• Problem with pacman-mirrorlist being corrupted


    Hi, I’m trying to install Antergos in a Virtualbox VM without success.

    Using Cnchi the process would take hours to progress and ultimately fail either due to the process stalling or a failure during the checking integrity phase.

    I came across a few posts in the forum that suggested updating the mirror list, which made sense to me so I did the following.

    sudo pacman -S pacman-mirrorlist antergos-mirrorlist
    

    This brings me to the following…

    resolving dependencies...
    looking for conflicting packages...
     
    Packages (2) antergos-mirrorlist-20150715-1  pacman-mirrorlist-20150731-1
     
    Total Installed Size:  0.04 MiB
    Net Upgrade Size:      0.00 MiB
     
    :: Proceed with installation? [Y/n] Y
    (2/2) checking keys in keyring                     [######################] 100%
    (2/2) checking package integrity                   [######################] 100%
    error: antergos-mirrorlist: signature from "Antergos Build Server (Automated Package Build System) <admin@antergos.org>" is unknown trust
    :: File /var/cache/pacman/pkg/antergos-mirrorlist-20150715-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
    Do you want to delete it? [Y/n] Y
    error: failed to commit transaction (invalid or corrupted package (PGP signature))
    Errors occurred, no packages were upgraded.
    [antergos@antergos-iso pkg]$ pacman -S pacman-mirrorlist antergos-mirrorlisterror: you cannot perform this operation unless you are root.
    

    Even if I rm this file and try and sync it with pacman -Syy it is still corrupted.

    Is there anything I can do to fix this?

    antergos-2015.07.01-x86_64.iso
    Cnchi 0.8.151

  • @Blaiz0r i would wait on the new Cnchi release. will be out very soon.

  • @megaman

    Im having this problem on an existing system. I’ve tried repopulating the keyring and deleting /var/lib/pacman/sync/*. Not sure what else to attempt.

    I7 3770K@4.3Ghz/32GB Ram/3440 x 1440 + 1440p/EVGA 1080 FTW/512GB SSD/2TB HD/Antergos Base w/ Plasma

  • Have you tried to reinit your keyring?

    1. Rename the /etc/pacman.d/gnupg folder:
      sudo mv /etc/pacman.d/gnupg /etc/pacman.d/gnupg.old

    2. Init your keyring:
      sudo pacman-key --init

    3. Repopulate it:
      sudo pacman-key --populate archlinux antergos

  • @karasu

    Yup, no cigar.

