You are not logged in.

#1 2022-09-27 17:37:16

dufresnep
Member
Registered: 2008-02-03
Posts: 14

signature from "David Runge <dvzrv@archlinux.org>" is marginal trust

Had not upgraded Arch for ... maybe 3 weeks.
Had accepted the "downloaded" key on previous attempt.
Not using much Arch... this is a side hard disk for me.

[root@betakard paul]# pacman -Syyu
:: Synchronizing package databases...
 core                  154.9 KiB   500 KiB/s 00:00 [######################] 100%
 extra                1712.2 KiB  1952 KiB/s 00:01 [######################] 100%
 community               7.0 MiB  2021 KiB/s 00:04 [######################] 100%
:: Starting full system upgrade...
:: Replace at-spi2-atk with extra/at-spi2-core? [Y/n]
:: Replace atk with extra/at-spi2-core? [Y/n]
resolving dependencies...
looking for conflicting packages...
warning: dependency cycle detected:
warning: libglvnd will be installed before its mesa dependency

Packages (235) acpid-2.0.34-1  alsa-card-profiles-1:0.3.58-1
               alsa-lib-1.2.7.2-1  alsa-ucm-conf-1.2.7.2-1  aom-3.5.0-1
               appstream-glib-0.8.1-1  archlinux-appstream-data-20220830-1
               archlinux-keyring-20220831-1  at-spi2-atk-2.38.0-1 [removal]
               at-spi2-core-2.46.0-2  atk-2.38.0-1 [removal]  base-3-1
               binutils-2.39-3  bluez-5.65-3  bluez-libs-5.65-3
               btrfs-progs-5.19.1-1  ca-certificates-20220905-1
               ca-certificates-mozilla-3.83-1  ca-certificates-utils-20220905-1
               clang-14.0.6-2  clang13-13.0.1-3  compiler-rt-14.0.6-1
               cryptsetup-2.5.0-1  curl-7.85.0-2  cython-0.29.32-2
               device-mapper-2.03.16-2  duktape-2.7.0-4  efibootmgr-18-1
               efl-1.26.3-1  ell-0.53-1  emacs-28.2-1  enlightenment-0.25.4-1
               ffmpeg-2:5.1.2-1  file-5.43-1  firefox-105.0.1-1  flac-1.4.1-1
               gawk-5.2.0-3  gc-8.2.2-1  gcab-1.5-1  gcc-12.2.0-1
               gcc-libs-12.2.0-1  gcr-3.41.1-2  gdk-pixbuf2-2.42.9-1
               ghostscript-10.0.0-1  git-2.37.3-1  glib-networking-1:2.74.0-1
               glib2-2.74.0-2  glib2-docs-2.74.0-2  glibc-2.36-4
               gnupg-2.2.39-1  gnutls-3.7.7-3  gobject-introspection-1.74.0-1
               gobject-introspection-runtime-1.74.0-1  gpgme-1.18.0-1
               graphviz-5.0.1-3  grep-3.8-2  gsm-1.0.22-1
               gst-plugin-pipewire-1:0.3.58-1  gst-plugins-base-libs-1.20.3-2
               gstreamer-1.20.3-2  gtk-update-icon-cache-1:4.8.1-1
               gtk3-1:3.24.34+r156+g812b3930d0-1  harfbuzz-5.2.0-1
               hwdata-0.362-2  iana-etc-20220915-1  intel-gmmlib-22.1.4-2
               intel-media-driver-22.4.4-2  intel-ucode-20220809-1
               iproute2-5.19.0-1  iptables-1:1.8.8-2  iso-codes-4.11.0-2
               iwd-1.30-1  jasper-3.0.6-1  kmod-30-1  lame-3.100-4
               ldns-1.8.3-1  less-1:608-1  libarchive-3.6.1-2
               libblockdev-2.28-1  libbluray-1.3.3-1  libbpf-0.8.1-1
               libbs2b-3.1.0-8  libcap-2.66-1  libdrm-2.4.113-2  libelf-0.187-2
               libevdev-1.13.0-1  libevent-2.1.12-2  libfontenc-1.1.6-1
               libglvnd-1.5.0-1  libhandy-1.8.0-1  libheif-1.13.0-2
               libidn2-2.3.3-1  libinih-56-1  libisl-0.25-1
               libjpeg-turbo-2.1.4-2  libldap-2.6.3-1  libmfx-22.4.4-1
               libmm-glib-1.18.12-1  libnftnl-1.2.3-1  libnghttp2-1.50.0-1
               libnl-3.7.0-1  libnm-1.40.0-1  libnma-1.10.2-1
               libnma-common-1.10.2-1  libnotify-0.8.1-1  libpciaccess-0.16-4
