Package signature error when running pacstrap

Scimmia · 2022-08-06 16:39:30

Well there are your errors, but I don't know what they mean. Invalid packet makes me think there might be corruption, did you verify the sig on the image?

FWIW, I just booted up the latest image in VirtualBox and pacman-init.service had no problems.

wopfel · 2022-08-06 17:08:37

Scimmia wrote:

Invalid packet makes me think there might be corruption, did you verify the sig on the image?

Thanks for your time. Much appreciated.

I've checked sha256 of the iso, which is correct. Output of gpg check seems good too.

% sha256sum archlinux-2022.08.05-x86_64.iso
187cf50f8f0619426e98835fdeaa4f3b3dd6a3471b2efc496f50d25ffe0e19db  archlinux-2022.08.05-x86_64.iso

% LANG=C gpg --keyserver-options auto-key-retrieve --verify archlinux-2022.08.05-x86_64.iso.sig
gpg: assuming signed data in 'archlinux-2022.08.05-x86_64.iso'
gpg: Signature made Fr 05 Aug 2022 13:13:05 CEST
gpg:                using RSA key 4AA4767BBC9C4B1D18AE28B77F2D434B9741E8AC
gpg:                issuer "pierre@archlinux.de"
gpg: Good signature from "Pierre Schmitz <pierre@archlinux.de>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 4AA4 767B BC9C 4B1D 18AE  28B7 7F2D 434B 9741 E8AC
LANG=C gpg --keyserver-options auto-key-retrieve --verify   6,46s user 0,22s system 99% cpu 6,702 total

Scimmia wrote:

FWIW, I just booted up the latest image in VirtualBox and pacman-init.service had no problems.

Interesting point. I've just booted the iso, waited a few minutes, and pacman-init.service shows "Finished Initializes Pacman keyring" without failures.

I take a deeper look just before I enter the pacstrap command and let you know.

nl6720 · 2022-08-07 08:54:37

This most likely happens because you ran pacstrap or pacman before pacman-init.service finished.

From a quick test in VirtualBox, looking at "CPU" in

systemctl status -l pacman-init.service

I got:

archlinux-2022.08.05-x86_64.iso	archlinux-keyring 20220727-1	1 min 27.085s
archlinux-2022.07.01-x86_64.iso	archlinux-keyring 20220424-1	42.540s
archlinux-2022.06.01-x86_64.iso	archlinux-keyring 20220424-1	41.926s

Manually upgrading only archlinux-keyring in an old ISO:

archlinux-2022.07.01-x86_64.iso	archlinux-keyring 20220727-1	1min 27.438s

With archlinux-keyring 20220727-1, pacman-init.service takes longer to finish.

Last edited by nl6720 (2022-08-08 04:57:09)

wopfel · 2022-08-07 12:28:25

nl6720 wrote:

This most likely happens because you ran pacstrap before pacman-init.service finished.

Yes! I can confirm this now. Waiting until pacman-init.service finishes before calling pacstrap is the solution which works for me.

Thank you very much @nl6720 and @Scimmia!

leomeinel · 2022-08-07 20:13:04

The error still persists on 2022.08.05!
Also pacman-init fails to start after using pacman/pacstrap.
As mentioned before, waiting for the service to be started manually works!
I can only guess, but this is probably a bug with the repos or the iso because doing pacman -Sy archlinux-keyring results in the same error.

https://gcdnb.pbrd.co/images/9HDKBvVoSQLn.png?o=1

moderator edit -- replaced oversized image with link.
Pasting pictures and code

Last edited by 2ManyDogs (2022-08-07 22:14:25)

nl6720 · 2022-08-08 05:03:56

leomeinel wrote:

doing pacman -Sy archlinux-keyring results in the same error.

That's because the archlinux-keyring package's install script executes pacman-key and interacts with the pacman's keyring. Doing it while pacman-init.service has not finished, screws it up.
Reinstalling the same version of archlinux-keyring will not help anyway. I've edited my previous posts to add the "--needed" option to the pacman command.

It's not really clear if it's a pacman-key (or gpg) issue of being slow or an archlinux-keyring issue of being too bloated.
At least for now, the solution is to not run pacstrap and/or pacman before pacman-init.service has finished.

annebright · 2022-08-12 23:51:49

The error is fixed by

pacman -Sy archlinux-keyring

as @daenney suggested. However, as partial upgrade is not recommended, will this command result in any problem? I haven't seen any problem so far.

I'll try newer installation iso later.

nl6720 · 2022-08-22 14:53:25

Just for reference, I opened https://gitlab.archlinux.org/archlinux/ … issues/191 to track the issue of pacman-init.service taking too long to finish.

ewaller · 2022-08-31 05:10:12

annebright wrote:

The error is fixed by
pacman -Sy archlinux-keyring
as @daenney suggested. However, as partial upgrade is not recommended, will this command result in any problem? I haven't seen any problem so far.
I'll try newer installation iso later.

No, but one should then run pacman -Su
This updates the keyring, then upgrades anything else that needs be upgraded.

Edit: Also, we have received a suggestion. This thread seems to be tracking two different issues. The suggestion is that we split the thread into two halves to track the problem with the iso, and the other an issue with a race condition with pacman-init.service. I've read the thread, and I am afraid it is so intertwined so make splitting unworkable. Sorry about that.

