5.1-2  npth-1.6-2  openssl-1.1.1.g-1  p11-kit-0.23.20-4  pacman-5.2.1-4  pacman-mirrorlist-20200411-1  pam-1.3.1-2  pambase-20190105.1-2  pciutils-3.6.4-1  pcre-8.44-1  pcre2-10.34-3  perl-5.30.2-1  pinentry-1.1.0-5  popt-1.16-12  procps-ng-3.3.16-1  psmisc-23.3-2  readline-8.0.004-1  sed-4.8-1  shadow-4.8.1-1  sqlite-3.31.1-1  systemd-245.5-2  systemd-libs-245.5-2  systemd-sysvcompat-245.5-2  tar-1.32-3  tzdata-2020a-1  util-linux-2.35.1-2  xz-5.2.5-1  zlib-1:1.2.11-4  zstd-1.4.4-1  base-2-2  linux-5.6.8.arch1-1

Total Download Size:   195.26 MiB
Total Installed Size:  612.22 MiB

:: Proceed with installation? [Y/n] 
:: Retrieving packages...
downloading iana-etc-20200428-1-any.pkg.tar.zst...
downloading filesystem-2019.10-2-x86_64.pkg.tar.xz...
downloading linux-api-headers-5.4.17-1-any.pkg.tar.zst...
downloading tzdata-2020a-1-x86_64.pkg.tar.zst...
downloading glibc-2.31-2-x86_64.pkg.tar.zst...
downloading gcc-libs-9.3.0-1-x86_64.pkg.tar.zst...
downloading ncurses-6.2-1-x86_64.pkg.tar.zst...
downloading readline-8.0.004-1-x86_64.pkg.tar.zst...
downloading bash-5.0.016-1-x86_64.pkg.tar.zst...
downloading attr-2.4.48-2-x86_64.pkg.tar.xz...
downloading acl-2.2.53-2-x86_64.pkg.tar.xz...
downloading gmp-6.2.0-1-x86_64.pkg.tar.zst...
downloading libcap-2.33-1-x86_64.pkg.tar.zst...
downloading gdbm-1.18.1-3-x86_64.pkg.tar.xz...
downloading db-5.3.28-5-x86_64.pkg.tar.xz...
downloading perl-5.30.2-1-x86_64.pkg.tar.xz...
downloading openssl-1.1.1.g-1-x86_64.pkg.tar.zst...
downloading coreutils-8.32-1-x86_64.pkg.tar.zst...
downloading zlib-1:1.2.11-4-x86_64.pkg.tar.xz...
downloading xz-5.2.5-1-x86_64.pkg.tar.zst...
downloading bzip2-1.0.8-3-x86_64.pkg.tar.xz...
downloading libseccomp-2.4.2-1-x86_64.pkg.tar.zst...
downloading file-5.38-3-x86_64.pkg.tar.zst...
downloading findutils-4.7.0-2-x86_64.pkg.tar.xz...
downloading mpfr-4.0.2-2-x86_64.pkg.tar.xz...
downloading gawk-5.1.0-1-x86_64.pkg.tar.zst...
downloading pcre-8.44-1-x86_64.pkg.tar.zst...
downloading grep-3.4-1-x86_64.pkg.tar.zst...
downloading libgpg-error-1.37-1-x86_64.pkg.tar.zst...
downloading libgcrypt-1.8.5-2-x86_64.pkg.tar.xz...
downloading lz4-1:1.9.2-2-x86_64.pkg.tar.xz...
downloading systemd-libs-245.5-2-x86_64.pkg.tar.zst...
downloading procps-ng-3.3.16-1-x86_64.pkg.tar.zst...
downloading sed-4.8-1-x86_64.pkg.tar.zst...
downloading tar-1.32-3-x86_64.pkg.tar.xz...
downloading libffi-3.3-3-x86_64.pkg.tar.zst...
downloading libutil-linux-2.35.1-2-x86_64.pkg.tar.zst...
downloading glib2-2.64.2-1-x86_64.pkg.tar.zst...
downloading libunistring-0.9.10-2-x86_64.pkg.tar.xz...
downloading icu-67.1-1-x86_64.pkg.tar.zst...
downloading gettext-0.20.2-1-x86_64.pkg.tar.zst...
downloading hwids-20200306-1-any.pkg.tar.zst...
downloading kmod-27-1-x86_64.pkg.tar.zst...
downloading pciutils-3.6.4-1-x86_64.pkg.tar.zst...
downloading psmisc-23.3-2-x86_64.pkg.tar.xz...
downloading cracklib-2.9.7-2-x86_64.pkg.tar.xz...
downloading e2fsprogs-1.45.6-1-x86_64.pkg.tar.zst...
downloading libsasl-2.1.27-2-x86_64.pkg.tar.xz...
downloading libldap-2.4.49-1-x86_64.pkg.tar.zst...
downloading keyutils-1.6.1-3-x86_64.pkg.tar.xz...
downloading krb5-1.18-1-x86_64.pkg.tar.zst...
downloading libtirpc-1.2.6-1-x86_64.pkg.tar.zst...
downloading pambase-20190105.1-2-any.pkg.tar.xz...
downloading pam-1.3.1-2-x86_64.pkg.tar.xz...
downloading libcap-ng-0.7.10-1-x86_64.pkg.tar.xz...
