You are not logged in.

Pages: 1

#1 2020-11-28 11:11:52

adch99
Member
Registered: 2020-11-28
Posts: 3

[Solved] Signature File Corrupt/Invalid In Pacman

The problem:

$ sudo pacman -Syu
[sudo] password for aditya: 
:: Synchronizing package databases...
 core is up to date
 extra is up to date
 community is up to date
:: Starting full system upgrade...
resolving dependencies...
looking for conflicting packages...

Packages (62) adobe-source-code-pro-fonts-2.032ro+1.052it+1.012var-1  alsa-card-profiles-14.0-1  bzip2-1.0.8-4  ca-certificates-mozilla-3.59-1  cmake-3.19.1-1
              conky-1.11.6-1  dhcpcd-9.3.3-1  firefox-83.0-2  gdk-pixbuf2-2.42.0-2  glibmm-2.64.4-1  gpgme-1.15.0-1  grep-3.6-1  hidapi-0.10.0-2  i3-gaps-4.19-1
              js78-78.5.0-2  libassuan-2.5.4-1  libcap-2.45-2  libcups-2.3.3+121+g63ffc5cd7-1  libdrm-2.4.103-2  libffi-3.3-4  libibus-1.5.23+1+gdd4cc5b0-1
              libjpeg-turbo-2.0.6-1  libmfx-20.3.1-1  libnftnl-1.1.8-1  libpulse-14.0-1  librsvg-2:2.50.2-1  libsigc++-2.10.6-1  libunistring-0.9.10-3  libx11-1.7.0-1
              libxkbcommon-1.0.3-1  libxkbcommon-x11-1.0.3-1  libxml2-2.9.10-6  libxnvctrl-455.45.01-1  linux-firmware-20201120.bc9cd0b-1  linux-lts-5.4.79-1
              linux-lts-headers-5.4.79-1  llvm-libs-11.0.0-1  mesa-20.2.3-1  nss-3.59-1  pam-1.5.0-1  perl-file-listing-6.11-1  perl-http-cookies-6.09-1  perl-uri-5.05-1
              pulseaudio-14.0-1  python-markdown-3.3.3-1  qt5-declarative-5.15.2-1  qt5-location-5.15.2-1  qt5-sensors-5.15.2-1  qt5-svg-5.15.2-1
              qt5-webchannel-5.15.2-1  qt5-webkit-5.212.0alpha4-8  qt5-xmlpatterns-5.15.2-1  rofi-1.6.1-1  util-linux-2.36.1-3  util-linux-libs-2.36.1-3  vim-8.2.1989-2
              vim-runtime-8.2.1989-2  webkit2gtk-2.30.3-1  xorg-server-1.20.9.r21.g5c400cae1-2  xorg-server-common-1.20.9.r21.g5c400cae1-2  xorg-xprop-1.2.5-1
              xterm-362-1

Total Installed Size:  1679.31 MiB
Net Upgrade Size:        42.89 MiB

:: Proceed with installation? [Y/n] y
(62/62) checking keys in keyring                                                                       [############################################################] 100%
(62/62) checking package integrity                                                                     [############################################################] 100%
error: libx11: signature from "Andreas Radke <andyrtr@archlinux.org>" is invalid
:: File /var/cache/pacman/pkg/libx11-1.7.0-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] n
error: libjpeg-turbo: signature from "David Runge <dvzrv@archlinux.org>" is invalid
:: File /var/cache/pacman/pkg/libjpeg-turbo-2.0.6-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] n
error: llvm-libs: signature from "Evangelos Foutras <evangelos@foutrelis.com>" is invalid
:: File /var/cache/pacman/pkg/llvm-libs-11.0.0-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] n
error: libcups: signature from "Andreas Radke <andyrtr@archlinux.org>" is invalid
:: File /var/cache/pacman/pkg/libcups-2.3.3+121+g63ffc5cd7-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] n
error: js78: signature from "Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>" is invalid
:: File /var/cache/pacman/pkg/js78-78.5.0-2-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] n
error: linux-firmware: signature from "Laurent Carlier <lordheavym@gmail.com>" is invalid
:: File /var/cache/pacman/pkg/linux-firmware-20201120.bc9cd0b-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] n
error: linux-lts: signature from "Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>" is invalid
:: File /var/cache/pacman/pkg/linux-lts-5.4.79-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] n
error: linux-lts-headers: signature from "Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>" is invalid
:: File /var/cache/pacman/pkg/linux-lts-headers-5.4.79-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] n
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.

What I have tried till now:

  • Replied 'yes' to the prompt for deleting the downloaded files. But redownloaded files still don't work. I have redownloaded several times (5-6 times) with different things done. Manually removing the package from /var/cache/pacman/pkg/ also doesn't work. Neither does cleaning the entire pacman cache with 

    paccache -r

    or 

    pacman -Sc

    . The error always hits after downloading, when package integrity is checked..

  • Syncing the time with the network with ntp. This is what the wiki suggests. The system time is completely fine though. I can see that directly too. Even tried doing 

    $ sudo hwclock --systohc

    But no use.

  • Redownloaded the mirrorlist via curl and shuffled/changed the mirrors around. No use still. I'm able to install and update archlinux-keyring but it doesn't help.

  • Tried refreshing the keys via 

    pacman-key --refresh

    Tried removing all keys 

    rm -rf /etc/pacman.d/gnupg

    followed by 

    pacman-key --init

    and 

    pacman-key --populate archlinux

    The output of the last one is interesting as there are some keys disabled but I don't know what to do about them.

Output:

$ sudo pacman-key --populate archlinux
==> Appending keys from archlinux.gpg...

==> Locally signing trusted keys in keyring...
  -> Locally signing key D8AFDDA07A5B6EDFA7D8CCDAD6D055F927843F1C...
  -> Locally signing key DDB867B92AA789C165EEFA799B729B06A680C281...
  -> Locally signing key 91FFE0700E80619CEB73235CA88E23E377514E00...
  -> Locally signing key 0E8B644079F599DFC1DDC3973348882F6AC6A4C2...
  -> Locally signing key AB19265E5D7D20687D303246BA1DFB64FFF979E7...
==> Importing owner trust values...
==> Disabling revoked keys in keyring...
  -> Disabling key 8F76BEEA0289F9E1D3E229C05F946DED983D4366...
  -> Disabling key 63F395DE2D6398BBE458F281F2DBB4931985A992...
  -> Disabling key 50F33E2E5B0C3D900424ABE89BDCF497A4BBCC7F...
  -> Disabling key 27FFC4769E19F096D41D9265A04F9397CDFD6BB0...
  -> Disabling key 39F880E50E49A4D11341E8F939E4F17F295AFBF4...
  -> Disabling key 8840BD07FC24CB7CE394A07CCF7037A4F27FB7DA...
  -> Disabling key 5559BC1A32B8F76B3FCCD9555FA5E5544F010D48...
  -> Disabling key 0B20CA1931F5DA3A70D0F8D2EA6836E1AB441196...
  -> Disabling key 07DFD3A0BC213FA12EDC217559B3122E2FA915EC...
  -> Disabling key 4FCF887689C41B09506BE8D5F3E1D5C5D30DB0AD...
  -> Disabling key 5A2257D19FF7E1E0E415968CE62F853100F0D0F0...
  -> Disabling key D921CABED130A5690EF1896E81AF739EC0711BF1...
  -> Disabling key 7FA647CD89891DEDC060287BB9113D1ED21E1A55...
  -> Disabling key BC1FBE4D2826A0B51E47ED62E2539214C6C11350...
  -> Disabling key 4A8B17E20B88ACA61860009B5CED81B7C2E5C0D2...
  -> Disabling key 5696C003B0854206450C8E5BE613C09CB4440678...
  -> Disabling key 684148BB25B49E986A4944C55184252D824B18E8...
  -> Disabling key 8CF934E339CAD8ABF342E822E711306E3C4F88BC...
  -> Disabling key F5A361A3A13554B85E57DDDAAF7EF7873CFD4BB6...
  -> Disabling key 5E7585ADFF106BFFBBA319DC654B877A0864983E...
  -> Disabling key 65EEFE022108E2B708CBFCF7F9E712E59AF5F22A...
  -> Disabling key 40440DC037C05620984379A6761FAD69BA06C6A9...
  -> Disabling key 34C5D94FE7E7913E86DC427E7FB1A3800C84C0A5...
  -> Disabling key 1A60DC44245D06FEF90623D6EEEEE2EEEE2EEEEE...
  -> Disabling key 81D7F8241DB38BC759C80FCE3A726C6170E80477...
  -> Disabling key E7210A59715F6940CF9A4E36A001876699AD6E84...
  -> Disabling key 5357F3B111688D88C1D88119FCF2CB179205AC90...
  -> Disabling key 4D913AECD81726D9A6C74F0ADA6426DD215B37AD...
  -> Disabling key FB871F0131FEA4FB5A9192B4C8880A6406361833...
  -> Disabling key 66BD74A036D522F51DD70A3C7F2A16726521E06D...
  -> Disabling key 487EACC08557AD082088DABA1EB2638FF56C0C53...
  -> Disabling key B1F2C889CB2CCB2ADA36D963097D629E437520BD...
  -> Disabling key 9515D8A8EAB88E49BB65EDBCE6B456CAF15447D5...
  -> Disabling key 76B4192E902C0A52642C63C273B8ED52F1D357C1...
  -> Disabling key 40776A5221EF5AD468A4906D42A1DB15EC133BAD...
  -> Disabling key D4DE5ABDE2A7287644EAC7E36D1A9E70E19DAA50...
  -> Disabling key 44D4A033AC140143927397D47EFD567D4C7EA887...
==> Updating trust database...
gpg: next trustdb check due at 2021-01-01