    [wyn@arch ~]$ sudo rm -rf /etc/pacman.d/gnupg
    [wyn@arch ~]$ sudo pacman-key --init
    gpg: /etc/pacman.d/gnupg/trustdb.gpg: trustdb created
    gpg: no ultimately trusted keys found
    gpg: starting migration from earlier GnuPG versions
    gpg: porting secret keys from '/etc/pacman.d/gnupg/secring.gpg' to gpg-agent
    gpg: migration succeeded
    gpg: Generating pacman keyring master key...
    gpg: key BF651F9F marked as ultimately trusted
    gpg: directory '/etc/pacman.d/gnupg/openpgp-revocs.d' created
    gpg: Done
    ==> Updating trust database...
    gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
    gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
    [wyn@arch ~]$  sudo pacman-key --populate archlinux antergos
    ==> Appending keys from archlinux.gpg...
    gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
    gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
    ==> Appending keys from antergos.gpg...
    gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
    gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
    ==> Locally signing trusted keys in keyring...
      -> Locally signing key 0E8B644079F599DFC1DDC3973348882F6AC6A4C2...
      -> Locally signing key 684148BB25B49E986A4944C55184252D824B18E8...
      -> Locally signing key 24B445614FAC071891EDCE49CDBD406AA1AA7A1D...
      -> Locally signing key D95436A2E18DA94A72B1A5E2AEA529BF122902E5...
      -> Locally signing key EC3B5CE8FE98DFDF51B705536D6DDA3D2A45C7B4...
      -> Locally signing key 44D4A033AC140143927397D47EFD567D4C7EA887...
      -> Locally signing key 27FFC4769E19F096D41D9265A04F9397CDFD6BB0...
      -> Locally signing key AB19265E5D7D20687D303246BA1DFB64FFF979E7...
    ==> Importing owner trust values...
    gpg: inserting ownertrust of 4
    gpg: setting ownertrust to 4
    gpg: setting ownertrust to 4
    gpg: setting ownertrust to 4
    gpg: setting ownertrust to 4
    gpg: setting ownertrust to 4
    gpg: inserting ownertrust of 4
    gpg: inserting ownertrust of 4
    ==> Disabling revoked keys in keyring...
      -> Disabling key F5A361A3A13554B85E57DDDAAF7EF7873CFD4BB6...
      -> Disabling key 7FA647CD89891DEDC060287BB9113D1ED21E1A55...
      -> Disabling key D4DE5ABDE2A7287644EAC7E36D1A9E70E19DAA50...
      -> Disabling key BC1FBE4D2826A0B51E47ED62E2539214C6C11350...
      -> Disabling key 9515D8A8EAB88E49BB65EDBCE6B456CAF15447D5...
      -> Disabling key 4A8B17E20B88ACA61860009B5CED81B7C2E5C0D2...
      -> Disabling key 63F395DE2D6398BBE458F281F2DBB4931985A992...
      -> Disabling key 0B20CA1931F5DA3A70D0F8D2EA6836E1AB441196...
      -> Disabling key 8F76BEEA0289F9E1D3E229C05F946DED983D4366...
      -> Disabling key 66BD74A036D522F51DD70A3C7F2A16726521E06D...
      -> Disabling key 81D7F8241DB38BC759C80FCE3A726C6170E80477...
      -> Disabling key E7210A59715F6940CF9A4E36A001876699AD6E84...
    ==> Updating trust database...
    gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
    gpg: depth: 0  valid:   1  signed:   6  trust: 0-, 0q, 0n, 0m, 0f, 1u
    gpg: depth: 1  valid:   6  signed:  64  trust: 0-, 0q, 0n, 6m, 0f, 0u
    gpg: depth: 2  valid:  64  signed:   6  trust: 64-, 0q, 0n, 0m, 0f, 0u
    gpg: next trustdb check due at 2016-01-22
    [wyn@arch ~]$ sudo pacman -Syy pacman-mirrorlist antergos-mirrorlist
    :: Synchronizing package databases...
     core                        121.5 KiB  2.08M/s 00:00 [############################] 100%
     extra                      1750.8 KiB  1967K/s 00:01 [############################] 100%
     community                     2.7 MiB  2.56M/s 00:01 [############################] 100%
     multilib                    126.2 KiB  2.87M/s 00:00 [############################] 100%
     antergos                    419.8 KiB   255K/s 00:02 [############################] 100%
    warning: pacman-mirrorlist-20150731-1 is up to date -- reinstalling
    warning: antergos-mirrorlist-20150715-1 is up to date -- reinstalling
    resolving dependencies...
    looking for conflicting packages...
    
    Packages (2) antergos-mirrorlist-20150715-1  pacman-mirrorlist-20150731-1
    
    Total Installed Size:  0.04 MiB
    Net Upgrade Size:      0.00 MiB
    
    :: Proceed with installation? [Y/n] y
    (2/2) checking keys in keyring                        [############################] 100%
    (2/2) checking package integrity                      [############################] 100%
    error: antergos-mirrorlist: signature from "Antergos Build Server (Automated Package Build System) <admin@antergos.org>" is unknown trust
    :: File /var/cache/pacman/pkg/antergos-mirrorlist-20150715-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
    Do you want to delete it? [Y/n] n
    error: failed to commit transaction (invalid or corrupted package (PGP signature))
    Errors occurred, no packages were upgraded.
    

    I7 3770K@4.3Ghz/32GB Ram/3440 x 1440 + 1440p/EVGA 1080 FTW/512GB SSD/2TB HD/Antergos Base w/ Plasma

  • This is what I get trying to update today:

    [root@genc-desktop Downloads]# pacman -Su
    :: Starting full system upgrade...
    resolving dependencies...
    looking for conflicting packages...
    