downloading audit-2.8.5-6-x86_64.pkg.tar.xz...
downloading shadow-4.8.1-1-x86_64.pkg.tar.zst...
downloading util-linux-2.35.1-2-x86_64.pkg.tar.zst...
downloading less-551-3-x86_64.pkg.tar.xz...
downloading gzip-1.10-3-x86_64.pkg.tar.xz...
downloading licenses-20200427-1-any.pkg.tar.zst...
downloading expat-2.2.9-3-x86_64.pkg.tar.xz...
downloading zstd-1.4.4-1-x86_64.pkg.tar.xz...
downloading libarchive-3.4.2-1-x86_64.pkg.tar.zst...
downloading libtasn1-4.16.0-1-x86_64.pkg.tar.zst...
downloading libp11-kit-0.23.20-4-x86_64.pkg.tar.zst...
downloading device-mapper-2.02.187-1-x86_64.pkg.tar.zst...
downloading popt-1.16-12-x86_64.pkg.tar.xz...
downloading json-c-0.14-1-x86_64.pkg.tar.zst...
downloading argon2-20190702-2-x86_64.pkg.tar.xz...
downloading cryptsetup-2.3.2-1-x86_64.pkg.tar.zst...
downloading dbus-1.12.16-5-x86_64.pkg.tar.zst...
downloading libmnl-1.0.4-3-x86_64.pkg.tar.xz...
downloading libnftnl-1.1.6-1-x86_64.pkg.tar.zst...
downloading libnl-3.5.0-2-x86_64.pkg.tar.xz...
downloading libusb-1.0.23-2-x86_64.pkg.tar.xz...
downloading libpcap-1.9.1-2-x86_64.pkg.tar.xz...
downloading iptables-1:1.8.4-1-x86_64.pkg.tar.zst...
downloading kbd-2.2.0-5-x86_64.pkg.tar.xz...
downloading libidn2-2.3.0-1-x86_64.pkg.tar.xz...
downloading libelf-0.178-2-x86_64.pkg.tar.zst...
downloading pcre2-10.34-3-x86_64.pkg.tar.xz...
downloading systemd-245.5-2-x86_64.pkg.tar.zst...
downloading p11-kit-0.23.20-4-x86_64.pkg.tar.zst...
downloading ca-certificates-utils-20181109-3-any.pkg.tar.zst...
downloading ca-certificates-mozilla-3.51.1-1-x86_64.pkg.tar.zst...
downloading ca-certificates-20181109-3-any.pkg.tar.zst...
downloading libssh2-1.9.0-2-x86_64.pkg.tar.xz...
downloading libpsl-0.21.0-2-x86_64.pkg.tar.xz...
downloading libnghttp2-1.40.0-1-x86_64.pkg.tar.zst...
downloading curl-7.70.0-1-x86_64.pkg.tar.zst...
downloading npth-1.6-2-x86_64.pkg.tar.xz...
downloading libksba-1.3.5-2-x86_64.pkg.tar.xz...
downloading libassuan-2.5.3-2-x86_64.pkg.tar.xz...
downloading libsecret-0.20.3-1-x86_64.pkg.tar.zst...
downloading pinentry-1.1.0-5-x86_64.pkg.tar.xz...
downloading nettle-3.5.1-2-x86_64.pkg.tar.xz...
downloading gnutls-3.6.13-1-x86_64.pkg.tar.zst...
downloading sqlite-3.31.1-1-x86_64.pkg.tar.zst...
downloading gnupg-2.2.20-1-x86_64.pkg.tar.zst...
downloading gpgme-1.13.1-3-x86_64.pkg.tar.xz...
downloading pacman-mirrorlist-20200411-1-any.pkg.tar.zst...
downloading archlinux-keyring-20200422-1-any.pkg.tar.zst...
downloading pacman-5.2.1-4-x86_64.pkg.tar.zst...
downloading systemd-sysvcompat-245.5-2-x86_64.pkg.tar.zst...
downloading iputils-20190709-2-x86_64.pkg.tar.xz...
downloading iproute2-5.6.0-1-x86_64.pkg.tar.zst...
downloading base-2-2-any.pkg.tar.xz...
downloading mkinitcpio-busybox-1.31.1-1-x86_64.pkg.tar.xz...
downloading diffutils-3.7-3-x86_64.pkg.tar.xz...
downloading mkinitcpio-27-3-any.pkg.tar.zst...
downloading linux-5.6.8.arch1-1-x86_64.pkg.tar.zst...
downloading libxml2-2.9.10-2-x86_64.pkg.tar.zst...
downloading libcroco-0.6.13-1-x86_64.pkg.tar.xz...
downloading libnfnetlink-1.0.1-3-x86_64.pkg.tar.xz...
downloading libnetfilter_conntrack-1.0.8-1-x86_64.pkg.tar.zst...
checking keyring...
checking package integrity...
error: util-linux: signature from "Christian Hesse <eworm@archlinux.org>" is invalid
:: File /mnt/var/cache/pacman/pkg/util-linux-2.35.1-2-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]

