# \[FAQ\] Issues with “signature is marginal trust”, "signature is unknown trust", or “invalid or corrupted package” **URL:** \ **Category:** Newbie\ **Created:** [August 10, 2020, 11:53pm UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756 "2020-08-10T23:53:43Z")\ **Posts on this page:** 17\ **Page:** 1
**Author:** ![jonathon](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/jonathon/32/18722_2.png) [@jonathon](https://forum.endeavouros.com/u/jonathon)\ **Post date:** [August 10, 2020, 11:53pm UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756/1 "2020-08-10T23:53:43Z")
If you’re getting an error similar to “`Can’t update: signature from *** is marginal trust`” or “`invalid or corrupted package`” you probably just need to update your package signing keys: ```auto sudo pacman -Sy archlinux-keyring endeavouros-keyring sudo pacman -Syu ``` **Also make sure your system clock is correct!** Of course, it’s also possible that the package file actually is corrupt. Remove it from `/var/cache/pacman/pkg/` so `pacman` will download it again. If no package file is explicitly mentioned then you may have an incomplete download. Run `sudo rm /var/cache/pacman/pkg/*.part` to remove any partial downloads. * * * If you have any other errors, you can clear out the pacman keyring and start fresh: ```auto sudo mv /etc/pacman.d/gnupg /root/pacman-key.bak sudo pacman-key --init sudo pacman-key --populate archlinux endeavouros sudo pacman -Syy archlinux-keyring endeavouros-keyring sudo pacman -Syyu ``` And if this _still_ doesn’t work, and you trust that the packages are actually correct and not corrupt and haven’t been interfered with, then you can force (re)installation of the keyring packages: ```auto sudo pacman -U /var/cache/pacman/pkg/{archlinux,endeavouros}-keyring*.pkg.tar.zst ``` then try again. * * * If you’re installing an AUR package a PGP key can be used to verify the source files. You will need to import this into your personal keyring before it can be verified. If you don’t you’ll get an error similar to: ```auto [...] llvm-5.0.0.src.tar.xz ... FAILED (unknown public key 0FC3042E345AD05D) libcxx-5.0.0.src.tar.xz ... FAILED (unknown public key 0FC3042E345AD05D) libcxxabi-5.0.0.src.tar.xz ... FAILED (unknown public key 0FC3042E345AD05D) [...] ``` To “fix” this, simply import the key: ```auto gpg --recv-key 0FC3042E345AD05D ``` ---
**Author:** ![anon37112038](https://forum.endeavouros.com/letter_avatar_proxy/v4/letter/a/a3d4f5/32.png) [@anon37112038](https://forum.endeavouros.com/u/anon37112038)\ **Post date:** [August 11, 2020, 2:30am UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756/2 "2020-08-11T02:30:06Z")
Darn you @jonathon, you are going to run me out of likes. ---
**Author:** ![anon96036739](https://forum.endeavouros.com/letter_avatar_proxy/v4/letter/a/b5ac83/32.png) [@anon96036739](https://forum.endeavouros.com/u/anon96036739)\ **Post date:** [August 26, 2020, 12:54am UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756/3 "2020-08-26T00:54:54Z")
Thanks for posting this 🙂 Fixed things perfectly. 👍🏻 no-greeting no-permission-warning lock-never keyserver-options timeout=10 keyserver-options import-clean keyserver-options no-self-sigs-only keyserver hkp://keys.gnupg.net:80 ---
**Author:** ![tanayseven](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/tanayseven/32/47077_2.png) [@tanayseven](https://forum.endeavouros.com/u/tanayseven)\ **Post date:** [March 6, 2022, 12:53am UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756/4 "2022-03-06T00:53:20Z")
That’s great, this was very helpful to me ---
**Author:** ![Sharp](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/sharp/32/73066_2.png) [@Sharp](https://forum.endeavouros.com/u/Sharp)\ **Post date:** [August 11, 2022, 8:03pm UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756/5 "2022-08-11T20:03:09Z")
I had this issue with my installed system earlier today. I used the search feature of the forum and found this thread. The first post by jonathon cleared up and corrected my issue. Many thanks Sir! 😀 ---
**Author:** ![manuel](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/manuel/32/396_2.png) [@manuel](https://forum.endeavouros.com/u/manuel)\ **Post date:** [August 13, 2022, 11:13am UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756/6 "2022-08-13T11:13:38Z")
---
**Author:** ![chococandy](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/chococandy/32/50445_2.png) [@chococandy](https://forum.endeavouros.com/u/chococandy)\ **Post date:** [May 24, 2023, 1:47pm UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756/7 "2023-05-24T13:47:34Z")
Thanks! It works 🙂 ---
**Author:** ![pzc](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/pzc/32/79896_2.png) [@pzc](https://forum.endeavouros.com/u/pzc)\ **Post date:** [August 27, 2023, 11:04pm UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756/8 "2023-08-27T23:04:24Z")
❤ thank you for posting this. ---
**Author:** ![resizingbroken](https://forum.endeavouros.com/letter_avatar_proxy/v4/letter/r/e47c2d/32.png) [@resizingbroken](https://forum.endeavouros.com/u/resizingbroken)\ **Post date:** [September 12, 2023, 6:37pm UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756/9 "2023-09-12T18:37:55Z")
Hello, I am getting: ```auto error: archlinux-keyring: signature from "Christian Hesse " is unknown trust :: File /var/cache/pacman/pkg/archlinux-keyring-20230821-2-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)). Do you want to delete it? [Y/n] Y error: endeavouros-keyring: signature from "EndeavourOS " is unknown trust :: File /var/cache/pacman/pkg/endeavouros-keyring-20230523-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)). Do you want to delete it? [Y/n] Y error: failed to commit transaction (invalid or corrupted package (PGP signature)) Errors occurred, no packages were upgraded. ``` What do I do in this case? I already tried updating mirror servers with `eos-rankmirrors` and `sudo reflector --country Germany --protocol https --save /etc/pacman.d/mirrorlist` ---
**Author:** ![pycrk](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/pycrk/32/71109_2.png) [@pycrk](https://forum.endeavouros.com/u/pycrk)\ **Post date:** [September 12, 2023, 6:41pm UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756/10 "2023-09-12T18:41:29Z")
update your keyrings with: ```auto sudo pacman -Sy archlinux-keyring endeavouros-keyring ``` ---
**Author:** ![resizingbroken](https://forum.endeavouros.com/letter_avatar_proxy/v4/letter/r/e47c2d/32.png) [@resizingbroken](https://forum.endeavouros.com/u/resizingbroken)\ **Post date:** [September 12, 2023, 6:48pm UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756/11 "2023-09-12T18:48:47Z")
that’s the command i’m getting the error with 😕 ![2023-09-12_20-47](https://forum.endeavouros.com/uploads/default/original/3X/c/e/ce8478fea486f4157b20ecaeef77441442f5ca10.png) edit: I got it working using the `If you have any other errors, you can clear out the pacman keyring and start fresh:` section ---
**Author:** ![nickwe](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/nickwe/32/87781_2.png) [@nickwe](https://forum.endeavouros.com/u/nickwe)\ **Post date:** [January 13, 2024, 3:10pm UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756/12 "2024-01-13T15:10:14Z")
tried everything, but definitively can’t make it work ☹ ```auto sudo pacman -Syy archlinux-keyring endeavouros-keyring :: Synchronising package databases... endeavouros 21,6 KiB 122 KiB/s 00:00 [-----------------------------------------------------------------------------------------------------------------------] 100% core 128,9 KiB 516 KiB/s 00:00 [-----------------------------------------------------------------------------------------------------------------------] 100% extra 8,3 MiB 8,53 MiB/s 00:01 [-----------------------------------------------------------------------------------------------------------------------] 100% community 45,0 B 276 B/s 00:00 [-----------------------------------------------------------------------------------------------------------------------] 100% multilib 139,5 KiB 581 KiB/s 00:00 [-----------------------------------------------------------------------------------------------------------------------] 100% resolving dependencies... looking for conflicting packages... Package (2) New Version Net Change core/archlinux-keyring 20231222-1 1,65 MiB endeavouros/endeavouros-keyring 20231222-1 0,01 MiB Total Installed Size: 1,66 MiB :: Proceed with installation? [Y/n] (2/2) checking keys in keyring [-----------------------------------------------------------------------------------------------------------------------] 100% downloading required keys... :: Import PGP key 6D42BDD116E0068F, "Christian Hesse "? [Y/n] :: Import PGP key A367FB01AE54040E, "manuel "? [Y/n] (2/2) checking package integrity [-----------------------------------------------------------------------------------------------------------------------] 100% error: archlinux-keyring: signature from "Christian Hesse " is unknown trust :: File /var/cache/pacman/pkg/archlinux-keyring-20231222-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)). Do you want to delete it? [Y/n] error: endeavouros-keyring: signature from "manuel " is unknown trust :: File /var/cache/pacman/pkg/endeavouros-keyring-20231222-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)). Do you want to delete it? [Y/n] error: failed to commit transaction (invalid or corrupted package (PGP signature)) Errors occurred, no packages were upgraded. ``` ---
**Author:** ![nickwe](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/nickwe/32/87781_2.png) [@nickwe](https://forum.endeavouros.com/u/nickwe)\ **Post date:** [January 13, 2024, 3:27pm UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756/13 "2024-01-13T15:27:48Z")
So, I changed `SigLevel = TrustAll` in `/etc/pacman.conf` and that allowed me to reinstall the archlinux-keyring package ---
**Author:** ![joekamprad](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/joekamprad/32/77608_2.png) [@joekamprad](https://forum.endeavouros.com/u/joekamprad)\ **Post date:** [January 15, 2024, 8:18pm UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756/14 "2024-01-15T20:18:30Z")
set it back after fixing… ---
**Author:** ![joekamprad](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/joekamprad/32/77608_2.png) [@joekamprad](https://forum.endeavouros.com/u/joekamprad)\ **Post date:** [January 15, 2024, 8:20pm UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756/15 "2024-01-15T20:20:59Z")
and only to give the info… do not post in old threads… i only find this by accident… Better open a new one and link to one with similar issue if needed. And indeed welcome at the forum! :enos: ---
**Author:** ![sekai](https://forum.endeavouros.com/letter_avatar_proxy/v4/letter/s/838e76/32.png) [@sekai](https://forum.endeavouros.com/u/sekai)\ **Post date:** [May 28, 2024, 2:34pm UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756/18 "2024-05-28T14:34:52Z")
Thanks so much to Jonathon! I wound up having to clear out the pacman keyring as instructed, and then was able to update. Saved me from needing to do a fresh install! ---
**Author:** ![joekamprad](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/joekamprad/32/77608_2.png) [@joekamprad](https://forum.endeavouros.com/u/joekamprad)\ **Post date:** [June 18, 2024, 8:08pm UTC](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756/20 "2024-06-18T20:08:26Z")