# I am receiving invalid or corrupted package error (PGP signature)

**URL:** <https://forum.endeavouros.com/t/i-am-receiving-invalid-or-corrupted-package-error-pgp-signature/41435>\
**Category:** Newbie\
**Created:** [May 30, 2023, 5:31pm UTC](https://forum.endeavouros.com/t/i-am-receiving-invalid-or-corrupted-package-error-pgp-signature/41435 "2023-05-30T17:31:00Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![IceCubeMV](https://forum.endeavouros.com/letter_avatar_proxy/v4/letter/i/e274bd/32.png) [@IceCubeMV](https://forum.endeavouros.com/u/IceCubeMV)\
**Post date:** [May 30, 2023, 5:31pm UTC](https://forum.endeavouros.com/t/i-am-receiving-invalid-or-corrupted-package-error-pgp-signature/41435/1 "2023-05-30T17:31:00Z")

</div>

The following is the output of “yay” command that is used to update my system. This output is also received when i used “sudo pacman -Syu” command.

error: endeavouros-mirrorlist: signature from “manuel [manuel@endeavouros.com](mailto:manuel@endeavouros.com)” is unknown trust  
:: File /var/cache/pacman/pkg/endeavouros-mirrorlist-23.4-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).  
Do you want to delete it? [Y/n]  
error: endeavouros-theming: signature from “manuel [manuel@endeavouros.com](mailto:manuel@endeavouros.com)” is unknown trust  
:: File /var/cache/pacman/pkg/endeavouros-theming-22.12.3.3-2-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).  
Do you want to delete it? [Y/n]  
error: welcome: signature from “manuel [manuel@endeavouros.com](mailto:manuel@endeavouros.com)” is unknown trust  
:: File /var/cache/pacman/pkg/welcome-3.64-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).  
Do you want to delete it? [Y/n]  
error: yay: signature from “manuel [manuel@endeavouros.com](mailto:manuel@endeavouros.com)” is unknown trust  
:: File /var/cache/pacman/pkg/yay-12.0.5-1-x86\_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).  
Do you want to delete it? [Y/n]  
error: failed to commit transaction (invalid or corrupted package (PGP signature))  
Errors occurred, no packages were upgraded.  
 → error installing repo packages

I tried to run the following commands

1. sudo pacman -Scc
2. sudo pacman -Sy
3. sudo pacman -Syu

but the same error is received

What to do next ?

---

<div class="post-metadata">

**Author:** ![keybreak](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/keybreak/32/9257_2.png) [@keybreak](https://forum.endeavouros.com/u/keybreak)\
**Post date:** [May 30, 2023, 5:31pm UTC](https://forum.endeavouros.com/t/i-am-receiving-invalid-or-corrupted-package-error-pgp-signature/41435/2 "2023-05-30T17:31:40Z")

</div>

1. Welcome 🥳

2. Please read this:

> [@\[FAQ\] Issues with “signature is marginal trust”, "signature is unknown trust", or “invalid or corrupted package”](https://forum.endeavouros.com/t/faq-issues-with-signature-is-marginal-trust-signature-is-unknown-trust-or-invalid-or-corrupted-package/6756):
>
> If you’re getting an error similar to “Can’t update: signature from \*\*\* is marginal trust” or “invalid or corrupted package” you probably just need to update your package signing keys: sudo pacman -Sy archlinux-keyring endeavouros-keyring sudo pacman -Syu Also make sure your system clock is correct! Of course, it’s also possible that the package file actually is corrupt. Remove it from /var/cache/pacman/pkg/ so pacman will download it again. If no package file is explicitly mentioned then yo…

---

<div class="post-metadata">

**Author:** ![pebcak](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/pebcak/32/100472_2.png) [@pebcak](https://forum.endeavouros.com/u/pebcak)\
**Post date:** [May 30, 2023, 5:33pm UTC](https://forum.endeavouros.com/t/i-am-receiving-invalid-or-corrupted-package-error-pgp-signature/41435/3 "2023-05-30T17:33:16Z")

</div>

> [@EndeavourOS keyring updated, users should update soon](https://forum.endeavouros.com/t/endeavouros-keyring-updated-users-should-update-soon/41117):
>
> Today package endeavouros-keyring was updated. This means users should update this package as soon as possible in order to avoid issues when updating other packages. Similar to what we have been doing when Arch keyring updates, you should run commands sudo pacman -Sy endeavouros-keyring sudo pacman -Syu Edit 2023.05.28: Alternatively, you can run command eos-update

I would do: `sudo pacman -Sy endeavouros-keyring && sudo pacman -Su` first.

If that won’t resolve the issue, then follow the instructions in the link posted.

---

<div class="post-metadata">

**Author:** ![IceCubeMV](https://forum.endeavouros.com/letter_avatar_proxy/v4/letter/i/e274bd/32.png) [@IceCubeMV](https://forum.endeavouros.com/u/IceCubeMV)\
**Post date:** [May 30, 2023, 5:40pm UTC](https://forum.endeavouros.com/t/i-am-receiving-invalid-or-corrupted-package-error-pgp-signature/41435/4 "2023-05-30T17:40:25Z")

</div>

Thank you sir,  
it worked seamlessly.

---

<div class="post-metadata">

**Author:** ![system](https://forum.endeavouros.com/uploads/default/original/2X/9/9ea52f9fd5ef8e609e593c362d61a36295f48be8.png) [@system](https://forum.endeavouros.com/u/system)\
**Post date:** [June 1, 2023, 5:40pm UTC](https://forum.endeavouros.com/t/i-am-receiving-invalid-or-corrupted-package-error-pgp-signature/41435/5 "2023-06-01T17:40:50Z")

</div>

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.
