Keyring issue while updating

To save opening a new thread i’m also having this issue. I tried all the suggestions in the other thread with no luck. The ouput of sudo pacman -Syu is below:

error: python-markdown: key "Eli Schwartz <eschwartz@archlinux.org>" is disabled
:: File /var/cache/pacman/pkg/python-markdown-3.3.4-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.

The results of sudo pacman -Sy endeavouros-keyring are:

:: Proceed with installation? [Y/n] 
(1/1) checking keys in keyring                                                             [-----------------------------------------------------] 100%
(1/1) checking package integrity                                                           [-----------------------------------------------------] 100%
(1/1) loading package files                                                                [-----------------------------------------------------] 100%
(1/1) checking for file conflicts                                                          [-----------------------------------------------------] 100%
:: Processing package changes...
(1/1) reinstalling endeavouros-keyring                                                     [-----------------------------------------------------] 100%
==> Appending keys from endeavouros.gpg...
==> Updating trust database...
gpg: next trustdb check due at 2023-07-12
:: Running post-transaction hooks...
(1/2) Arming ConditionNeedsUpdate...
(2/2) Checking which packages need to be rebuilt
foreign	python-diskcache
foreign	vorta

What i usually do in this case is say yes to delete. Then i update the mirrors and try again. Usually works for me.

Edit: Maybe i misunderstood?

thanks, just gave it a go as you suggested and it’s exactly the same invalid or corrupted package error

Is that the full output?

You need to run pacman -Sy archlinux-keyring first.

Nope, here’s the entire output. I gives me these “is newer” warnings on every single package I have installed, so I’ve replaced a thousand or so lines of this with ellipsis below:

sudo pacman -Syu
:: Synchronising package databases...
 endeavouros is up to date
 core is up to date
 extra is up to date
 community is up to date
 multilib is up to date
:: Starting full system upgrade...
warning: a2ps: local (4.15.4-1) is newer than extra (4.14-12)
warning: a52dec: local (0.8.0-1) is newer than extra (0.7.4-11)
warning: accountsservice: local (23.13.9-1) is newer than extra (0.6.55-3)
...
:: Replace libwbclient with extra/smbclient? [Y/n] 
...
warning: zvbi: local (0.2.41-1) is newer than extra (0.2.35-4)
warning: zxing-cpp: local (2.0.0-2) is newer than extra (1.1.1-1)
resolving dependencies...
looking for conflicting packages...

Package (4)                 Old Version  New Version  Net Change  Download Size

libwbclient                 4.18.2-2                   -0.12 MiB               
community/python-dnspython               1:1.16.0-3     1.27 MiB               
community/python-markdown                3.3.4-1        0.50 MiB       0.13 MiB
extra/smbclient             4.18.2-2     4.14.2-1       0.56 MiB               

Total Download Size:    0.13 MiB
Total Installed Size:  29.88 MiB
Net Upgrade Size:       2.22 MiB

:: Proceed with installation? [Y/n] 
:: Retrieving packages...
 python-markdown-3.3.4-1-any                                   129.3 KiB  1771 KiB/s 00:00 [-----------------------------------------------------] 100%
(3/3) checking keys in keyring                                                             [-----------------------------------------------------] 100%
(3/3) checking package integrity                                                           [-----------------------------------------------------] 100%
error: python-markdown: key "Eli Schwartz <eschwartz@archlinux.org>" is disabled
:: File /var/cache/pacman/pkg/python-markdown-3.3.4-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.``

Still no good i’m afraid:

sudo pacman -Sy archlinux-keyring
[sudo] password for x: 
:: Synchronising package databases...
 endeavouros is up to date
 core is up to date
 extra is up to date
 community is up to date
 multilib is up to date
warning: archlinux-keyring-20210110-1 is up to date -- reinstalling
resolving dependencies...
looking for conflicting packages...

Package (1)             Old Version  New Version  Net Change

core/archlinux-keyring  20210110-1   20210110-1     0.00 MiB

Total Installed Size:  1.31 MiB
Net Upgrade Size:      0.00 MiB

:: Proceed with installation? [Y/n] 
(1/1) checking keys in keyring                                                                                    [--------------------------------------------------------------------] 100%
(1/1) checking package integrity                                                                                  [--------------------------------------------------------------------] 100%
(1/1) loading package files                                                                                       [--------------------------------------------------------------------] 100%
(1/1) checking for file conflicts                                                                                 [--------------------------------------------------------------------] 100%
:: Processing package changes...
(1/1) reinstalling archlinux-keyring                                                                              [--------------------------------------------------------------------] 100%
==> Appending keys from archlinux.gpg...
==> Locally signing trusted keys in keyring...
  -> Locally signed 2 keys.
==> Importing owner trust values...
==> Updating trust database...
gpg: next trustdb check due at 2023-07-12
:: Running post-transaction hooks...
(1/2) Arming ConditionNeedsUpdate...
(2/2) Checking which packages need to be rebuilt
foreign	python-diskcache
foreign	vorta

I’m wondering if I need to remove python-diskcache and vorta?

That looks like a keyring issue.

You should follow the instructions here:

1 Like

@dalto
Is it the archkeyring that’s outdated?

2 Likes

Oh yeah, maybe resorting mirrors is the answer.

Thanks I’ve already tried those instructions without any joy and just followed them again. Still getting exactly the same error. I’m going to give removing those two packages a go

Try resorting your mirrors from the welcome application.

ok cheers will try resorting the mirrors again and update

1 Like

After resorting you will probably need to update list this:

sudo pacman -Sy archlinux-keyring endeavouros-keyring
sudo pacman -Syu

resorted the mirror list and ran those commands, still getting the same corrupted package error message. Is it worth a reboot?

I wonder if it has multiple cache packages that gives the errors.

Can you share the output from the first command

I decided to resort the mirrors again but picked a different country, sudo pacman -Syu is now giving me this:

sudo pacman -Syu


:: Synchronising package databases...
 endeavouros is up to date
 core is up to date
 extra is up to date
 community is up to date
 multilib is up to date
:: Starting full system upgrade...
resolving dependencies...
:: There are 6 providers available for xdg-desktop-portal-impl:
:: Repository extra
   1) xdg-desktop-portal-gnome  2) xdg-desktop-portal-gtk  3) xdg-desktop-portal-hyprland  4) xdg-desktop-portal-kde  5) xdg-desktop-portal-lxqt
   6) xdg-desktop-portal-wlr

Not sure if this an improvement tbh…

1 Like

Pick the one that matches your DE you are running.

thanks, i’m running i3 so that would be lxqt right?