Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[upgrade] Rebuild GPG keys #707

Closed
LukeShortCloud opened this issue Dec 4, 2023 · 1 comment
Closed

[upgrade] Rebuild GPG keys #707

LukeShortCloud opened this issue Dec 4, 2023 · 1 comment
Assignees
Labels
bug Something isn't working

Comments

@LukeShortCloud
Copy link
Owner

Updating the archlinux-keyring and, if applicable, the manjaro-keyring package is not enough for older systems. Errors below can be seen when running sudo pacman-key --populate.

gpg: validate_key_list failed
gpg: [don't know]: invalid packet (ctb=00)
gpg: keydb_search failed: Invalid packet
gpg: error reading key: Invalid packet
==> Locally signing trusted keys in keyring...
==> ERROR: <GPG_KEY_UUID_1> could not be locally signed.
==> ERROR: <GPG_KEY_UUID_2> could not be locally signed.

Resetting the keys should help.

$ sudo rm -r -f /etc/pacman.d/gnupg
$ sudo pacman-key --init
$ sudo pacman-key --populate

https://wiki.archlinux.org/title/Pacman/Package_signing#Resetting_all_the_keys

@LukeShortCloud LukeShortCloud added the bug Something isn't working label Dec 4, 2023
LukeShortCloud added a commit that referenced this issue Dec 4, 2023
while installing 'archlinux-keyring' and 'manjaro-keyring'. This
allows the GPG keyring packages to be installed even if the system
is old and does not trust the keyring packages.

Related #707
@LukeShortCloud LukeShortCloud self-assigned this Dec 10, 2023
@LukeShortCloud
Copy link
Owner Author

This guide seems to imply that pacman-key --populate is automatically ran as a post-transaction task for the *-keyring packages.

https://wiki.manjaro.org/index.php/Pacman_troubleshooting

LukeShortCloud added a commit that referenced this issue Dec 10, 2023
This fixes GPG key issues on systems that have not updated
winesapOS in a long time (usually a year or more).

The GPG keyring commands have also been refactored to run as
efficiently as possible (no duplicate commands).

Resolves #707
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant