[SOLVED] Resolving pacman-key update issues.

[Druid]

<From Spatry> It seems too many people are having problems updating Manjaro regardless of what flavor they are using. PLEASE READ THE SOLUTIONS provided in this thread BEFORE POSTING ABOUT PROBLEMS WITH THE GUI UPDATER. The GUI (Pamac) sometimes spits out authentication errors or problems with PGP keys. The information provided below will solve those problems when done correctly. ALWAYS ALWAYS ALWAYS update your system with:

Code: [Select]

sudo pacman-mirrors -gto update the mirrors and get faster download speeds - If you get an error use this command for pacman-mirrors instead

Code: [Select]

sudo pacman-mirrors --fasttrack

Code: [Select]

sudo pacman -Syyuwill force synchronization of lists and update the system. This command may need to be run twice.
I have installed mCOLe and started the upgrade process but after all downloads have been downloaded I get several errors:

Code: [Select]

error: jasper: signature from "Rob McCathie <korrode@gmail.com>" is unknown trust
:: File /var/cache/pacman/pkg/jasper-1.900.1-12.10-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: compiz08-gtk-standalone: signature from "Rob McCathie <korrode@gmail.com>" is unknown trust
:: File /var/cache/pacman/pkg/compiz08-gtk-standalone-0.8.9-2-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: libpulse: signature from "Rob McCathie <korrode@gmail.com>" is unknown trust
:: File /var/cache/pacman/pkg/libpulse-5.0-1.1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: lib32-libpulse: signature from "Rob McCathie <korrode@gmail.com>" is unknown trust
:: File /var/cache/pacman/pkg/lib32-libpulse-5.0-1.1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: pulseaudio: signature from "Rob McCathie <korrode@gmail.com>" is unknown trust
:: File /var/cache/pacman/pkg/pulseaudio-5.0-1.1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.I obviously replied YES to have these packages deleted but im wondering why this is happening? Can someone please tell me what I'm doing wrong.
Thankyou

[Synrgy87]

looks like the pgp keys are out of date / invalid

try the following in terminal:

Code: [Select]

sudo pacman-mirrors -gUpdates Mirrors

Code: [Select]

sudo pacman -SyyForces update of lists

Code: [Select]

sudo pacman -S gnupgsynchs and/or reinstalls gnupg

Code: [Select]

sudo pacman-key --populate archlinuxUpdates pacman keys

Code: [Select]

sudo pacman-key --populate manjaroUpdates pacman keys

Code: [Select]

sudo pacman-key --refresh-keysrefreshes pacman keys

Code: [Select]

sudo pacman -SyyuForce list update and synchronize packages on system. Ii the above does not work... REMOVE ALL KEYS as shown below and start over at the top of this list.

Code: [Select]

sudo rm /etc/pacman.d/gnupgIf that does not work.... SHUT OFF pgp signature checking as a last resort: HERE

[Spatry]

Thanks for chiming in Synrgy... I always update with the following command and I never get errors... I will sticky this thread because it may help people who run into the problem

Code: [Select]

sudo pacman -Syyu

[Synrgy87]

Yeah, I normally -Syyu but it can sometimes "miss" the keys for whatever reason, has happened to me a few times mostly after a fresh install though.

Awesome editing BTW, I didn't have time to explain everything while posting

(Also, there's no e in Synrgy hehe)

[Druid]

Everything seems to be up and running, thank you guys and Spatry I LOVE the theming on this distro its awesome!

[neeko]

Thanks a lot for commands, i juste installed Arch and i was unable to update it.

I registered to thank you and to point an issue : you've written "sudo pacman-keys" when it's "pacman-key".

[Synrgy87]

Thanks a lot for commands, i juste installed Arch and i was unable to update it.

I registered to thank you and to point an issue : you've written "sudo pacman-keys" when it's "pacman-key".

fixed, also that line should have been removed as it's useless (other than listing possible commands for pacman-key)

so will fix that too

[western]

Thanks for pining this guys, just switched over to the cup of linux version from an ubuntu distro, saved me pulling out a few hairs  

[wewhitt]

I followed this Pin above to a tee - and I still cannot update due to a PGP key.


:: Proceed with installation? [Y/n] y
(540/540) checking keys in keyring                           [################################] 100%
downloading required keys...
:: Import PGP key 4096R/, "Antonio Rojas <arojas@us.es>", created: 2014-10-21? [Y/n] y
error: key "Antonio Rojas <arojas@us.es>" could not be imported
error: required key missing from keyring
error: failed to commit transaction (unexpected error)
Errors occurred, no packages were upgraded.


Like I said I went throught above sequence from Synrgy87 three times.
I would love to fix this - I am using the Cup of Linux - freshly downloaded - :-)
Bill

[Spatry]

Welcome to the community, wewhitt <sigh> These PGP keys are starting to become a major annoyance. I updated the above post but figured I would also offer another suggestion as well. First, lets purge the existing keys:

Code: [Select]

sudo rm /etc/pacman.d/gnupgThen repeat the steps mentioned HERE.

[Dirty Helga]

If ALL ELSE FAILS... Here is the DIRTY WAY to FORCE pacman to install your updates:


You can disable PGP signature checking completely. Edit /etc/pacman.conf as root and change SigLevel to Never as shown:

Code: [Select]

[core]
SigLevel = Never
Include = /etc/pacman.d/mirrorlist

[extra]
SigLevel = Never
Include = /etc/pacman.d/mirrorlist

[community]
SigLevel = Never
Include = /etc/pacman.d/mirrorlist

[multilib]
SigLevel = Never
Include = /etc/pacman.d/mirrorlistAnd Vice Versa to revert the change back after you successfully update... Save file then force package list synch and update with:

Code: [Select]

sudo pacman -SyyuI remember the old days (when running Arch) before pgp key signing became compulsory. Now it seems we have troubles since Manjaro staff is rapidly changing and new keys need to be acquired. Disabling pgp key signing should only be done as a LAST RESORT...

ALWAYS ALWAYS ALWAYS use

Code: [Select]

sudo pacman -Syyuuto update Manjaro... DO NOT use Pamac (GUI) to update the system... Sometimes the GUI misbehaves... Use the terminal for updates... The terminal is your FRIEND! Do what your Auntie Helga tells you and you will be happy for the rest of your life! I promise......





---NOT!

[wewhitt]

Thank you for your efforts - this worked. I was able to dump the keys and follow your instructions - updated with no issues. This may sound like a dumb question - I am very new to arch linux - the Pacman features and Yarout or whatever that is ... going through this procedure above - does this open up every PPA available. I know in Ubuntu I seemed to be adding PPA's a lot - this isn't the case in arch - am I right?
BTW - what made come to this distro was Spatry's YouTube channel and his how too's. I freakin love this distro so far - what an amazing breath of fresh air from all my other duel boot's. I can't tell you how I appreciate the efforts that went into this - to all involved ..... THANK YOU!!!!

[Spatry]

There are no PPAs in Manjaro. You use pacman to install packages from the Manjaro repository. yaourt on the other hand will let you install packages from BOTH the main repositories and the AUR (Arch user repository). Always run pacman as ROOT... NEVER run yaourt as root.

The AUR is maintained by users and sometimes you may find some packages do not build properly. Yaourt is a pacman helper which reads PKGBUILD script, ensures you have the dependencies and compiles them for you on the fly. 

A google search on "pacman arch" and "yaourt" will explain almost everything you would want to know. Yaourt accepts most of the command-line switches pacman does.

[Bendo]

If you need more information in addition to what Spatry summarized:

https://wiki.archlinux.org/index.php/Official_repositories
https://wiki.archlinux.org/index.php/Pacman


https://wiki.archlinux.org/index.php/Arch_User_Repository

( https://wiki.archlinux.org/index.php/PKGBUILD )
( https://wiki.archlinux.org/index.php/Makepkg )
(( https://wiki.archlinux.org/index.php/Yaourt ))

[Luki]

I have made an alias from some of the commands:

alias fixit="sudo rm -f /var/lib/pacman/db.lck && sudo pacman-mirrors -g && sudo pacman -Syyuu && sudo pacman -Suu"

Paste that to .bashrc and use fixit to execute.