Last edited by ewaller (2022-08-31 05:17:25)

nl6720 · 2022-08-31 10:41:48

ewaller wrote:

one should then run pacman -Su

I advise against that. You'll just fill up the tmpfs and if there's a kernel upgrade, you won't be able to load new kernel modules.

ewaller · 2022-08-31 17:26:38

I am not sure I understand why? I am suggesting that as the next command after the pacman -Sy archlinx-keyring
Will those two commands, in that order, update the database, update archlinx-keyring (only), and then updates everything else that needed updating according to the new database -- but using the new keyring?

Or do have a fundamental flaw in my understanding of what is going on?

nl6720 · 2022-09-01 06:46:23

Because this is the live environment we're talking about. The root filesystem is a overlayfs mount with tmpfs as the upperdir. Installing things to the live environment is bound to fill up the tmpfs.

salman · 2022-09-01 12:58:36

I am having the same problem related to key. I am trying it in VM. Nothing seems to be working whatever mentioned here. Even when I do the system upgrade it throws error, saying there is no free space on the disk.

what I have tried so far:

pacman -Sy archlinux-keyring

pacman -Sy --needed archlinux-keyring

pacman-key --init

root@archiso - # archinstall
Testing connectivity to the Arch Linux mirrors ...
Updating archlinux-keyring ... 
Traceback (most recent call last): File "/usr/bin/archinstall", line 8, in <module> sys.exit(run_as_a_module()) 
File "/usr/lib/python3.10/site-packages/archinstall/ init .py", line 281, in run_as_a_module script.execute() 
File "/usr/lib/python3.10/site-packages/archinstall/lib/profiles.py", line 195, in execute self.spec.loader.exec_module(sys.modules[self.namespace1)
 File "<frozen importlib._bootstrap_external>", line 883, in exec_module File "<frozen importlib._bootstrap>", line 241, in _call_with_frames_remoued
 File "/usr/lib/python3.10/site-packages/archinstall/examples/guided.py", line 286, in <module> if not archinstall.update_keyring():
 File "/usr/lib/python3.10/site-packages/archinstall/lib/networking.py", line 46, in update_keyring if run_pacman("-Sy --noconfirm archlinux-keyring").exit_code == 0:
 File "/usr/lib/python3.10/site-packages/archinstall/lib/pacman.py", line 28, in run_pacman return SysCommand(rfdefault_cmda fargsr)
 File "/usr/lib/python3.10/site-packages/archinstall/lib/general.py", line 416, in _init_ self.create_session()
 File "/usr/lib/python3.10/site-packages/archinstall/lib/general.py", line 467, in create_session with SysCommandWorker( 
File "/usr/lib/python3.10/site-packages/archinstall/lib/general.py", line 273, in _exit_ raise SysCallError(rfself.cmda exited with abnormal exit code Ifself.exit_codefl: {self._trace log(-500:1)", self.exit_code) •rchinstall.lib.exceptions.SysCallError: II/usr/bin/pacmans, '-Sy', '--noconfirm', 'archlinux-keyrin 2'1 exited with abnormal exit code [2561: b' 1 0x\r(1/1) checking package integrity ItIMAt#################1 100"""nerror: archlinux-keyring: signature from "Christian Hesse <ewormAarchlinux.org>" is unknown trusts."n:: File /uar/cache/pacman/pkg/archlinux-keyring-20220831 1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).N"nDo you want to de lete it? [Yin] \r\nerror: failed to commit transaction (invalid or corrupted package (PGP signature) )Nr\nErrors occurred, no packages were upgradedAr\n\xlb[725h1 1

Sorry if it is not readable. I had to OCR it because I can't copy the terminal output from Vmware.

Here is the screenshot:

https://gcdnb.pbrd.co/images/9n8ALNfoFHoa.png?o=1

How to fix this ... thanks

Mod Edit - Replaced oversized image with link.
CoC - Pasting pictures and code

Last edited by Slithery (2022-09-01 13:13:05)

nl6720 · 2022-09-01 13:06:02

That's the aforementioned archiso#191 issue.
The solution is to wait until pacman-init.service finishes before running pacman, pacstrap or archinstall.

You can follow it with journalctl:

journalctl -u pacman-init.service -f

You can proceed once you see:

Finished Initializes Pacman keyring

salman · 2022-09-01 13:23:06

Okay thank you Wiki Admin. It is installing now

Arch Linux

#26 2022-08-06 16:39:30

Re: Package signature error when running pacstrap

#27 2022-08-06 17:08:37

Re: Package signature error when running pacstrap

#28 2022-08-07 08:54:37

Re: Package signature error when running pacstrap

#29 2022-08-07 12:28:25

Re: Package signature error when running pacstrap

#30 2022-08-07 20:13:04

Re: Package signature error when running pacstrap

#31 2022-08-08 05:03:56

Re: Package signature error when running pacstrap

#32 2022-08-12 23:51:49

Re: Package signature error when running pacstrap

#33 2022-08-22 14:53:25

Re: Package signature error when running pacstrap

#34 2022-08-31 05:10:12

Re: Package signature error when running pacstrap

#35 2022-08-31 10:41:48

Re: Package signature error when running pacstrap

#36 2022-08-31 17:26:38

Re: Package signature error when running pacstrap

#37 2022-09-01 06:46:23

Re: Package signature error when running pacstrap

#38 2022-09-01 12:58:36

Re: Package signature error when running pacstrap

#39 2022-09-01 13:06:02

Re: Package signature error when running pacstrap

#40 2022-09-01 13:23:06

Re: Package signature error when running pacstrap

Board footer