You are not logged in.

Pages: 1

#1 2024-01-16 10:55:34

misterjerry
Member
Registered: 2024-01-16
Posts: 3

[SOLVED] Cannot update - Marginal trust and cycle dependency

I struggle with updating packages. There are three things wrong with the output below

1) warning that there is a cycle dependency
2) marginal trust signature
3) failure due to invalid/corrupted package


I didn't know where to start so I googled this thread this thread about marginal trust which was pretty confusing. It starts with marginal trust issue, continues with downgrading gnupg and goes back to keys with repopulating keys.

I didn't know if it is the same problem and I found a this cycle dependency thred that discusses the problem of the exact packages of the person who asked ( which are different to mine so I didn't really learn anythin)

The last thing I did before going here was following this thread about corrupted packages. I removed all keys related to the problematic author and repopulated them ... to no avail.

Code that I ran.

pacman-key --list-sigs Master # output not available now
sudo pacman-key --delete AB19265E5D7D20687D303246BA1DFB64FFF979E7
sudo pacman-key --delete 27FFC4769E19F096D41D9265A04F9397CDFD6BB0
sudo pacman-key --populate archlinux
sudo pacman-key --refresh-keys

The package upgrade code:

Command:

sudo pacman -Syu

Output:

:: Synchronizing package databases...
 core is up to date
 extra is up to date
 community is up to date
 multilib is up to date
:: Starting full system upgrade...
:: Replace onevpl with extra/libvpl? [Y/n] Y
resolving dependencies...
:: There are 2 providers available for dbus-units:
:: Repository core
   1) dbus-broker-units  2) dbus-daemon-units

Enter a number (default=1): 
looking for conflicting packages...
warning: dependency cycle detected:
warning: mesa will be installed before its libglvnd dependency
warning: dependency cycle detected:
warning: lib32-mesa will be installed before its lib32-libglvnd dependency

Packages (542) adwaita-cursors-45.0-1  adwaita-icon-theme-45.0-1  alsa-card-profiles-1:1.0.1-1  aom-3.8.0-2  appstream-1.0.1-2  archlinux-keyring-20231222-1  asciidoc-10.2.0-4  at-spi2-core-2.50.1-1
               autoconf-2.72-1  avahi-1:0.8+r194+g3f79789-1  base-3-2  bash-5.2.021-1  bat-0.24.0-1  blas-3.12.0-3  bluez-libs-5.72-2  botan-3.2.0-1  btrfs-progs-6.6.3-1  c-ares-1.25.0-1
 [...]
ommited 
[...]
               xterm-389-1  xxhash-0.8.2-1  xz-5.4.5-1  yarn-1.22.21-1  zenity-4.0.1-1  zip-3.0-11  zix-0.4.2-2  zlib-1:1.3-2  zxing-cpp-2.2.1-1

Total Download Size:   1225.68 MiB
Total Installed Size:  4535.74 MiB
Net Upgrade Size:       111.17 MiB

:: Proceed with installation? [Y/n] Y
:: Retrieving packages...
 linux-firmware-20231211.f2e52a1c-1-any                                                             204.5 MiB  26.4 MiB/s 00:08 [#############################################################################] 100%
 linux-6.7.arch3-1-x86_64                                                                           130.5 MiB  32.0 MiB/s 00:04 [#############################################################################] 100%
[...]
ommited 
[...]
 base-3-2-any                                                                                         2.3 KiB  96.1 KiB/s 00:00 [#############################################################################] 100%
 Total (541/541)                                                                                   1225.7 MiB  19.1 MiB/s 01:04 [#############################################################################] 100%
(541/541) checking keys in keyring                                                                                              [#############################################################################] 100%
(541/541) checking package integrity                                                                                            [#############################################################################] 100%
error: libx11: signature from "Laurent Carlier <lordheavym@gmail.com>" is marginal trust
:: File /var/cache/pacman/pkg/libx11-1.8.7-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] Y
error: libxpm: signature from "Laurent Carlier <lordheavym@gmail.com>" is marginal trust
:: File /var/cache/pacman/pkg/libxpm-3.5.17-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] Y
error: vulkan-icd-loader: signature from "Laurent Carlier <lordheavym@gmail.com>" is marginal trust
:: File /var/cache/pacman/pkg/vulkan-icd-loader-1.3.274-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] Y
error: lib32-amdvlk: signature from "Laurent Carlier <lordheavym@gmail.com>" is marginal trust
:: File /var/cache/pacman/pkg/lib32-amdvlk-2023.Q4.3-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] Y
error: lib32-vulkan-icd-loader: signature from "Laurent Carlier <lordheavym@gmail.com>" is marginal trust
:: File /var/cache/pacman/pkg/lib32-vulkan-icd-loader-1.3.274-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] Y
error: lib32-libx11: signature from "Laurent Carlier <lordheavym@gmail.com>" is marginal trust
:: File /var/cache/pacman/pkg/lib32-libx11-1.8.7-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] Y
error: lib32-sqlite: signature from "Laurent Carlier <lordheavym@gmail.com>" is marginal trust
:: File /var/cache/pacman/pkg/lib32-sqlite-3.44.2-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] Y
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.