Here is output of 

pacman-key --list-sigs Master

There are some revoked keys and suspicious revokation comments.

$ sudo pacman-key --list-sigs Master
pub   rsa4096 2020-11-28 [SC]
      FD28A3574752AAD612BA224851C88016ABAD60CA
uid           [ultimate] Pacman Keyring Master Key <pacman@localhost>
sig 3        51C88016ABAD60CA 2020-11-28  Pacman Keyring Master Key <pacman@localhost>

pub   rsa4096 2011-11-29 [SC]
      AB19265E5D7D20687D303246BA1DFB64FFF979E7
uid           [  full  ] Allan McRae (Arch Linux Master Key) <allan@master-key.archlinux.org>
sig 3        BA1DFB64FFF979E7 2011-11-29  Allan McRae (Arch Linux Master Key) <allan@master-key.archlinux.org>
sig          F99FFE0FEAE999BD 2011-11-30  Allan McRae <me@allanmcrae.com>
sig          06096A6AD1CEDDAC 2011-11-30  Laurent Carlier <lordheavym@gmail.com>
sig   L      51C88016ABAD60CA 2020-11-28  Pacman Keyring Master Key <pacman@localhost>

pub   rsa4096 2018-11-08 [SC]
      D8AFDDA07A5B6EDFA7D8CCDAD6D055F927843F1C
uid           [  full  ] Levente Polyak (Arch Linux Master Key) <anthraxx@master-key.archlinux.org>
sig 3        D6D055F927843F1C 2018-11-08  Levente Polyak (Arch Linux Master Key) <anthraxx@master-key.archlinux.org>
sig          39E4B877E62EB915 2018-12-28  Sven-Hendrik Haase <svenstaro@gmail.com>
sig          FC1B547C8D8172C8 2018-11-12  Levente Polyak (anthraxx) <levente@leventepolyak.net>
sig   L      51C88016ABAD60CA 2020-11-28  Pacman Keyring Master Key <pacman@localhost>
sub   rsa4096 2018-11-08 [E]
sig          D6D055F927843F1C 2018-11-08  Levente Polyak (Arch Linux Master Key) <anthraxx@master-key.archlinux.org>
sub   rsa4096 2018-11-08 [A]
sig          D6D055F927843F1C 2018-11-08  Levente Polyak (Arch Linux Master Key) <anthraxx@master-key.archlinux.org>

pub   rsa4096 2017-05-15 [SC]
      DDB867B92AA789C165EEFA799B729B06A680C281
uid           [  full  ] Bartłomiej Piotrowski (Arch Linux Master Key) <bpiotrowski@master-key.archlinux.org>
sig 3        9B729B06A680C281 2017-05-15  Bartłomiej Piotrowski (Arch Linux Master Key) <bpiotrowski@master-key.archlinux.org>
sig          BBE43771487328A9 2017-05-15  Bartlomiej Piotrowski <b@bpiotrowski.pl>
sig   L      51C88016ABAD60CA 2020-11-28  Pacman Keyring Master Key <pacman@localhost>
sub   rsa4096 2017-05-15 [E]
sig          9B729B06A680C281 2017-05-15  Bartłomiej Piotrowski (Arch Linux Master Key) <bpiotrowski@master-key.archlinux.org>

pub   rsa4096 2015-12-17 [SC]
      91FFE0700E80619CEB73235CA88E23E377514E00
uid           [  full  ] Florian Pritz (Arch Linux Master Key) <florian@master-key.archlinux.org>
sig 3        A88E23E377514E00 2015-12-17  Florian Pritz (Arch Linux Master Key) <florian@master-key.archlinux.org>
sig          6D1655C14CE1C13E 2015-12-17  Florian Pritz <bluewind@xinu.at>
sig   L      51C88016ABAD60CA 2020-11-28  Pacman Keyring Master Key <pacman@localhost>
sub   rsa4096 2015-12-17 [E]
sig          A88E23E377514E00 2015-12-17  Florian Pritz (Arch Linux Master Key) <florian@master-key.archlinux.org>