    Packages (11) antergos-mirrorlist-20150715-1  antergos-wallpapers-0.6-1
                  chromium-pepper-flash-1:18.0.0.209-1  dropbox-3.6.8-1
                  lightdm-webkit-theme-antergos-2.1.0-1
                  lightdm-webkit2-greeter-0.1.2-9  numix-frost-themes-1.9.4-1
                  numix-icon-theme-0.r992.918d56f-1  package-query-1.6.2-1
                  ttf-google-fonts-20150520-1  yaourt-1.6-1
    
    Total Installed Size:  647.35 MiB
    Net Upgrade Size:       24.58 MiB
    
    :: Proceed with installation? [Y/n] 
    (11/11) checking keys in keyring                   [######################] 100%
    (11/11) checking package integrity                 [######################] 100%
    error: antergos-mirrorlist: signature from "Antergos Build Server (Automated Package Build System) <admin@antergos.org>" is unknown trust
    :: File /var/cache/pacman/pkg/antergos-mirrorlist-20150715-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
    Do you want to delete it? [Y/n] n
    error: antergos-wallpapers: signature from "Antergos Build Server (Automated Package Build System) <admin@antergos.org>" is unknown trust
    :: File /var/cache/pacman/pkg/antergos-wallpapers-0.6-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
    Do you want to delete it? [Y/n] n
    error: chromium-pepper-flash: signature from "Antergos Build Server (Automated Package Build System) <admin@antergos.org>" is unknown trust
    :: File /var/cache/pacman/pkg/chromium-pepper-flash-1:18.0.0.209-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
    Do you want to delete it? [Y/n] n
    error: dropbox: signature from "Antergos Build Server (Automated Package Build System) <admin@antergos.org>" is unknown trust
    :: File /var/cache/pacman/pkg/dropbox-3.6.8-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
    Do you want to delete it? [Y/n] n
    error: lightdm-webkit2-greeter: signature from "Antergos Build Server (Automated Package Build System) <admin@antergos.org>" is unknown trust
    :: File /var/cache/pacman/pkg/lightdm-webkit2-greeter-0.1.2-9-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
    Do you want to delete it? [Y/n] n
    error: lightdm-webkit-theme-antergos: signature from "Antergos Build Server (Automated Package Build System) <admin@antergos.org>" is unknown trust
    :: File /var/cache/pacman/pkg/lightdm-webkit-theme-antergos-2.1.0-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
    Do you want to delete it? [Y/n] n
    error: numix-frost-themes: signature from "Antergos Build Server (Automated Package Build System) <admin@antergos.org>" is unknown trust
    :: File /var/cache/pacman/pkg/numix-frost-themes-1.9.4-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
    Do you want to delete it? [Y/n] n
    error: numix-icon-theme: signature from "Antergos Build Server (Automated Package Build System) <admin@antergos.org>" is unknown trust
    :: File /var/cache/pacman/pkg/numix-icon-theme-0.r992.918d56f-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
    Do you want to delete it? [Y/n] n
    error: package-query: signature from "Antergos Build Server (Automated Package Build System) <admin@antergos.org>" is unknown trust
    :: File /var/cache/pacman/pkg/package-query-1.6.2-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
    Do you want to delete it? [Y/n] n
    error: ttf-google-fonts: signature from "Antergos Build Server (Automated Package Build System) <admin@antergos.org>" is unknown trust
    :: File /var/cache/pacman/pkg/ttf-google-fonts-20150520-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
    Do you want to delete it? [Y/n] n
    error: yaourt: signature from "Antergos Build Server (Automated Package Build System) <admin@antergos.org>" is unknown trust
    :: File /var/cache/pacman/pkg/yaourt-1.6-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
    Do you want to delete it? [Y/n] n
    error: failed to commit transaction (invalid or corrupted package (PGP signature))
    Errors occurred, no packages were upgraded.
    

    I tried --init and --populate with no positive results.

  • @Wyn
    Does it let you update archlinux-keyring and antergos-keyring packages?
    sudo pacman -S archlinux-keyring antergos-keyring

    @Burkay-Genc
    Always do pacman -Syu so your databases are also updated first. I don’t know for sure if this is your problem, though.

  • @karasu

    It can see it’s up to date, but won’t install.

    [wyn@arch ~]$ sudo pacman -Scc
    
    Cache directory: /var/cache/pacman/pkg/
    :: Do you want to remove ALL files from cache? [y/N] y
    removing all files from cache...
    