1) What can I do update my system
2) What was I supposed to know/look for to solve this issue myself?

PS: I don't update often, usually when something stops working. Now, it's openvpn3 that doesn't work properly, which is discussed here

Thank you.


UPDATE:

After I restarted my PC and ran 

pacmand -Syu

again. It asked whether I want to update the key but it didn't work anyway:

...ommited - same as previous
(542/542) checking keys in keyring                                                                                              [#...#] 100%
downloading required keys...
:: Import PGP key 06096A6AD1CEDDAC, "Laurent Carlier <lordheavym@archlinux.org>"? [Y/n] Y
(542/542) checking package integrity                                   
... ommited save as previous
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.

Last edited by misterjerry (2024-01-16 12:30:32)

Offline

#2 2024-01-16 11:12:11

Lone_Wolf
Forum Moderator
From: Netherlands, Europe
Registered: 2005-10-04
Posts: 12,020

Re: [SOLVED] Cannot update - Marginal trust and cycle dependency

warning: dependency cycle detected:

These warnings are correct from a technical point of view, but only cause issues at buildtime.
Normal users can ignore them.


pacman-key --list-sigs Master # output not available now

That looks to me like the critical problem on your system.

What is the output of that command ?

Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.


(A works at time B)  && (time C > time B ) ≠  (A works at time C)

Offline

#3 2024-01-16 11:53:31

misterjerry
Member
Registered: 2024-01-16
Posts: 3

Re: [SOLVED] Cannot update - Marginal trust and cycle dependency

Command:

sudo pacman-key --list-sigs Master

The output:

pub   rsa4096 2023-02-28 [SC]
      FCEA119CC616EB68CB49F59FFC29546156BEF65D
uid           [ultimate] Pacman Keyring Master Key <pacman@localhost>
sig 3        FC29546156BEF65D 2023-02-28  Pacman Keyring Master Key <pacman@localhost>

pub   rsa3072 2011-11-18 [SC] [revoked: 2018-10-07]
      0E8B644079F599DFC1DDC3973348882F6AC6A4C2
rev          3348882F6AC6A4C2 2018-10-07  Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>
      reason for revocation: No reason specified
uid           [ revoked] Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>
sig 3        3348882F6AC6A4C2 2020-11-21  Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>
sig          7F2D434B9741E8AC 2011-11-18  Pierre Schmitz <pierre@archlinux.de>

pub   rsa4096 2022-02-13 [SC] [revoked: 2022-02-13]
      159F3A43AEB246C5746C033814BC4F30B3B92EBA
rev          14BC4F30B3B92EBA 2022-02-13  Giancarlo Razzolini (Arch Linux Master Key) <grazzolini@master-key.archlinux.org>
      reason for revocation: No reason specified
uid           [ revoked] Giancarlo Razzolini (Arch Linux Master Key) <grazzolini@master-key.archlinux.org>
sig 3        14BC4F30B3B92EBA 2022-02-13  Giancarlo Razzolini (Arch Linux Master Key) <grazzolini@master-key.archlinux.org>

pub   ed25519 2021-04-26 [SC]
      2AC0A42EFB0B5CBC7A0402ED4DC95B6D7BE9892E
uid           [  full  ] David Runge (Arch Linux Master Key) <dvzrv@master-key.archlinux.org>
sig 3        4DC95B6D7BE9892E 2021-04-26  David Runge (Arch Linux Master Key) <dvzrv@master-key.archlinux.org>
sig   L      FC29546156BEF65D 2023-02-28  Pacman Keyring Master Key <pacman@localhost>
sub   cv25519 2021-04-26 [E]
sig          4DC95B6D7BE9892E 2021-04-26  David Runge (Arch Linux Master Key) <dvzrv@master-key.archlinux.org>

pub   rsa3072 2011-11-25 [SC] [revoked: 2011-11-25]
      44D4A033AC140143927397D47EFD567D4C7EA887
rev          7EFD567D4C7EA887 2011-11-25  Ionut Biru (Arch Linux Master Key) <ionut@master-key.archlinux.org>
      reason for revocation: No reason specified
         revocation comment: Something bad happened
uid           [ revoked] Ionut Biru (Arch Linux Master Key) <ionut@master-key.archlinux.org>
sig 3        7EFD567D4C7EA887 2011-11-25  Ionut Biru (Arch Linux Master Key) <ionut@master-key.archlinux.org>
sig          E8F18BA1615137BC 2011-11-25  Ionut Biru <ibiru@archlinux.org>

pub   rsa3072 2011-11-19 [SC] [revoked: 2011-11-20]
      684148BB25B49E986A4944C55184252D824B18E8
rev          5184252D824B18E8 2011-11-20  Thomas Bächler (Arch Linux Master Key) <thomas@master-key.archlinux.org>
      reason for revocation: No reason specified
         revocation comment: Master Key revoked by Revocation Certificate holder Tobias Powalowski.
uid           [ revoked] Thomas Bächler (Arch Linux Master Key) <thomas@master-key.archlinux.org>
sig 3        5184252D824B18E8 2011-11-19  Thomas Bächler (Arch Linux Master Key) <thomas@master-key.archlinux.org>
sig          284FC34C8E4B1A25 2011-11-19  Thomas Bächler <thomas@bchlr.de>

pub   ed25519 2022-10-24 [SC]
      69E6471E3AE065297529832E6BA0F5A2037F4F41
uid           [  full  ] Johannes Löthberg (Arch Linux Master Key) <demize@master-key.archlinux.org>
sig 3        6BA0F5A2037F4F41 2022-10-24  Johannes Löthberg (Arch Linux Master Key) <demize@master-key.archlinux.org>
sig   L      FC29546156BEF65D 2023-02-28  Pacman Keyring Master Key <pacman@localhost>
sub   cv25519 2022-10-24 [E]
sig          6BA0F5A2037F4F41 2022-10-24  Johannes Löthberg (Arch Linux Master Key) <demize@master-key.archlinux.org>

pub   rsa4096 2022-06-30 [SC] [revoked: 2022-06-30]
      75BD80E4D834509F6E740257B1B73B02CC52A02A
rev          B1B73B02CC52A02A 2022-06-30  Jonas Witschel (Arch Linux Master Key) <diabonas@master-key.archlinux.org>
      reason for revocation: No reason specified
uid           [ revoked] Jonas Witschel (Arch Linux Master Key) <diabonas@master-key.archlinux.org>
sig 3        B1B73B02CC52A02A 2022-06-30  Jonas Witschel (Arch Linux Master Key) <diabonas@master-key.archlinux.org>
sig          6E80CA1446879D04 2022-06-30  Jonas Witschel <jonas.witschel@diabonas.de>
sig   L      FC29546156BEF65D 2023-02-28  Pacman Keyring Master Key <pacman@localhost>

pub   rsa4096 2015-12-17 [SC]
      91FFE0700E80619CEB73235CA88E23E377514E00
uid           [  full  ] Florian Pritz (Arch Linux Master Key) <florian@master-key.archlinux.org>
sig 3        A88E23E377514E00 2015-12-17  Florian Pritz (Arch Linux Master Key) <florian@master-key.archlinux.org>
sig          6D1655C14CE1C13E 2015-12-17  Florian Pritz <bluewind@xinu.at>
sig   L      FC29546156BEF65D 2023-02-28  Pacman Keyring Master Key <pacman@localhost>
sub   rsa4096 2015-12-17 [E]
sig          A88E23E377514E00 2015-12-17  Florian Pritz (Arch Linux Master Key) <florian@master-key.archlinux.org>