pub   rsa3072 2011-11-18 [SC]
      0E8B644079F599DFC1DDC3973348882F6AC6A4C2
uid           [  full  ] Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>
sig 3        3348882F6AC6A4C2 2011-11-18  Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>
sig          7F2D434B9741E8AC 2011-11-18  Pierre Schmitz <pierre@archlinux.de>
sig   L      51C88016ABAD60CA 2020-11-28  Pacman Keyring Master Key <pacman@localhost>
sub   rsa1024 2011-11-18 [E]
sig          3348882F6AC6A4C2 2011-11-18  Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>
sub   rsa3072 2011-11-18 [A]
sig          3348882F6AC6A4C2 2011-11-18  Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>

pub   rsa3072 2011-11-29 [SC] [revoked: 2011-11-29]
      27FFC4769E19F096D41D9265A04F9397CDFD6BB0
rev          A04F9397CDFD6BB0 2011-11-29  Dan McGee (Arch Linux Master Key) <dan@master-key.archlinux.org>
      reason for revocation: No reason specified
         revocation comment: Revocation certificate held by another developer
uid           [ revoked] Dan McGee (Arch Linux Master Key) <dan@master-key.archlinux.org>
sig 3        A04F9397CDFD6BB0 2011-11-29  Dan McGee (Arch Linux Master Key) <dan@master-key.archlinux.org>
sig          5C2E46A0F53A76ED 2011-11-29  Dan McGee <dpmcgee@gmail.com>
sig          06096A6AD1CEDDAC 2011-11-30  Laurent Carlier <lordheavym@gmail.com>

pub   rsa3072 2011-11-25 [SC] [revoked: 2011-11-25]
      44D4A033AC140143927397D47EFD567D4C7EA887
rev          7EFD567D4C7EA887 2011-11-25  Ionut Biru (Arch Linux Master Key) <ionut@master-key.archlinux.org>
      reason for revocation: No reason specified
         revocation comment: Something bad happened
uid           [ revoked] Ionut Biru (Arch Linux Master Key) <ionut@master-key.archlinux.org>
sig 3        7EFD567D4C7EA887 2011-11-25  Ionut Biru (Arch Linux Master Key) <ionut@master-key.archlinux.org>
sig          E8F18BA1615137BC 2011-11-25  Ionut Biru <ibiru@archlinux.org>

pub   rsa3072 2011-11-19 [SC] [revoked: 2011-11-20]
      684148BB25B49E986A4944C55184252D824B18E8
rev          5184252D824B18E8 2011-11-20  Thomas Bächler (Arch Linux Master Key) <thomas@master-key.archlinux.org>
      reason for revocation: No reason specified
         revocation comment: Master Key revoked by Revocation Certificate holder Tobias Powalowski.
uid           [ revoked] Thomas Bächler (Arch Linux Master Key) <thomas@master-key.archlinux.org>
sig 3        5184252D824B18E8 2011-11-19  Thomas Bächler (Arch Linux Master Key) <thomas@master-key.archlinux.org>
sig          284FC34C8E4B1A25 2011-11-19  Thomas Bächler <thomas@bchlr.de>

So I am stuck. I should mention I'm on virtualbox, though I don't think that's relevant for this. I don't understand keys well enough though. Please help!

Last edited by adch99 (2020-12-20 15:58:13)

Offline

#2 2020-11-28 14:21:17

Scimmia
Fellow
Registered: 2012-09-01
Posts: 11,550

Re: [Solved] Signature File Corrupt/Invalid In Pacman

VirtualBox on Windows? Yes, it is relevant, as it's been a consistent problem since VB introduced their Hyper-V backend. There are people that have reported it being fixed in the latest version, what version are you on?

Offline

#3 2020-11-28 14:46:40

adch99
Member
Registered: 2020-11-28
Posts: 3

Re: [Solved] Signature File Corrupt/Invalid In Pacman

Okay, it's Virtualbox version 6.1.14 r140239 (Qt5.6.2) on a Windows Host. This system was running fine till a week ago though and I haven't updated Virtualbox, though v6.1.16 is out I believe.

Last edited by adch99 (2020-11-28 14:47:27)

Offline

#4 2020-12-20 15:57:41

adch99
Member
Registered: 2020-11-28
Posts: 3

Re: [Solved] Signature File Corrupt/Invalid In Pacman

Updating Virtualbox to version v6.1.16 solved the issue. Marking this as solved.

Offline

Pages: 1

Board footer

Powered by FluxBB