error: linux: signature from "Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>" is invalid
:: File /mnt/var/cache/pacman/pkg/linux-5.6.8.arch1-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]

error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.
==> ERROR: Failed to install packages to new root

Last edited by QCKS (2020-05-01 22:06:03)

Offline

#4 2020-05-01 22:13:54

loqs
Member
Registered: 2014-03-06
Posts: 19,077

Re: Pacman Invalid Signature or Corrupt Package

Is the system's clock set correctly?

Offline

#5 2020-05-01 22:22:00

eschwartz
Fellow
Registered: 2014-08-08
Posts: 4,097

Re: Pacman Invalid Signature or Corrupt Package

On the live ISO:

Try downloading these two files:

https://archive.archlinux.org/packages/ … kg.tar.zst
https://archive.archlinux.org/packages/ … ar.zst.sig

And then running:

pacman-key --verify util-linux-2.35.1-2-x86_64.pkg.tar.zst.sig util-linux-2.35.1-2-x86_64.pkg.tar.zst

To see exactly why gnupg doesn't like it.

...

Alternatively,

pacman -Sywdd util-linux --debug

and post the output. This will do a first-time sync of the repos, and try to download util-linux (one of the problematic packages) into the cache. With debug info.

Managing AUR repos The Right Way -- aurpublish (now a standalone tool)

Offline

#6 2020-05-01 22:39:49

QCKS
Member
Registered: 2020-05-01
Posts: 5

Re: Pacman Invalid Signature or Corrupt Package

loqs wrote:

Is the system's clock set correctly?

Yes it is

eschwartz wrote:

On the live ISO:

Try downloading these two files:

https://archive.archlinux.org/packages/ … kg.tar.zst
https://archive.archlinux.org/packages/ … ar.zst.sig

And then running:

pacman-key --verify util-linux-2.35.1-2-x86_64.pkg.tar.zst.sig util-linux-2.35.1-2-x86_64.pkg.tar.zst

To see exactly why gnupg doesn't like it.

...

Alternatively,

pacman -Sywdd util-linux --debug

and post the output. This will do a first-time sync of the repos, and try to download util-linux (one of the problematic packages) into the cache. With debug info.

