Arch Linux

qwik

Member

Registered: 2025-06-19

Posts: 3

[Solved] Invalid or corrupted package (PGP signature)).

Hi guys. Looking to do a full system upgrade after a little while (few weeks?) without one. I'm relatively new to Arch (start of the year), but not relatively new to computing in general - but I don't fully understand how package managers work.

`sudo pacman -Syu` outputs (both after clearing cache and after previously downloading files, y/n doesn't change any outcome even after redownloading):

 (121/121) checking package integrity
error: modrinth-app-git: signature from "TNE <tne@garudalinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/modrinth-app-git-0.9.5.r106.gdbde3c4-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] n
error: sunshine: signature from "TNE <tne@garudalinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/sunshine-2025.122.141614-8-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] n
error: vmware-workstation: signature from "TNE <tne@garudalinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/vmware-workstation-17.6.3-9-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] n
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded. 

Steps I've tried:
Deleting full pacman cache (pacman -Scc)
Refresh keys (rm -r /etc/pacman.d/gnupg, pacman-key --init, pacman-key --populate)
Refresh mirrors (pacman -Fy)
Checked pacman-keyring was up to date (it was)
Delete broken (.part) files in pacman cache
Redownload the files multiple times

This is a full upgrade - only those packages are having issues. Don't see any issues with them. I have no clue how signatures work, sorry... help would be appreciated. Thanks guys

Last edited by qwik (2025-06-20 11:26:50)

jl2

Member

From: 47° 18' N 8° 34' E

Registered: 2022-06-01

Posts: 761

Re: [Solved] Invalid or corrupted package (PGP signature)).

pacman -Sy chaotic-keyring && pacman -Syu

problem is, garuda (hoster of the chaotic-AUR repo) has changed their GPG package, the probably added "TNE <tne@garudalinux.org>" to their packagers.

Last edited by jl2 (2025-06-19 06:00:38)

---

Why I run Arch? To "BTW I run Arch" the guy one grade younger.
And to let my siblings and cousins laugh at Arsch Linux...

Upload longer text output like this

Lone_Wolf

Administrator

From: Netherlands, Europe

Registered: 2005-10-04

Posts: 13,871

Re: [Solved] Invalid or corrupted package (PGP signature)).

Keep in mind that chaotic-aur includes packages that are not in AUR and is known to sometimes makes changes to aur PKGBUILDS without informing the aur maintainer.

If you have problems with packages from chaotic-aur you'll have to ask the chaotic-aur devs.

For now, follow jl2' advise.

Moderator Note :
Not a pacman Issue, moving to AUR Issues, Discussion & PKGBUILD Requests

Last edited by Lone_Wolf (2025-06-19 08:34:55)

---

Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.

clean chroot building not flexible enough ?
Try clean chroot manager by graysky

qwik

Member

Registered: 2025-06-19

Posts: 3

Re: [Solved] Invalid or corrupted package (PGP signature)).

pacman -Sy chaotic-keyring && pacman -Syu

This fixed the issue. Thanks guys. o7

Lone_Wolf

Administrator

From: Netherlands, Europe

Registered: 2005-10-04

Posts: 13,871

Re: [Solved] Invalid or corrupted package (PGP signature)).

Glad your issue is fixed.

Please prepend [Solved] to the thread title.
(Edit first post. there's a character limit, so you may have to shorten the title.)

---

Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.

clean chroot building not flexible enough ?
Try clean chroot manager by graysky