Arch Linux

vulpes_12

Member

Registered: 2025-06-27

Posts: 3

Invalid PGP Signatures When Updating Packages

Whenever I attempt to update my system using sudo pacman -Syu, I receive errors indicating that several packages have invalid or corrupted PGP signatures. Here are some examples of the errors I encounter:
error: systemd: signature from "Christian Hesse <eworm@archlinux.org>" is invalid
:: File /var/cache/pacman/pkg/systemd-257.7-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] Y

This issue occurs for multiple packages, including:  systemd, breeze, firefox, kscreen, linux-firmware-broadcom, linux-firmware-mediatek.

I tried using # pacman-key --init && pacman-key --populate archlinux and refreshing keys but problem persists every time i upgrade.

Last edited by vulpes_12 (2025-06-27 04:14:05)

gromit

Administrator

From: Germany

Registered: 2024-02-10

Posts: 1,539

Website

Re: Invalid PGP Signatures When Updating Packages

Did you already try "pacman -Sy archlinux-keyring && pacman -Su"?

vulpes_12

Member

Registered: 2025-06-27

Posts: 3

Re: Invalid PGP Signatures When Updating Packages

I tried running the commands:
$ sudo  -Sy archlinux-keyring
$ sudo pacman -Su

However, i am still encountering the same issue of invalid PGP signature:
error: breeze: signature from "Tomaz Canabrava <tcanabrava@archlinux.org>" is invalid
:: File /var/cache/pacman/pkg/breeze-6.4.1-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] Y
error: linux-firmware-broadcom: signature from "Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>" is invalid
:: File /var/cache/pacman/pkg/linux-firmware-broadcom-20250613.12fe085f-9-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] Y
error: linux-firmware-mediatek: signature from "Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>" is invalid
:: File /var/cache/pacman/pkg/linux-firmware-mediatek-20250613.12fe085f-9-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]

last time when this problem occur i manually removed corrupted packages from respective directories. its only happened with three firmware packages but this time its happening with more packages

Scimmia

Fellow

Registered: 2012-09-01

Posts: 13,729

Re: Invalid PGP Signatures When Updating Packages

And does deleting them and redownloading them not work here? If not, how about using a different mirror?

vulpes_12

Member

Registered: 2025-06-27

Posts: 3

Re: Invalid PGP Signatures When Updating Packages

deleting them and re-downloading them works but when i again go for upgrade the system every time its "(invalid or corrupted package (PGP signature))" with some packages

Scimmia

Fellow

Registered: 2012-09-01

Posts: 13,729

Re: Invalid PGP Signatures When Updating Packages

Then the packages are *actually* corrupt, and messing with the keyring won't change that. You have a stability problem somewhere, your connection, RAM, disk, etc.

im_blaze

Member

Registered: Today

Posts: 1

Re: Invalid PGP Signatures When Updating Packages

Facing the same issue at my end. Seems like the issue is with the packages.

seth

Member

From: Won't reply 2 private help req

Registered: 2012-09-03

Posts: 76,398

Re: Invalid PGP Signatures When Updating Packages

1. probably not a year later
2. certainly not *those* packages
3.

You have a stability problem somewhere, your connection, RAM, disk, etc.

Please don't ncrobump; open a new thread and post the actual errors you're facing verbatim, https://bbs.archlinux.org/viewtopic.php?id=57855

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc

WorMzy

Administrator

From: Scotland

Registered: 2010-06-16

Posts: 13,566

Website

Re: Invalid PGP Signatures When Updating Packages

Please don't necrobump.

https://wiki.archlinux.org/title/Genera … bumping%22

Closing.

---

Sakura:-
Mobo: MSI MAG X570S TORPEDO MAX // Processor: AMD Ryzen 9 5950X @4.9GHz // GFX: AMD Radeon RX 5700 XT // RAM: 32GB (4x 8GB) Corsair DDR4 (@ 3000MHz) // Storage: 1x 3TB HDD, 6x 1TB SSD, 2x 120GB SSD, 1x 275GB M2 SSD

Making lemonade from lemons since 2015.