Invalid pgp signature on fresh install

ReLoneR · December 17, 2025, 10:08am

:: Proceed with installation? [Y/n]
:: Retrieving packages...
 linux-lts-6.12.62-1-x86_64         138.0 MiB  20.4 MiB/s 00:07 [----------------------------------] 100%
(30/30) checking keys in keyring                                [----------------------------------] 100%
(30/30) checking package integrity                              [----------------------------------] 100%
error: linux-lts: signature from "Andreas Radke <andyrtr@archlinux.org>" is invalid
:: File /var/cache/pacman/pkg/linux-lts-6.12.62-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.
 -> error installing repo packages

What i did to try to fix this was:

sudo pacman -Syy
sudo pacman -S archlinux-keyring
yay -Syy
yay -Syu 
sudo pacman-key --refresh-keys
sudo pacman -Sy archlinux-keyring
sudo pacamn -Syu 
sudo pacman -Sy endeavouros-keyring && sudo pacman -Su  
sudo mv /etc/pacman.d/gnupg /root/pacman-key.bak 
sudo pacman-key --init 
sudo pacman-key --populate archlinux endeavouros 
sudo pacman -Syyu

And still the same error. Like is this file actually corrupt or there is something else I didnt do

sradjoker · December 17, 2025, 10:20am

Try the instructions in this wiki article from the very beginning:

https://discovery.endeavouros.com/signature-and-keyring/pacman-keyring-issues/2021/03/

That should fix the issue

ReLoneR · December 17, 2025, 11:08am

idk still pgp error after doing this instructions from the very beginning
(i didnt have a cache for lts-6.12.62, so i deleted cache for lts-headers-6.12.62 just in case)

sudo pacman -Sy archlinux-keyring endeavouros-keyring
sudo rm /var/cache/pacman/pkg/linux-lts-6.12.62-1-x86_64.pkg.tar.zst
sudo rm /var/cache/pacman/pkg/linux-lts-headers-6.12.62-1-x86_64.pkg.tar.zst
sudo rm /var/cache/pacman/pkg/linux-lts-headers-6.12.62-1-x86_64.pkg.tar.zst.sig
sudo pacman -Syu
sudo mv /etc/pacman.d/gnupg /root/pacman-key.bak
sudo pacman-key --init
sudo pacman-key --populate archlinux endeavouros
sudo pacman -Syy archlinux-keyring endeavouros-keyring
sudo pacman -U /var/cache/pacman/pkg/{archlinux,endeavouros}-keyring*.pkg.tar.zst
sudo pacman -Syyu
timedatectl status

I guess i just need to reinstall, but i dont want to do it so badly

Moon · December 17, 2025, 4:48pm

I had a similiar issue with a different key (chaotic aur) yesterday. I had to do these step in addition:

sudo pacman-key --lsign-keyherekeynumber

ReLoneR · December 17, 2025, 4:58pm

I just did a fresh install and still have this problem
(In the installer I checked lts kernel in addition)

But linux-lts did not install on my system (linux-lts-headers did get installed), and now when I am trying to install it myself, pgp error again.

Anybody using lts-kernel? Can you try to install it ?

cactux · December 17, 2025, 5:48pm

This is what I got in my pacman-key --list

pub   rsa2048 2011-05-14 [SC]
      ADC8A1FCC15E01D45310419E94657AB20F2A092B
uid           [  full  ] Andreas Radke <andyrtr@archlinux.org>
uid           [  undef ] Andreas Radke <andreas.radke@mailbox.org>
uid           [  undef ] Andreas Radke <andyrtr@mailbox.org>

Try adding the key manually:

https://wiki.archlinux.org/title/Pacman/Package_signing#Adding_developer_keys

joekamprad · December 17, 2025, 6:47pm

I will try to replicate.. also i see some issues with archlinux keyring all over the place currently. Could be it resolves itself at any time..

Your install was what Desktop?

ReLoneR · December 17, 2025, 7:04pm

No desktop option, forgot to mention, linux-lts-headers did installed, but no linux-lts itself

joekamprad · December 17, 2025, 7:23pm

Ah no problem i will try that way too now.. In general it should install LTS kernel package thats tested indeed., but may some condition is causing an issue.

joekamprad · December 17, 2025, 7:29pm

and systemd-boot or Grub?

cactux · December 17, 2025, 7:30pm

Then it is a bit strange, I think, that you have:

Since both packages are from the same person and signed with the same key.

ReLoneR · December 17, 2025, 7:42pm

grub

joekamprad · December 17, 2025, 7:46pm

just installed headless with LTS no issue it got installed properly.
Could be something untagged from packages part on the installer?