Here's the output for that

==> Checking util-linux-2.35.1-2-x86_64.pkg.tar.zst.sig... (detached)
gpg: Signature made Mon 13 Apr 2020 09:28:46 PM UTC
gpg:                using EDDSA key 0429897DE5F3BDAC537A30696D42BDD116E0068F
gpg: BAD signature from "Christian Hesse <eworm@archlinux.org>" [unknown]
==> ERROR: The signature identified by util-linux-2.35.1-2-x86_64.pkg.tar.zst.sig could not be verified.

Offline

#7 2020-05-01 22:43:42

eschwartz
Fellow
Registered: 2014-08-08
Posts: 4,097

Re: Pacman Invalid Signature or Corrupt Package

What's the sha256sum of both of those files?

What's the output of

pacman-key --list-sigs 0429897DE5F3BDAC537A30696D42BDD116E0068F

Last edited by eschwartz (2020-05-01 22:45:03)

Managing AUR repos The Right Way -- aurpublish (now a standalone tool)

Offline

#8 2020-05-01 23:20:53

QCKS
Member
Registered: 2020-05-01
Posts: 5

Re: Pacman Invalid Signature or Corrupt Package

Ok so I'm not entirely sure what happened but I redownloaded those files and they passed the test this time.

That command gives me this as output:

pub   rsa2048 2011-08-12 [SC]
      02FD1C7A934E614545849F19A6234074498E9CEE
sig    R     A6234074498E9CEE 2013-01-14  Christian Hesse <eworm@archlinux.org>
sig    R     A6234074498E9CEE 2013-02-04  Christian Hesse <eworm@archlinux.org>
uid           [ unknown] Christian Hesse <eworm@archlinux.org>
sig 3        A6234074498E9CEE 2020-02-04  Christian Hesse <eworm@archlinux.org>
uid           [  full  ] Christian Hesse (Arch Linux Package Signing) <arch@eworm.de>
sig 3        A6234074498E9CEE 2011-08-12  Christian Hesse <eworm@archlinux.org>
sig          3348882F6AC6A4C2 2015-02-07  Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>
sig          BA1DFB64FFF979E7 2015-01-28  Allan McRae (Arch Linux Master Key) <allan@master-key.archlinux.org>
sig          A88E23E377514E00 2015-12-23  Florian Pritz (Arch Linux Master Key) <florian@master-key.archlinux.org>
sig          9B729B06A680C281 2017-07-13  Bartłomiej Piotrowski (Arch Linux Master Key) <bpiotrowski@master-key.archlinux.org>
sig          D6D055F927843F1C 2018-12-10  Levente Polyak (Arch Linux Master Key) <anthraxx@master-key.archlinux.org>
sub   rsa2048 2011-08-12 [E]
sig          A6234074498E9CEE 2011-08-12  Christian Hesse <eworm@archlinux.org>
sub   ed25519 2019-08-29 [S]
sig          A6234074498E9CEE 2019-08-29  Christian Hesse <eworm@archlinux.org>
sub   cv25519 2019-08-29 [E]
sig          A6234074498E9CEE 2019-08-29  Christian Hesse <eworm@archlinux.org>

Offline

#9 2020-05-01 23:29:59

Scimmia
Fellow
Registered: 2012-09-01
Posts: 13,729

Re: Pacman Invalid Signature or Corrupt Package

Is this on bare metal or in a virtual machine?

Offline

#10 2020-05-01 23:48:14

QCKS
Member
Registered: 2020-05-01
Posts: 5

Re: Pacman Invalid Signature or Corrupt Package

It's in a VM so I'm thinking that might be the issue since I recently updated to a windows preview build. I'm gonna try reinstalling windows since I've been meaning to anyway.

Offline

#11 2020-05-02 04:15:34

Scimmia
Fellow
Registered: 2012-09-01
Posts: 13,729

Re: Pacman Invalid Signature or Corrupt Package

There's apparently an issue with VirtualBox on Win10 using HyperV that causes this. There was an earlier thread about it.

Edit: https://bbs.archlinux.org/viewtopic.php?id=253809

Last edited by Scimmia (2020-05-02 05:05:52)

Offline

Pages: 1

Board footer

Powered by FluxBB