               libpng-1.6.38-1  librsvg-2:2.54.5-1  libsndfile-1.1.0-3
               libsoup3-3.2.0-1  libspectre-0.2.10-2  libssh-0.10.4-1
               libsysprof-capture-3.44.0-2  libtasn1-4.19.0-1  libtiff-4.4.0-4
               libtirpc-1.3.3-1  libtool-2.4.7-5  liburcu-0.13.2-1
               libva-2.15.0-7  libva-mesa-driver-22.1.7-1  libvpx-1.12.0-1
               libwacom-2.4.0-1  libwebp-1.2.4-1  libx11-1.8.1-3
               libxau-1.0.10-1  libxcvt-0.1.2-1  libxfont2-2.0.6-1
               libxft-2.3.6-1  libxml2-2.10.2-2  libxslt-1.1.37-2
               lightdm-1:1.32.0-4  lightdm-gtk-greeter-1:2.0.8-3
               lilv-0.24.20-1  linux-5.19.11.arch1-1
               linux-api-headers-5.18.15-1  linux-firmware-20220913.f09bebf-1
               linux-firmware-whence-20220913.f09bebf-1  lld-14.0.6-1
               llvm-libs-14.0.6-3  llvm13-libs-13.0.1-3  lua-5.4.4-2
               lv2-1.18.10-1  lvm2-2.03.16-2  lz4-1:1.9.4-1  mesa-22.1.7-1
               meson-0.63.2-1  mkinitcpio-31-3
               mobile-broadband-provider-info-20220725-1  mpfr-4.1.0.p13-3
               nano-6.4-1  ndctl-74-1  netpbm-10.73.37-2  nettle-3.8.1-1
               networkmanager-1.40.0-1  ninja-1.11.1-1  nspr-4.35-1  nss-3.83-1
               ocl-icd-2.3.1-1  opencore-amr-0.1.6-1  openssl-1.1.1.q-1
               pacman-6.0.1-8  pacman-mirrorlist-20220828-1  pango-1:1.50.10-1
               pcre-8.45-3  pcre2-10.40-3  pipewire-1:0.3.58-1
               pipewire-alsa-1:0.3.58-1  pipewire-jack-1:0.3.58-1
               pipewire-pulse-1:0.3.58-1  polkit-121-1  poppler-22.09.0-1
               python-3.10.7-1  python-appdirs-1.4.4-7
               python-autocommand-2.2.1-1  python-importlib-metadata-4.9.0-1
               python-inflect-6.0.0-1  python-jaraco.context-4.1.2-1
               python-jaraco.functools-3.5.2-1  python-jaraco.text-3.9.1-1
               python-lxml-4.9.1-1  python-mako-1.2.3-1
               python-markdown-3.4.1-1  python-more-itertools-8.13.0-2
               python-nspektr-0.4.0-2  python-ordered-set-4.1.0-1
               python-pydantic-1.10.2-1  python-pygments-2.13.0-1
               python-setuptools-1:62.3.4-1  python-six-1.16.0-6
               python-trove-classifiers-2022.9.26-1
               python-typing_extensions-4.3.0-1
               python-validate-pyproject-0.10.1-1  python-zipp-3.8.1-1
               rav1e-0.5.1-2  sbc-2.0-1  sdl2-2.24.0-2  serd-0.30.16-1
               shared-mime-info-2.0+155+gf4e7cbc-1  slang-2.3.3-1
               sord-0.16.14-1  sqlite-3.39.3-1  sratom-0.6.14-1  srt-1.5.1-1
               svt-av1-1.2.1-1  systemd-251.4-1  systemd-libs-251.4-1
               systemd-sysvcompat-251.4-1  tracker3-3.4.0-1  tzdata-2022d-1
               util-linux-2.38.1-1  util-linux-libs-2.38.1-1  vala-0.56.3-1
               vim-9.0.0354-1  vim-runtime-9.0.0354-1
               vulkan-icd-loader-1.3.226-1  vulkan-intel-22.1.7-1
               vulkan-radeon-22.1.7-1  wayland-1.21.0-1
               wayland-protocols-1.26-1  wireplumber-0.4.11-4
               wpa_supplicant-2:2.10-5  x264-3:0.164.r3095.baee400-4
               xdg-utils-1.1.3+21+g1a58bc2-2
               xf86-video-ati-1:19.1.0.r15.g7a6a34af-1
               xf86-video-vmware-13.3.0-4  xfsprogs-5.19.0-1
               xkeyboard-config-2.36+89+g382c5feb-1
               xorg-fonts-encodings-1.0.6-1  xorg-server-21.1.4-1
               xorg-server-common-21.1.4-1  xorg-xmodmap-1.0.11-1
               xorg-xwayland-22.1.3-1  xorgproto-2022.2-1  xz-5.2.6-1
               zig-0.9.1-2

