You are not logged in.
Pages: 1
Topic closed
I can't use pacman to do an update on my system. It goes properly until it gets to checking package intergity, and then gives me an error stating that one of the signatures on the two files is corrupt. Like this:
:: Proceed with installation? [Y/n]
(244/244) checking keys in keyring [############################] 100%
(244/244) checking package integrity [############################] 100%
error: libvdpau: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/libvdpau-1.5-4-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: intel-gmmlib: signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/intel-gmmlib-22.9.0-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.
[bart@ASU-X870E ~]$ I assume it's on my machine, but I don't know how to correct it. Could someone help me out?
Bart
Offline
pacman -S archlinux-keyring
pacman -SuOffline
same problem with the same signature "Daniel Bermond <dbermond@archlinux.org>" but with another package.
I guess it's pgp key is not in a good state.
I tried to refresh everything regarding PGP keys and no dice, it keeps saying this key is untrusted.
Offline
pacman -S archlinux-keyring pacman -Su
Online
Hi all,
I’m experiencing the same issue.
signature from "Daniel Bermond <dbermond@archlinux.org>" is marginal trust
In my case, the affected packages are:
wine-mono-10.4.1-1-x86_64
libvpl-2.16.0-1-x86_64
Unfortunately, none of the usual solutions resolve the problem here either. To install the remaining packages successfully, I had to use the "--ignore" option with pamac from the command line.
Offline
What is the output of pacman-key --list-sigs 'Daniel Bermond <dbermond@archlinux.org>'
Last edited by loqs (2026-02-14 02:03:49)
Offline
FIXED FOR ME
I wrote Daniel and he told me this "There is no problem with my signing key" and pointed me to the arch wiki for fixing package signing
So I did that and IT WORKED.
I deleted the gnupgp
and repopulated the keys as noted here (as David suggested) https://wiki.archlinux.org/title/Pacman … l_the_keys
sudo rm -R /etc/pacman.d/gnupg/
sudo pacman-key --init
sudo pacman-key --populateand now IT WORKS
This is output of :
pacman-key --list-sigs 'Daniel Bermond <dbermond@archlinux.org>'before the fix
in my case : ("dudosa" means "suspicious" or "untrusted" in spanish and "desconocido" means "Unknown"
pacman-key --list-sigs 'Daniel Bermond <dbermond@archlinux.org>'
pub rsa2048 2016-06-27 [SC]
3FFA6AB7B69AAE6CCA263DDE019A7474297D8577
uid [desconocida] Daniel Bermond <danielbermond@gmail.com>
sig 3 019A7474297D8577 2018-10-13 [autofirma]
sig 3348882F6AC6A4C2 2018-11-11 Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>
sig 9B729B06A680C281 2018-11-13 Bartłomiej Piotrowski (Arch Linux Master Key) <bpiotrowski@master-key.archlinux.org>
sig A88E23E377514E00 2018-11-09 Florian Pritz (Arch Linux Master Key) <florian@master-key.archlinux.org>
sig BA1DFB64FFF979E7 2018-11-13 Allan McRae (Arch Linux Master Key) <allan@master-key.archlinux.org>
uid [desconocida] Daniel Bermond <dbermond@archlinux.org>
sig 3 019A7474297D8577 2021-10-01 [autofirma]
sub rsa2048 2016-06-27 [E]
sig 019A7474297D8577 2016-06-27 [autofirma]
pub ed25519 2021-10-30 [SC] [caduca: 2026-10-29]
80247D99EABD3A4D1E3A1836E85B8683EB48BC95
uid [ dudosa ] Daniel Bermond <dbermond@archlinux.org>
sig 3 E85B8683EB48BC95 2021-10-30 [autofirma]
sig 3348882F6AC6A4C2 2021-10-31 Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>
sig 4DC95B6D7BE9892E 2021-11-01 David Runge (Arch Linux Master Key) <dvzrv@master-key.archlinux.org>
sig 6BA0F5A2037F4F41 2022-12-03 Johannes Löthberg (Arch Linux Master Key) <demize@master-key.archlinux.org>
sig A88E23E377514E00 2021-11-01 Florian Pritz (Arch Linux Master Key) <florian@master-key.archlinux.org>
sig B1B73B02CC52A02A 2022-07-09 Jonas Witschel (Arch Linux Master Key) <diabonas@master-key.archlinux.org>
sig D7D3D823B88BDB9B 2026-01-29 [ID de usuario no encontrado]
sub cv25519 2021-10-30 [E] [caduca: 2026-10-29]
sig E85B8683EB48BC95 2021-10-30 [autofirma]And after the Fix
pub rsa2048 2016-06-27 [SC]
3FFA6AB7B69AAE6CCA263DDE019A7474297D8577
uid [ dudosa ] Daniel Bermond <danielbermond@gmail.com>
sig 3 019A7474297D8577 2018-10-13 [autofirma]
sig 3348882F6AC6A4C2 2018-11-11 Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>
sig 9B729B06A680C281 2018-11-13 Bartłomiej Piotrowski (Arch Linux Master Key) <bpiotrowski@master-key.archlinux.org>
sig A88E23E377514E00 2018-11-09 Florian Pritz (Arch Linux Master Key) <florian@master-key.archlinux.org>
sig BA1DFB64FFF979E7 2018-11-13 Allan McRae (Arch Linux Master Key) <allan@master-key.archlinux.org>
uid [desconocida] Daniel Bermond <dbermond@archlinux.org>
sig 3 019A7474297D8577 2021-10-01 [autofirma]
sub rsa2048 2016-06-27 [E]
sig 019A7474297D8577 2016-06-27 [autofirma]
pub ed25519 2021-10-30 [SC] [caduca: 2026-10-29]
80247D99EABD3A4D1E3A1836E85B8683EB48BC95
uid [ total ] Daniel Bermond <dbermond@archlinux.org>
sig 3 E85B8683EB48BC95 2021-10-30 [autofirma]
sig 3348882F6AC6A4C2 2021-10-31 Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>
sig 4DC95B6D7BE9892E 2021-11-01 David Runge (Arch Linux Master Key) <dvzrv@master-key.archlinux.org>
sig 6BA0F5A2037F4F41 2022-12-03 Johannes Löthberg (Arch Linux Master Key) <demize@master-key.archlinux.org>
sig A88E23E377514E00 2021-11-01 Florian Pritz (Arch Linux Master Key) <florian@master-key.archlinux.org>
sig B1B73B02CC52A02A 2022-07-09 Jonas Witschel (Arch Linux Master Key) <diabonas@master-key.archlinux.org>
sub cv25519 2021-10-30 [E] [caduca: 2026-10-29]
sig E85B8683EB48BC95 2021-10-30 [autofirma]As you can see it changed so I guess the local repository was outdated somehow.
Offline
You should™ have gotten there by merely updating archlinux-keyring first (I ran into this w/ a sparsely updated system and the keyring update had the required key updates)
Online
Allan, the main pacman developer, wrote:pacman -S archlinux-keyring pacman -Su
literally registered an account here to say thank you!
...which wound up being a pain trying to run that command in the registration, didn't realise there was a ' i had to highlight before the " i needed not to!
Offline
Mod note: Closing this solved thread to prevent further hijacking.
Inofficial first vice president of the Rust Evangelism Strike Force
Offline
Pages: 1
Topic closed