Unknown Trust issue blocking updates

[steky9]

So I cloned my HD to a new larger HD, and after 2 months the new HD failed, so I restored the old one. However as a result, I’m getting the standard “Signature from X is unknown trust” issue when I try to do an update. The standard resolution to this is to install the endeavouros-keyring package. That too failed for the same reason and so I had to use the procedure documented at

Error WHILE updating endeavouros-keyring

Hi all! I’ve got an odd issue. I haven’t used my machine in a while, so my packages are fairly out of date. When trying to update the packages, I got the usual “invalid or corrupted package” PGP errors like I usually do when it’s been a while since updating. BUT, here’s what’s different. I am getting an “invalid or corrupted package” error WHILE running pacman -Sy endeavouros-keyring: error: endeavouros-keyring: signature from "manuel <manuel@endeavouros.com>" is unknown trust :: File /var/ca…

of changing the SigLevel to Never to install it, and then changing it back to PackageRequired afterwards. That works, but it doesn’t resolve the issue with trying to update the rest of the system as it just gives the same unknown trust error for every package. Neither does using the command

sudo pacman -U /var/cache/pacman/pkg/{archlinux,endeavouros}-keyring*.pkg.tar.zst

that produces the error

loading packages...
error: '/var/cache/pacman/pkg/archlinux-keyring-20230821-2-any.pkg.tar.zst': invalid or corrupted package (PGP signature)
error: '/var/cache/pacman/pkg/archlinux-keyring-20230918-1-any.pkg.tar.zst': invalid or corrupted package (PGP signature)
error: '/var/cache/pacman/pkg/archlinux-keyring-20231017-1-any.pkg.tar.zst': invalid or corrupted package (PGP signature)
error: '/var/cache/pacman/pkg/archlinux-keyring-20231107-1-any.pkg.tar.zst': invalid or corrupted package (PGP signature)
error: '/var/cache/pacman/pkg/archlinux-keyring-20231113-1-any.pkg.tar.zst': invalid or corrupted package (PGP signature)
error: '/var/cache/pacman/pkg/archlinux-keyring-20231130-1-any.pkg.tar.zst': invalid or corrupted package (PGP signature)
error: '/var/cache/pacman/pkg/archlinux-keyring-20231222-1-any.pkg.tar.zst': invalid or corrupted package (PGP signature)
error: '/var/cache/pacman/pkg/archlinux-keyring-20240208-1-any.pkg.tar.zst': invalid or corrupted package (PGP signature)
error: '/var/cache/pacman/pkg/archlinux-keyring-20240313-1-any.pkg.tar.zst': invalid or corrupted package (PGP signature)
error: '/var/cache/pacman/pkg/archlinux-keyring-20240429-1-any.pkg.tar.zst': invalid or corrupted package (PGP signature)
error: '/var/cache/pacman/pkg/archlinux-keyring-20240520-1-any.pkg.tar.zst': invalid or corrupted package (PGP signature)
error: '/var/cache/pacman/pkg/archlinux-keyring-20240609-1-any.pkg.tar.zst': invalid or corrupted package (PGP signature)
error: '/var/cache/pacman/pkg/archlinux-keyring-20240709-1-any.pkg.tar.zst': invalid or corrupted package (PGP signature)
warning: endeavouros-keyring-20231222-1 is up to date -- reinstalling

Any way to rescue this, or is it just best to do a reinstall?

[ricklinux]

You should be able to correct this issue. You may have to remove the cache and try again as it shows corrupted packages. I would definitely update the mirrors as well before trying again.

[steky9]

So I deleted the archlinux keyring files from the cache, updated the mirrors, and reinstalled the endeavouros-keyring package again (didn’t require changing the SigLevel this time) but I still get the same unknown trust issue when I do a pacman -Syu

[ricklinux]

Have you looked at the wiki here?

https://discovery.endeavouros.com/signature-and-keyring/pacman-keyring-issues/2021/03/

[steky9]

Ok, clearing out the keyring and starting from scratch seems to have fixed it. Thank you for the fix.