Trouble updating (invalid PGP)

I’m having trouble updating.

error: eos-bash-shared: signature from "EndeavourOS <info@endeavouros.com>" is unknown trust
:: File /var/cache/pacman/pkg/eos-bash-shared-1.9.9-2-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: wine-lol: signature from "Manuel Reimer (Arch Linux package signing key) <mail+arch@m-reimer.de>" is unknown trust
:: File /var/cache/pacman/pkg/wine-lol-5.18-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: failed to commit transaction (invalid or corrupted package)

I have tried everything in this thread except gpg --recv-key

See if this works:

sudo pacman-key --recv-keys 497AF50C92AD2384C56E1ACA003DB8B0CB23504F

1 Like
gpg: key 003DB8B0CB23504F: "EndeavourOS <info@endeavouros.com>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1

Do this:

sudo pacman-key --lsign 497AF50C92AD2384C56E1ACA003DB8B0CB23504F

and run your update again.

Sorry, should be:


`sudo pacman-key --lsign-key 497AF50C92AD2384C56E1ACA003DB8B0CB23504F`

:blush:

1 Like

That solved it for the endeavour package. How can I retrieve the key for an aur package like wine-lol?

Alright, then lsign was enough?

First one worked yeah.

Does it give you any key number when you try to install? Then you could do as above if it is a trusty source.

It unfortunately does not as far as I can tell.

:: Retrieving packages...
 qt5-declarative-...     4,9 MiB  11,3 MiB/s 00:00 [--------------] 100%
 wine-lol-5.18-1-...    29,7 MiB  9,97 MiB/s 00:03 [--------------] 100%
 Total (2/2)            34,6 MiB  9,20 MiB/s 00:04 [--------------] 100%
(18/18) checking keys in keyring                   [--------------] 100%
(18/18) checking package integrity                 [--------------] 100%
error: wine-lol: signature from "Manuel Reimer (Arch Linux package signing key) <mail+arch@m-reimer.de>" is unknown trust
:: File /var/cache/pacman/pkg/wine-lol-5.18-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.
error installing repo packages

Remove this and try to build it again. If it doesn’t work I guess you need to contact the maintainer of the package.

1 Like

The file does not exist. Thanks though.

edit: found it sudo pacman-key --lsign-key D5E3DF45D8312635

1 Like

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.