[SOLVED] .sig files are all html

ArnaudParan · 2021-10-16 10:06:45

Hello,

Since a few months, I noticed that when I try to install or upgrade things with pacman, I get

erreur : erreur GPGME : Pas de données
erreur : erreur GPGME : Pas de données
erreur : erreur GPGME : Pas de données
erreur : erreur GPGME : Pas de données
erreur : la base de données « core » n’est pas valide (base de données non valide ou corrompue (signature PGP))
erreur : la base de données « extra » n’est pas valide (base de données non valide ou corrompue (signature PGP))
erreur : la base de données « community » n’est pas valide (base de données non valide ou corrompue (signature PGP))
erreur : la base de données « multilib » n’est pas valide (base de données non valide ou corrompue (signature PGP))

french version of

error: GPGME error: No data
error: GPGME error: No data
error: GPGME error: No data
error: GPGME error: No data
error: failed to synchronize all databases (invalid or corrupted database (PGP signature))

and I have to remove the directory /var/lib/pacman/sync to be able to use pacman again for a few minutes or hours
before I can't use it anymore

I realized that the issue is the .sig files which are html

<html>
	<head>
		<title>Forbidden access</title>
	</head>
	<body style="text-align:center">
		<div style="width:80%; border:1px solid #64696C; color:#64696C; font-weight:bold; text-align:center; padding:20px; margin:auto; margin-top:20px">
			<p id="small_p" style="font-size:small;">Forbidden access</p>
			<p id="large_p" style="font-size:large;">Your current web browser cannot access this page.</p>
		</div>
	</body>
</html>

and when I delete only them, I can use pacman for a few minutes or hours

I tried to reorder my mirrors in case my mirror had gone bad but it changed nothing
I tried stuff like

# pacman-key --init
# pacman-key --populate archlinux

my current mirror is

http://archlinux.mailtunnel.eu/core/os/ … .files.sig

and my pacman.conf is

#
# /etc/pacman.conf
#
# See the pacman.conf(5) manpage for option and repository directives

#
# GENERAL OPTIONS
#
[options]
# The following paths are commented out with their default values listed.
# If you wish to use different paths, uncomment and update the paths.
#RootDir     = /
#DBPath      = /var/lib/pacman/
#CacheDir    = /var/cache/pacman/pkg/
#LogFile     = /var/log/pacman.log
#GPGDir      = /etc/pacman.d/gnupg/
#HookDir     = /etc/pacman.d/hooks/
HoldPkg     = pacman glibc
#XferCommand = /usr/bin/curl -L -C - -f -o %o %u
#XferCommand = /usr/bin/wget --passive-ftp -c -O %o %u
#CleanMethod = KeepInstalled
Architecture = auto

# Pacman won't upgrade packages listed in IgnorePkg and members of IgnoreGroup
#IgnorePkg   =
#IgnoreGroup =

#NoUpgrade   =
#NoExtract   =

# Misc options
#UseSyslog
#Color
#TotalDownload
CheckSpace
#VerbosePkgLists

# By default, pacman accepts packages signed by keys that its local keyring
# trusts (see pacman-key and its man page), as well as unsigned packages.
SigLevel    = Required DatabaseOptional
LocalFileSigLevel = Optional
#RemoteFileSigLevel = Required

# NOTE: You must run `pacman-key --init` before first using pacman; the local
# keyring can then be populated with the keys of all official Arch Linux
# packagers with `pacman-key --populate archlinux`.

#
# REPOSITORIES
#   - can be defined here or included from another file
#   - pacman will search repositories in the order defined here
#   - local/custom mirrors can be added here or in separate files
#   - repositories listed first will take precedence when packages
#     have identical names, regardless of version number
#   - URLs will have $repo replaced by the name of the current repo
#   - URLs will have $arch replaced by the name of the architecture
#
# Repository entries are of the format:
#       [repo-name]
#       Server = ServerName
#       Include = IncludePath
#
# The header [repo-name] is crucial - it must be present and
# uncommented to enable the repo.
#

# The testing repositories are disabled by default. To enable, uncomment the
# repo name header and Include lines. You can add preferred servers immediately
# after the header, and they will be used before the default mirrors.

#[testing]
#Include = /etc/pacman.d/mirrorlist

[core]
Include = /etc/pacman.d/mirrorlist

[extra]
Include = /etc/pacman.d/mirrorlist

#[community-testing]
#Include = /etc/pacman.d/mirrorlist

[community]
Include = /etc/pacman.d/mirrorlist

# If you want to run 32 bit applications on your x86_64 system,
# enable the multilib repositories as required here.

#[multilib-testing]
#Include = /etc/pacman.d/mirrorlist

[multilib]
Include = /etc/pacman.d/mirrorlist

# An example of a custom package repository.  See the pacman manpage for
# tips on creating your own repositories.
#[custom]
#SigLevel = Optional TrustAll
#Server = file:///home/custompkgs

and my archlinux-keyring is up to date

core/archlinux-keyring 20210902-1

there is no key server in my gpg.conf

no-greeting
no-permission-warning
lock-never
keyserver-options timeout=10
keyserver-options import-clean
keyserver-options no-self-sigs-only

In the documentation I did not find much help as https://wiki.archlinux.org/title/Pacman/Package_signing details package signin and not database
signing and https://bbs.archlinux.org/viewtopic.php?id=242258 is from 2018 and is not very helpful

Would any of you have an idea on how to solve that pretty annoying issue?

Last edited by ArnaudParan (2021-10-16 16:38:57)

Allan · 2021-10-16 10:20:58

Do you have an internet gateway you need to login to?

ArnaudParan · 2021-10-16 16:38:39

Owww that would make sense, I don't have one at home but I defo have one at my workplace and someone using manjaro there had the same issue as I had

I have a systemd timer which automatically installs updates like once an hour, that might be why it's picking up bad sig files randomly

Thanks, I will mark the thread solved

Arch Linux

#1 2021-10-16 10:06:45

[SOLVED] .sig files are all html

#2 2021-10-16 10:20:58

Re: [SOLVED] .sig files are all html

#3 2021-10-16 16:38:39

Re: [SOLVED] .sig files are all html

Board footer