FS#35053 - [python2] attempted update always results in a corrupted package

Attached to Project: Arch Linux
Opened by Hamish Paul Wilson (Hamish) - Wednesday, 01 May 2013, 19:31 GMT
Last edited by Dave Reisner (falconindy) - Wednesday, 01 May 2013, 19:38 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To No-one
Architecture i686
Severity Critical
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
Can not upgrade Python2 package with pacman - always results in a corrupted package that fails the integrity check.

Additional info:
* python2-2.7.4-1

error: python2: signature from "Stéphane Gaudreault <stephane@archlinux.org>" is invalid
:: File /var/cache/pacman/pkg/python2-2.7.4-1-i686.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] Y
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.

Steps to reproduce:
1. Open a terminal with root privileges.
2. Type "pacman -Sy python2"
3. Attempt to update.
This task depends upon

Closed by  Dave Reisner (falconindy)
Wednesday, 01 May 2013, 19:38 GMT
Reason for closing:  Not a bug
Additional comments about closing:  Possible mirror issue -- package is fine.
Comment by Daniel Wallace (gtmanfred) - Wednesday, 01 May 2013, 19:37 GMT
first of, do not pacman -Sy package, either do pacman -Su package, or -Syu ... http://ompldr.org/vYjhsYQ

second, try another mirror, and also try pacman -Syyu to force the dbs to refresh
Comment by Dave Reisner (falconindy) - Wednesday, 01 May 2013, 19:37 GMT
No, it's fine.

$ gpg --homedir /etc/pacman.d/gnupg --verify python2-2.7.4-1-x86_64.pkg.tar.xz.sig
gpg: WARNING: unsafe ownership on homedir `/etc/pacman.d/gnupg'
gpg: Signature made Sat 06 Apr 2013 07:27:08 PM EDT using RSA key ID AB441196
gpg: NOTE: trustdb not writable
gpg: Good signature from "Stéphane Gaudreault <stephane@archlinux.org>"

Delete the package, try another mirror.

Loading...