    Database directory: /var/lib/pacman/
    :: Do you want to remove unused repositories? [Y/n] y
    removing unused sync repositories...
    [wyn@arch ~]$ sudo pacman -Syy archlinux-keyring antergos-keyring
    :: Synchronizing package databases...
     core                        121.5 KiB  2.97M/s 00:00 [############################] 100%
     extra                      1751.1 KiB  2.59M/s 00:01 [############################] 100%
     community                     2.7 MiB  2.60M/s 00:01 [############################] 100%
     multilib                    126.2 KiB  2.80M/s 00:00 [############################] 100%
     antergos                    419.8 KiB   282K/s 00:01 [############################] 100%
    warning: archlinux-keyring-20150605-1 is up to date -- reinstalling
    warning: antergos-keyring-20140915-1 is up to date -- reinstalling
    resolving dependencies...
    looking for conflicting packages...
    
    Packages (2) antergos-keyring-20140915-1  archlinux-keyring-20150605-1
    
    Total Download Size:   0.50 MiB
    Total Installed Size:  0.71 MiB
    Net Upgrade Size:      0.00 MiB
    
    :: Proceed with installation? [Y/n] y
    :: Retrieving packages ...
     archlinux-keyring-2015...   499.9 KiB  2.36M/s 00:00 [############################] 100%
     antergos-keyring-20140...    11.8 KiB  86.9K/s 00:00 [############################] 100%
    (2/2) checking keys in keyring                        [############################] 100%
    (2/2) checking package integrity                      [############################] 100%
    error: antergos-keyring: signature from "Antergos Build Server (Automated Package Build System) <admin@antergos.org>" is unknown trust
    :: File /var/cache/pacman/pkg/antergos-keyring-20140915-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
    Do you want to delete it? [Y/n] n
    error: failed to commit transaction (invalid or corrupted package (PGP signature))
    Errors occurred, no packages were upgraded.
    

    I7 3770K@4.3Ghz/32GB Ram/3440 x 1440 + 1440p/EVGA 1080 FTW/512GB SSD/2TB HD/Antergos Base w/ Plasma

  • I’m a new user with this same problem. Had a successful install yesterday with no problems. Decided to install antegros on another computer today, and it hasn’t worked. Installation ends up hanging at ‘downloading…’; the point in time and the package it hangs at is inconsistent.

    I tried the fix above as well as a different iso, computer, and internet connection. Same problem on all attempts.

  • I’m having the same problem today. Pamac offered some updates and failed with

    failed to commit transaction (invalid or corrupted package (PGP signature))

    Looks like there is a general problem with the keys? Maybe it will be fixed server-side later?

  • +1 unknown trust
    Selection_011.png

  • Seems like the problem is wider and is related to packages coming from ABS (Antergos Build Server (Automated Package Build System)).

    Earlier there was a problem with mate-mint-menu bad PGP signature in Mate.

    In Gnome, the gnome-shell-extension-dash-to-dock-1:v47-1 package has the same problem now.

    Looks like something bad has happened with signatures on ABS = [antergos] repo

  • I ran cnchi with the --debug option in terminal and had the following output before it resumed, is this significant?

    (cnchi.py:1328): Pango-WARNING **: error opening config file '/root/.config/pango/pangorc': Permission denied
    
    Exception in thread Thread-2:
    Traceback (most recent call last):
      File "/usr/lib/python3.4/threading.py", line 920, in _bootstrap_inner
        self.run()
      File "/usr/share/cnchi/cnchi/rank_mirrors.py", line 74, in run
        with misc.raised_privileges:
    AttributeError: __exit__
    
  • Getting same PGP corrupted package error with ttf-google-fonts package update today.

  • same problem here,
    error: failed to commit transaction (invalid or corrupted package (PGP signature)
    hope it will be solved

  • @Arup-Roy-Chowdhury said:

    Getting same PGP corrupted package error with ttf-google-fonts package update today.

    This one comes from [antergos] repo (on ABS server) as well.

    More and more packages from [antergos] repo are affected by the same bad signature problem.

  • Thanks.

    I’ll ask @lots-0-logs , he is who maintains our ABS server and get back to you guys.

  • +1

    Problems from pacman complaining antergos packages pgp signatures. Commenting out the antergos repo allows pacman to work again.

  • [root@Portable-Arch gnupg]# gpg --homedir /etc/pacman.d/gnupg --list-keys |grep antergos
    uid [ expired] Antergos Build Server (Automated Package Build System) admin@antergos.org

    Going to have to wait for antergos-keyring to be updated. Is Antergos db signed? Not with that key, I hope? Could be a bit of a catch-22 for end users.

pacman74 mirrors7 Posts 41Views 22908
Log in to reply