The LTS kernel group is marked as “non-critical”

github.com/endeavouros-team/calamares

data/eos/modules/netinstall.yaml

64abe4a0f


      
            selected: true
            critical: true
            packages:
              - firewalld
              - python-pyqt6
          - name: "LTS kernel in addition"
            description: "Adding Long Term Supported kernel in addition to main one"
            hidden: false
            selected: false
            expanded: false
            critical: false
            packages:
              - linux-lts
              - linux-lts-headers
          - name: "Printing support"
            description: "Support for printing (Cups)"
            hidden: false
            expanded: false
            selected: false
            critical: true
            packages:

So installer will not bail out if some of it will not get installed as of issues, but if it would have been LTS kernel package it would be the same with the headers as @cactux said.

And i do not see any issues here with keyring i can install and uninstall packages without any issue on the same install.

ReLoneR · December 17, 2025, 7:57pm

I definetly can install linux-lts-headers, but cant install linux-lts. thats very confusing

 ~ LC_ALL=C yay -S linux-lts-headers
Sync Explicit (1): linux-lts-headers-6.12.62-1
resolving dependencies...
looking for conflicting packages...

Package (1)             New Version  Net Change

core/linux-lts-headers  6.12.62-1    138.33 MiB

Total Installed Size:  138.33 MiB

:: Proceed with installation? [Y/n]
(1/1) checking keys in keyring                                  [----------------------------------] 100%
(1/1) checking package integrity                                [----------------------------------] 100%
(1/1) loading package files                                     [----------------------------------] 100%
(1/1) checking for file conflicts                               [----------------------------------] 100%
:: Running pre-transaction hooks...
(1/1) Performing snapper pre snapshots for the following configurations...
==> root: 70
:: Processing package changes...
(1/1) installing linux-lts-headers                              [----------------------------------] 100%
:: Running post-transaction hooks...
(1/4) Arming ConditionNeedsUpdate...
(2/4) Updating module dependencies...
(3/4) Install DKMS modules
==> ERROR: Missing 6.12.62-1-lts kernel modules tree for module nvidia/580.119.02.
(4/4) Performing snapper post snapshots for the following configurations...
==> root: 71

 ~ LC_ALL=C yay -S linux-lts
Sync Explicit (1): linux-lts-6.12.62-1
resolving dependencies...
looking for conflicting packages...

Package (1)     New Version  Net Change  Download Size

core/linux-lts  6.12.62-1    138.24 MiB     138.02 MiB

Total Download Size:   138.02 MiB
Total Installed Size:  138.24 MiB

:: Proceed with installation? [Y/n]
:: Retrieving packages...
 linux-lts-6.12.62-1-x86_64         138.0 MiB  23.7 MiB/s 00:06 [----------------------------------] 100%
(1/1) checking keys in keyring                                  [----------------------------------] 100%
(1/1) checking package integrity                                [----------------------------------] 100%
error: linux-lts: signature from "Andreas Radke <andyrtr@archlinux.org>" is invalid
:: File /var/cache/pacman/pkg/linux-lts-6.12.62-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.
 -> error installing repo packages

ReLoneR · December 17, 2025, 8:15pm

cactux:

This is what I got in my pacman-key --list

pub   rsa2048 2011-05-14 [SC]
      ADC8A1FCC15E01D45310419E94657AB20F2A092B
uid           [  full  ] Andreas Radke <andyrtr@archlinux.org>
uid           [  undef ] Andreas Radke <andreas.radke@mailbox.org>
uid           [  undef ] Andreas Radke <andyrtr@mailbox.org>

This is what i got in mine

 ~ LC_ALL=C pacman-key --list-keys | grep -B3 -A2 "Andreas Radke"
gpg: Note: trustdb not writable

pub   rsa2048 2011-05-14 [SC]
      ADC8A1FCC15E01D45310419E94657AB20F2A092B
uid           [  full  ] Andreas Radke <andyrtr@archlinux.org>
uid           [  undef ] Andreas Radke <andreas.radke@mailbox.org>
uid           [  undef ] Andreas Radke <andyrtr@mailbox.org>
sub   rsa2048 2011-05-14 [E]

So, my keys are fine, right? But… I cant install linux-lts

joekamprad · December 17, 2025, 8:20pm

so check your mirrorlist ?
if key is okay the sign of the package is not okay

ReLoneR · December 17, 2025, 8:26pm

Wow, yeah

My mirrors were https, Russia, sort by rate

I switched them to Switzerland and now its working

joekamprad · December 17, 2025, 8:33pm

Last Updated: 2025-11-16 13:05 UTC —> https://archlinux.org/packages/core/any/archlinux-keyring/

so will be the mirror had outdated packages..
no magic involved

Thanks to @ringo

system · December 19, 2025, 8:34pm

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.