You are not logged in.
When doing a routine system update, I saw the following error:
error: zed: signature from "Caleb Maclennan <alerque@archlinux.org>" is invalid
:: File /var/cache/pacman/pkg/zed-0.210.4-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] n
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.
Usually, this should be resolved with a simple key refresh, however, I've tried all of the following and saw no success
1. `pacman -R zed` into `pacman -Scc` and `pacman -S zed`
2. `pacman-key --refresh-keys`
3. `pacman-key --recv-keys 0xA85E811EB4CA2E08` (key associated with the maintainer if I'm not mistaken)
4. `pacman -Sy --needed archlinux-keyring` into `pacman -Su` into `pacman-key --refresh-keys`
5. `rm -rf /etc/pacman.d/gnupg` -> `pacman-key --init` -> `pacman-key --populate archlinux` -> `pacman -S archlinux-keyring`
I'm currently lost as to what could've happened, as usually by the step 3 or 4 PGP signature issues are resolved for me. What could be the problem here and what should I do to resolve it?
Last edited by chiffa (2025-10-29 16:10:22)
Offline
Why did you answer 'n' to the question. None of the steps you followed make any sense, step 1 is redownloading the package. Step 2 is trying a different mirror.
Offline
Why did you answer 'n' to the question.
Because neither of the options actually succeeded, as both failed to commit transaction.
None of the steps you followed make any sense, step 1 is redownloading the package. Step 2 is trying a different mirror.
Trying a different mirror is a step I forgot about and it, indeed, solved the issue. Apologies for the noise.
Offline