# EndeavourOS keyring updated, users should update soon

**URL:** <https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117>\
**Category:** Important notifications\
**Created:** [May 23, 2023, 6:50pm UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117 "2023-05-23T18:50:53Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![manuel](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/manuel/32/396_2.png) [@manuel](https://forum.endeavouros.com/u/manuel)\
**Post date:** [May 23, 2023, 6:50pm UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/1 "2023-05-23T18:50:53Z")

</div>

Today package `endeavouros-keyring` was updated.

This means users should update this package _as soon as possible_ in order to avoid issues when updating other packages.

Similar to what we have been doing when Arch keyring updates, you should run commands

```auto
sudo pacman -Sy endeavouros-keyring
sudo pacman -Syu

```

Edit 2023.05.28:  
Alternatively, you can run command

```auto
eos-update

```

---

<div class="post-metadata">

**Author:** ![manuel](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/manuel/32/396_2.png) [@manuel](https://forum.endeavouros.com/u/manuel)\
**Post date:** [May 23, 2023, 6:53pm UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/2 "2023-05-23T18:53:59Z")

</div>



---

<div class="post-metadata">

**Author:** ![Pudge](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/pudge/32/17155_2.png) [@Pudge](https://forum.endeavouros.com/u/Pudge)\
**Post date:** [May 23, 2023, 6:58pm UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/3 "2023-05-23T18:58:22Z")

</div>

What version of endeavouros-keyring is the new one?

```auto
sudo pacman -Sy endeavouros-keyring
[sudo] password for don: 
:: Synchronizing package databases...
 endeavouros is up to date
 core is up to date
 extra 8.2 MiB 8.35 MiB/s 00:01 [----------------------------------------] 100%
warning: endeavouros-keyring-20230523-1 is up to date -- reinstalling

```

@manuel if you are going to be out of the EnOS x86\_64 github repository for a while, I will go ahead and update the EnOS aarch64 repo with the new keyring.

Pudge

---

<div class="post-metadata">

**Author:** ![manuel](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/manuel/32/396_2.png) [@manuel](https://forum.endeavouros.com/u/manuel)\
**Post date:** [May 23, 2023, 6:59pm UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/4 "2023-05-23T18:59:33Z")

</div>

No problem, go for it! 😄

And it is version 20230523-1.

---

<div class="post-metadata">

**Author:** ![ricklinux](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/ricklinux/32/110798_2.png) [@ricklinux](https://forum.endeavouros.com/u/ricklinux)\
**Post date:** [May 23, 2023, 7:00pm UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/5 "2023-05-23T19:00:01Z")

</div>

I think i already have it with normal updating?

```auto
[ricklinux@eos-plasma ~]$ sudo pacman -Sy endeavouros-keyring
[sudo] password for ricklinux: 
:: Synchronizing package databases...
 endeavouros is up to date
 core is up to date
 extra is up to date
 multilib is up to date
error: failed retrieving file 'endeavouros.db' from mirrors.gigenet.com : SSL connection timeout
warning: endeavouros-keyring-20230523-1 is up to date -- reinstalling
resolving dependencies...
looking for conflicting packages...

Package (1) Old Version New Version Net Change

endeavouros/endeavouros-keyring 20230523-1 20230523-1 0.00 MiB

Total Installed Size: 0.01 MiB
Net Upgrade Size: 0.00 MiB

:: Proceed with installation? [Y/n] 

```

---

<div class="post-metadata">

**Author:** ![manuel](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/manuel/32/396_2.png) [@manuel](https://forum.endeavouros.com/u/manuel)\
**Post date:** [May 23, 2023, 7:01pm UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/6 "2023-05-23T19:01:52Z")

</div>

Yeah, normal update should work for now, but later it might not work anymore. That’s why this thread.

---

<div class="post-metadata">

**Author:** ![Pudge](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/pudge/32/17155_2.png) [@Pudge](https://forum.endeavouros.com/u/Pudge)\
**Post date:** [May 23, 2023, 7:11pm UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/7 "2023-05-23T19:11:24Z")

</div>

> [@manuel](#):
>
> No problem, go for it! 😄

It is a done deal. EnOS arm aarch64 github repo has the updated keyring.  
It is already at the Alpix mirror ready to sync the remaining mirrors.

Pudge

---

<div class="post-metadata">

**Author:** ![Moppel](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/moppel/32/71689_2.png) [@Moppel](https://forum.endeavouros.com/u/Moppel)\
**Post date:** [May 23, 2023, 9:01pm UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/8 "2023-05-23T21:01:30Z")

</div>

Can someone point me to an article where the concept of this keyring is explained and why it is necessary to update it like this?

[https://archlinux.org/master-keys/](https://archlinux.org/master-keys/)

Seems to be for ppl how know more than I do. 🥲

---

<div class="post-metadata">

**Author:** ![moson](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/moson/32/78325_2.png) [@moson](https://forum.endeavouros.com/u/moson)\
**Post date:** [May 23, 2023, 9:34pm UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/9 "2023-05-23T21:34:37Z")

</div>

The keyring package contains all (public) GPG keys of the packagers.  
Packagers sign their packages with their (private) GPG key.  
pacman validates all packages prior to installation if they were signed with any of these “trusted” keys contained in the keyring. (Thus you can be sure a package was built by an “official packager” and it has not been tampered with. A mirror could otherwise serve whatever garbage it wants and you’d install it blindly)

Now if a packager changes their signing keys (or there is a new packager with a new key) and starts signing packages with it, this new key needs to be in the keyring obviously, otherwise pacman will reject installing it. Thus you sometimes need to update the keyring package (to get this new key(s) being trusted) before installing any other packages.