pub   rsa4096 2018-11-08 [SC]
      D8AFDDA07A5B6EDFA7D8CCDAD6D055F927843F1C
uid           [  full  ] Levente Polyak (Arch Linux Master Key) <anthraxx@master-key.archlinux.org>
sig 3        D6D055F927843F1C 2018-11-08  Levente Polyak (Arch Linux Master Key) <anthraxx@master-key.archlinux.org>
sig          39E4B877E62EB915 2018-12-28  Sven-Hendrik Haase <sh@lutzhaase.com>
sig          FC1B547C8D8172C8 2018-11-12  Levente Polyak (anthraxx) <levente@leventepolyak.net>
sig   L      FC29546156BEF65D 2023-02-28  Pacman Keyring Master Key <pacman@localhost>
sub   rsa4096 2018-11-08 [E]
sig          D6D055F927843F1C 2018-11-08  Levente Polyak (Arch Linux Master Key) <anthraxx@master-key.archlinux.org>
sub   rsa4096 2018-11-08 [A]
sig          D6D055F927843F1C 2018-11-08  Levente Polyak (Arch Linux Master Key) <anthraxx@master-key.archlinux.org>

pub   rsa4096 2017-05-15 [SC] [revoked: 2017-05-15]
      DDB867B92AA789C165EEFA799B729B06A680C281
rev          9B729B06A680C281 2017-05-15  Bartłomiej Piotrowski (Arch Linux Master Key) <bpiotrowski@master-key.archlinux.org>
      reason for revocation: No reason specified
uid           [ revoked] Bartłomiej Piotrowski (Arch Linux Master Key) <bpiotrowski@master-key.archlinux.org>
sig 3        9B729B06A680C281 2017-05-15  Bartłomiej Piotrowski (Arch Linux Master Key) <bpiotrowski@master-key.archlinux.org>
sig          BBE43771487328A9 2017-05-15  Bartlomiej Piotrowski <b@bpiotrowski.pl>

pub   rsa3072 2011-11-29 [SC] [revoked: 2011-11-29]
      27FFC4769E19F096D41D9265A04F9397CDFD6BB0
rev          A04F9397CDFD6BB0 2011-11-29  Dan McGee (Arch Linux Master Key) <dan@master-key.archlinux.org>
      reason for revocation: No reason specified
         revocation comment: Revocation certificate held by another developer
uid           [ revoked] Dan McGee (Arch Linux Master Key) <dan@master-key.archlinux.org>
sig 3        A04F9397CDFD6BB0 2011-11-29  Dan McGee (Arch Linux Master Key) <dan@master-key.archlinux.org>
sig          06096A6AD1CEDDAC 2011-11-30  Laurent Carlier <lordheavym@archlinux.org>
sig          5C2E46A0F53A76ED 2011-11-29  Dan McGee <dpmcgee@gmail.com>

pub   rsa4096 2011-11-29 [SC] [revoked: 2022-05-10]
      AB19265E5D7D20687D303246BA1DFB64FFF979E7
rev          BA1DFB64FFF979E7 2022-05-10  Allan McRae (Arch Linux Master Key) <allan@master-key.archlinux.org>
      reason for revocation: Key is no longer used
         revocation comment: Retired Arch Linux master key
uid           [ revoked] Allan McRae (Arch Linux Master Key) <allan@master-key.archlinux.org>
sig 3        BA1DFB64FFF979E7 2020-11-03  Allan McRae (Arch Linux Master Key) <allan@master-key.archlinux.org>
sig          06096A6AD1CEDDAC 2011-11-30  Laurent Carlier <lordheavym@archlinux.org>
sig          F99FFE0FEAE999BD 2011-11-30  Allan McRae <me@allanmcrae.com>

Offline

#4 2024-01-16 12:15:58

Lone_Wolf
Forum Moderator
From: Netherlands, Europe
Registered: 2005-10-04
Posts: 12,020

Re: [SOLVED] Cannot update - Marginal trust and cycle dependency

That output looks good, as root try 

# pacman -Sy archlinux-keyring && pacman -Su

as described at https://wiki.archlinux.org/title/Pacman … _regularly .

Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.


(A works at time B)  && (time C > time B ) ≠  (A works at time C)

Offline

#5 2024-01-16 12:29:27

misterjerry
Member
Registered: 2024-01-16
Posts: 3

Re: [SOLVED] Cannot update - Marginal trust and cycle dependency

Thanks, it works now. My problem was that I didn't really distinguish between 

pacman -Su

and 

pacman -Sy

That's my bad. In the reddit thread here I found an explanation of the difference. Maybe it can be useful to somebody else.

Offline

Pages: 1

Board footer

Powered by FluxBB