Total Installed Size:  3220.38 MiB
Net Upgrade Size:       242.07 MiB

:: Proceed with installation? [Y/n]
(233/233) checking keys in keyring                 [######################] 100%
(233/233) checking package integrity               [######################] 100%
error: libcap: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/libcap-2.66-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: libtiff: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/libtiff-4.4.0-4-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: gnupg: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/gnupg-2.2.39-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: serd: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/serd-0.30.16-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: sord: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/sord-0.16.14-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: lv2: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/lv2-1.18.10-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: sratom: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/sratom-0.6.14-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: lilv: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/lilv-0.24.20-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: lame: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/lame-3.100-4-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: opencore-amr: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/opencore-amr-0.1.6-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: python-pydantic: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/python-pydantic-1.10.2-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: python-inflect: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/python-inflect-6.0.0-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: python-jaraco.text: signature from "Chih-Hsuan Yen <yan12125@gmail.com>" is unknown trust
:: File /var/cache/pacman/pkg/python-jaraco.text-3.9.1-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.
[root@betakard paul]#

Last edited by dufresnep (2022-09-27 17:47:21)

Offline

#2 2022-09-27 17:41:51

jasonwryan
Anarchist
From: .nz
Registered: 2009-05-09
Posts: 30,424
Website

Re: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust

1. Edit your post and wrap pasted output in code tags.

2. Stop using -Syyu

3. Search before posting https://wiki.archlinux.org/title/Pacman … _regularly


Arch + dwm   •   Mercurial repos  •   Surfraw

Registered Linux User #482438

Offline

#3 2022-09-27 17:45:02

dufresnep
Member
Registered: 2008-02-03
Posts: 14

Re: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust

I think it is fixed by: https://wiki.archlinux.org/title/Pacman … _regularly
(package installing right now)

Offline

#4 2022-09-27 17:52:57

dufresnep
Member
Registered: 2008-02-03
Posts: 14

Re: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust

jasonwryan wrote:

2. Stop using -Syyu

You mean I should use "pacman -Syu" not "pacman -Syyu"?

Offline

#5 2022-09-27 17:55:48

jasonwryan
Anarchist
From: .nz
Registered: 2009-05-09
Posts: 30,424
Website

Re: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust

dufresnep wrote:
jasonwryan wrote:

2. Stop using -Syyu

You mean I should use "pacman -Syu" not "pacman -Syyu"?

Read the man page. Passing a second 'y' does not mean "harder"...


Arch + dwm   •   Mercurial repos  •   Surfraw

Registered Linux User #482438

Offline

#6 2022-09-27 18:12:18

dufresnep
Member
Registered: 2008-02-03
Posts: 14

Re: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust

To be honest... I had a bit forgotten the exact meaning of -Syyu rather than -Syu... but the man page say:

Passing two --refresh or -y flags will force a refresh of all package databases, even if they appear to be up-to-date.

. (taken from https://archlinux.org/pacman/pacman.8.html )
Which seems reasonable to do in this situation.

Offline

#7 2022-09-27 19:09:07

schard
Member
From: Hannover
Registered: 2016-05-06
Posts: 1,932
Website

Re: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust

# systemctl enable --now archlinux-keyring-wkd-sync.timer

Offline

#8 2022-09-27 19:38:59

seth
Member
Registered: 2012-09-03
Posts: 49,992

Re: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust

Which seems reasonable to do in this situation.

No.
It is reasonable if you need to deal w/ a broken mirror (or maybe connection) screwing your database - not when your keyring ran out of date.
On the contrary this actually opens you to corrupt the local database (and puts extra burden on the servers)

The rule of thumb is that whenever you're not sure that you really want to use "yy" or "uu", you don't.

Online

#9 2022-10-02 12:16:21

artesano
Member
Registered: 2018-03-02
Posts: 10

Re: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust

schard wrote:
# systemctl enable --now archlinux-keyring-wkd-sync.timer

Using untrusted autotools in war times? I wouldn't do it... big_smile

Offline

#10 2022-10-02 14:43:54

dakota
Member
Registered: 2016-05-20
Posts: 273

Re: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust

artesano wrote:
schard wrote:
# systemctl enable --now archlinux-keyring-wkd-sync.timer

Using untrusted autotools in war times? I wouldn't do it... big_smile

Er... it's not something that's secret. You can look at the code yourself and decide if you want to run it.

systemd timer
script

Last edited by dakota (2022-10-02 14:45:04)


"Before Enlightenment chop wood, carry water. After Enlightenment chop wood, carry water." -- Zen proverb

Offline

#11 2022-10-02 15:17:49

nl6720
The Evil Wiki Admin
Registered: 2016-07-02
Posts: 592

Re: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust

The timer is enabled by default (via /usr/lib/systemd/system/timers.target.wants/archlinux-keyring-wkd-sync.timer), so enabling it again will not do anything.

Offline

#12 2022-10-05 03:04:32

schard
Member
From: Hannover
Registered: 2016-05-06
Posts: 1,932
Website

Re: signature from "David Runge <dvzrv@archlinux.org>" is marginal trust

Indeed. I got fooled by the output of systemctl, which did neither show it as preset, not as static.
I wonder why it's got an Install section, if it's intended to be static.
Either let the user decide whether to activate it, or don't.

Last edited by schard (2022-10-05 03:07:57)

Offline

Board footer

Powered by FluxBB