Now that is a very simplified explanation. For more details, see:  
[https://wiki.archlinux.org/title/Pacman/Package\_signing](https://wiki.archlinux.org/title/Pacman/Package_signing)

---

<div class="post-metadata">

**Author:** ![wordler](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/wordler/32/14412_2.png) [@wordler](https://forum.endeavouros.com/u/wordler)\
**Post date:** [May 23, 2023, 11:00pm UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/10 "2023-05-23T23:00:12Z")

</div>

Done, thank you @manuel . For anyone confused, just run the suggested two commands, there should be no issues.

---

<div class="post-metadata">

**Author:** ![swh](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/swh/32/95303_2.png) [@swh](https://forum.endeavouros.com/u/swh)\
**Post date:** [May 24, 2023, 10:57am UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/11 "2023-05-24T10:57:13Z")

</div>

@manuel thanks for pointing out. Done without any issues

---

<div class="post-metadata">

**Author:** ![joekamprad](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/joekamprad/32/77608_2.png) [@joekamprad](https://forum.endeavouros.com/u/joekamprad)\
**Post date:** [May 24, 2023, 6:25pm UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/12 "2023-05-24T18:25:29Z")

</div>

thanks … i was just thinking… may i write some details about what the hell is a keyring ?

From this side of the counter it all looks completely natural and is nothing that surprises us… but from the other side you are handed a colorful cocktail… 🍸

hmmmm now i want to write an article about encryption and keys and rings in general…

---

<div class="post-metadata">

**Author:** ![voryzen](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/voryzen/32/66893_2.png) [@voryzen](https://forum.endeavouros.com/u/voryzen)\
**Post date:** [May 24, 2023, 10:53pm UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/13 "2023-05-24T22:53:23Z")

</div>

Top notch idea.

There is always the wiki option

[Discourse ‘Wiki Post’](https://meta.discourse.org/t/what-is-a-wiki-post/30801)

However, this news plugin would be cool too, as a way to put information/articles front and foremost

[News plugin](https://meta.discourse.org/t/news-plugin/107971)

---

<div class="post-metadata">

**Author:** ![jdjohnston](https://forum.endeavouros.com/letter_avatar_proxy/v4/letter/j/c2a13f/32.png) [@jdjohnston](https://forum.endeavouros.com/u/jdjohnston)\
**Post date:** [May 25, 2023, 12:00am UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/14 "2023-05-25T00:00:19Z")

</div>

@manuel , thanks for the notice. Thanks that EOS `welcome` pointed out there was new Software News. I find that I very good way to get _my_ attention 🙂, especially for someone who spends much time offline

---

<div class="post-metadata">

**Author:** ![falparsi](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/falparsi/32/95581_2.png) [@falparsi](https://forum.endeavouros.com/u/falparsi)\
**Post date:** [May 25, 2023, 6:38am UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/15 "2023-05-25T06:38:25Z")

</div>

thank you manuel, thist worked for me. found link to this on the arch (aur) linux package forum.

---

<div class="post-metadata">

**Author:** ![fr0d0](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/fr0d0/32/76767_2.png) [@fr0d0](https://forum.endeavouros.com/u/fr0d0)\
**Post date:** [May 25, 2023, 10:26am UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/16 "2023-05-25T10:26:16Z")

</div>

```auto
:: File /var/cache/pacman/pkg/yay-12.0.5-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.

```

Issue solved. Thank you

---

<div class="post-metadata">

**Author:** ![Flamewardin](https://forum.endeavouros.com/letter_avatar_proxy/v4/letter/f/9de0a6/32.png) [@Flamewardin](https://forum.endeavouros.com/u/Flamewardin)\
**Post date:** [May 26, 2023, 4:19pm UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/17 "2023-05-26T16:19:17Z")

</div>

Ran in to a mild issue, thought I’d share just in case anyone else hit it.  
Just running yay or sudo pacman -Syu, there was an update for yay and the keyring.

yay failed to update citing corruption or invalid key.  
The trick was to run yay, skip the yay update, and allow the keyring update to apply first, then update yay.  
I tried all the manual keyring clear and update to no avail, in the end it was, as it usually is, an order of operations issue.

---

<div class="post-metadata">

**Author:** ![Stagger\_Lee](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/stagger_lee/32/93385_2.png) [@Stagger\_Lee](https://forum.endeavouros.com/u/Stagger_Lee)\
**Post date:** [May 26, 2023, 5:18pm UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/19 "2023-05-26T17:18:33Z")

</div>

That’s not related to the keyring, so you should open a new topic for your issue.

---

<div class="post-metadata">

**Author:** ![dad2d9a7](https://forum.endeavouros.com/letter_avatar_proxy/v4/letter/d/43a26b/32.png) [@dad2d9a7](https://forum.endeavouros.com/u/dad2d9a7)\
**Post date:** [May 26, 2023, 8:14pm UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/20 "2023-05-26T20:14:28Z")

</div>

Personally, I prefer to use the **eos-update** script for updating. That checks for current keyrings before the system update and does a few other useful things.

This means that most keyring problems do not occur.

```auto
LANG=C pacman -Qo "$(type -p eos-update)"
/usr/bin/eos-update is owned by eos-bash-shared 23-19.1

```

I created an alias for it:

```auto
alias eosu='eos-update --yay'

```

---

<div class="post-metadata">

**Author:** ![Sharp](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/sharp/32/73066_2.png) [@Sharp](https://forum.endeavouros.com/u/Sharp)\
**Post date:** [May 27, 2023, 1:49am UTC](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117/21 "2023-05-27T01:49:33Z")

</div>

Done. No issues on my end.

[Next page](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117.md?page=2)
