Arch Linux

tiimeeeyy

Member

Registered: 2024-11-29

Posts: 2

Signature Verification Error while trying to install pacman [SOLVED]

Hello all!
When I try to run any sudo pacman -S ... command, the system returns the following:

[user@archlinux ~]$ sudo pacman -S git
[sudo] password for user: 
resolving dependencies...
looking for conflicting packages...

Packages (4) perl-error-0.17029-7  perl-mailtools-2.21-9  perl-timedate-2.33-7  git-2.47.1-1

Total Download Size:    6.62 MiB
Total Installed Size:  28.51 MiB

:: Proceed with installation? [Y/n] y
:: Retrieving packages...
 git-2.47.1-1-x86_64                                                                     6.5 MiB  3.08 MiB/s 00:02 [####################################################################] 100%
 perl-mailtools-2.21-9-any                                                              58.1 KiB  1570 KiB/s 00:00 [####################################################################] 100%
 perl-timedate-2.33-7-any                                                               33.1 KiB  1104 KiB/s 00:00 [####################################################################] 100%
 perl-error-0.17029-7-any                                                               21.4 KiB   714 KiB/s 00:00 [####################################################################] 100%
 Total (4/4)                                                                             6.6 MiB  2.82 MiB/s 00:02 [####################################################################] 100%
(4/4) checking keys in keyring                                                                                     [####################################################################] 100%
(4/4) checking package integrity                                                                                   [####################################################################] 100%
error: perl-error: signature from "Antonio Rojas <arojas@archlinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/perl-error-0.17029-7-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: perl-timedate: signature from "Antonio Rojas <arojas@archlinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/perl-timedate-2.33-7-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: perl-mailtools: signature from "Antonio Rojas <arojas@archlinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/perl-mailtools-2.21-9-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: git: signature from "Christian Hesse <eworm@archlinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/git-2.47.1-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y

error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded. ``

I have tried the following (all in sudo):
-  pacman -Sy: This returns the standard message (core/extra is up to date)
- pacman -Sc: Deleted all the cache files and tried running the install script again
- pacman -Syu archlinux-keyring: This also returns the same error
- sudo pacman -Syu --overwrite archlinux-keyring: Returns that there is nothing to do

I tried solving this with the help of chatgpt, but it has lead to nothing, hence why I am posting here.
For completeness, my system specs:
-Ryzen 7740U with  Radeon graphics
- Generic 2600Mhz Ram
- 512GB WD NvMe SSD

I did not find any information about code formatting on this forum, if I am formatting it wrongly, please let me know and I will correct my question.
Thank your help!

Edit: Found the solution:
The error was that no master key was initialised for pacman.

sudo pacman-key --init 
sudo pacman-key --populate

fixed the issue!

Last edited by tiimeeeyy (2024-11-29 02:10:57)

V1del

Forum Moderator

Registered: 2012-10-16

Posts: 23,289

Re: Signature Verification Error while trying to install pacman [SOLVED]

The correct way for updating your keyring in isolation is a

pacman -Sy archlinux-keyring
pacman -Syu

Is your system time setup correctly?

As for code formatting, every posting box has a bbcode link which will link you to  [code][/code] tags

tiimeeeyy

Member

Registered: 2024-11-29

Posts: 2

Re: Signature Verification Error while trying to install pacman [SOLVED]

Hey!
Thanks for the quick response. Just checked and synced the hardware clock. All of the pacman installation processes fail due to this error, here the output from

pacman -Sy archlinux-keyring

:

[user@archlinux ~]$ sudo pacman -Sy archlinux-keyring
:: Synchronizing package databases...
 core is up to date
 extra is up to date
warning: archlinux-keyring-20241015-1 is up to date -- reinstalling
:: Starting full system upgrade...
resolving dependencies...
looking for conflicting packages...

Packages (2) libsysprof-capture-47.2-1  archlinux-keyring-20241015-1

Total Download Size:   1.22 MiB
Total Installed Size:  1.92 MiB
Net Upgrade Size:      0.00 MiB

:: Proceed with installation? [Y/n] y
:: Retrieving packages...
 archlinux-keyrin...  1203.2 KiB   648 KiB/s 00:02 [######################] 100%
 libsysprof-captu...    47.2 KiB   827 KiB/s 00:00 [######################] 100%
 Total (2/2)          1250.4 KiB   632 KiB/s 00:02 [######################] 100%
(2/2) checking keys in keyring                     [######################] 100%
(2/2) checking package integrity                   [######################] 100%
error: libsysprof-capture: signature from "Jan Alexander Steffens (heftig) <heftig@archlinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/libsysprof-capture-47.2-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y 
error: archlinux-keyring: signature from "Christian Hesse <eworm@archlinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/archlinux-keyring-20241015-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.

Everything seems to be up to date, but somehow nothing seems to be working . Thank you for the formatting tip btw

Last edited by tiimeeeyy (2024-11-29 01:57:39)

V1del

Forum Moderator

Registered: 2012-10-16

Posts: 23,289

Re: Signature Verification Error while trying to install pacman [SOLVED]

Mhm... try going over https://wiki.archlinux.org/title/Pacman … nown_trust

Last edited by V1del (2024-11-29 02:12:33)