FS#49960 - [python-msgpack]Invalid or corrupted package (PGP signature)

Attached to Project: Arch Linux
Opened by misha (kmisha) - Tuesday, 05 July 2016, 17:34 GMT
Last edited by Doug Newgard (Scimmia) - Thursday, 07 July 2016, 00:52 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To No-one
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

Description: package python-msgpack installation error


Additional info:
package version: 0.4.7-1

% LANG=C sudo pacman -Sc
Packages to keep:
All locally installed packages

Cache directory: /var/cache/pacman/pkg/
:: Do you want to remove all other packages from cache? [Y/n] y
removing old packages from cache...

Database directory: /var/lib/pacman/
:: Do you want to remove unused repositories? [Y/n] y
removing unused sync repositories...
% LANG=C sudo pacman -Syu
:: Synchronizing package databases...
core is up to date
extra is up to date
community is up to date
:: Starting full system upgrade...
there is nothing to do
% LANG=posix sudo pacman -S python-neovim
resolving dependencies...
looking for conflicting packages...

Packages (4) python-click-6.6-1 python-greenlet-0.4.10-1 python-msgpack-0.4.7-1
python-neovim-0.1.9-1

Total Download Size: 0.23 MiB
Total Installed Size: 1.25 MiB

:: Proceed with installation? [Y/n] y
:: Retrieving packages...
python-msgpack-0.4.... 64.5 KiB 206K/s 00:00 [########################] 100%
python-greenlet-0.4... 15.1 KiB 891K/s 00:00 [########################] 100%
python-click-6.6-1-any 107.9 KiB 344K/s 00:00 [########################] 100%
python-neovim-0.1.9... 52.4 KiB 748K/s 00:00 [########################] 100%
(4/4) checking keys in keyring [########################] 100%
(4/4) checking package integrity [########################] 100%
error: python-msgpack: signature from "Johannes Löthberg <johannes@kyriasis.com>" is unknown trust
:: File /var/cache/pacman/pkg/python-msgpack-0.4.7-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.
% LANG=posix sudo pacman -S python-msgpack
resolving dependencies...
looking for conflicting packages...

Packages (1) python-msgpack-0.4.7-1

Total Download Size: 0.06 MiB
Total Installed Size: 0.25 MiB

:: Proceed with installation? [Y/n] y
:: Retrieving packages...
python-msgpack-0.4.... 64.5 KiB 206K/s 00:00 [########################] 100%
(1/1) checking keys in keyring [########################] 100%
(1/1) checking package integrity [########################] 100%
error: python-msgpack: signature from "Johannes Löthberg <johannes@kyriasis.com>" is unknown trust
:: File /var/cache/pacman/pkg/python-msgpack-0.4.7-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.

This task depends upon

Closed by  Doug Newgard (Scimmia)
Thursday, 07 July 2016, 00:52 GMT
Reason for closing:  Not a bug
Additional comments about closing:  Something went wrong with the archlinux-keyring update
Comment by misha (kmisha) - Tuesday, 05 July 2016, 17:36 GMT
% LANG=C sudo pacman -S python2-msgpack
resolving dependencies...
looking for conflicting packages...

Packages (1) python2-msgpack-0.4.7-1

Total Download Size: 0,06 MiB
Total Installed Size: 0,25 MiB

:: Proceed with installation? [Y/n] y
:: Retrieving packages...
python2-msgpack-0.4... 64,3 KiB 199K/s 00:00 [########################] 100%
(1/1) checking keys in keyring [########################] 100%
(1/1) checking package integrity [########################] 100%
error: python2-msgpack: signature from "Johannes Löthberg <johannes@kyriasis.com>" is unknown trust
:: File /var/cache/pacman/pkg/python2-msgpack-0.4.7-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.
Comment by misha (kmisha) - Wednesday, 06 July 2016, 05:42 GMT
Today everything was installed fine.
misha@kmisha> LANG=C sudo pacman -S python-neovim ~/src/config-files
[sudo] password for misha:
warning: python-neovim-0.1.9-1 is up to date -- reinstalling
resolving dependencies...
looking for conflicting packages...

Packages (1) python-neovim-0.1.9-1

Total Installed Size: 0.28 MiB
Net Upgrade Size: 0.00 MiB

:: Proceed with installation? [Y/n] y
(1/1) checking keys in keyring [##########################################] 100%
(1/1) checking package integrity [##########################################] 100%
(1/1) loading package files [##########################################] 100%
(1/1) checking for file conflicts [##########################################] 100%
(1/1) checking available disk space [##########################################] 100%
:: Processing package changes...
(1/1) reinstalling python-neovim [##########################################] 100%
Comment by Doug Newgard (Scimmia) - Wednesday, 06 July 2016, 06:42 GMT
This reeks of a partial update. What version of the archlinux-keyring package?
Comment by misha (kmisha) - Wednesday, 06 July 2016, 06:48 GMT
LANG=C pacman -Qi archlinux-keyring
Name : archlinux-keyring
Version : 20160402-1
Description : Arch Linux PGP keyring
Architecture : any
URL : https://projects.archlinux.org/archlinux-keyring.git/
Licenses : GPL
Groups : None
Provides : None
Depends On : None
Optional Deps : None
Required By : pacman
Optional For : None
Conflicts With : None
Replaces : None
Installed Size : 792.00 KiB
Packager : Pierre Schmitz <pierre@archlinux.de>
Build Date : Sat Apr 2 11:47:44 2016
Install Date : Wed May 25 14:18:21 2016
Install Reason : Installed as a dependency for another package
Install Script : Yes
Validated By : Signature

pacman.conf in attach.
Comment by Doug Newgard (Scimmia) - Wednesday, 06 July 2016, 06:57 GMT
OK, what does `pacman-key --list-sigs Johannes` give you?
Comment by misha (kmisha) - Wednesday, 06 July 2016, 07:03 GMT
Sorry, I'm working on another computer, will check tonight.
On this computer:
misha@kmisha> LANG=C pacman-key --list-sigs Johannes
gpg: Note: trustdb not writable
pub rsa8192 2014-01-14 [SC] [expires: 2018-02-19]
5134EF9EAF65F95B6BB1608E50FB9B273A9D0BB5
uid [ full ] Johannes L�thberg <johannes@kyriasis.com>
sig 7EFD567D4C7EA887 2015-05-12 Ionut Biru (Arch Linux Master Key) <ionut@master-key.archlinux.org>
sig 3348882F6AC6A4C2 2015-05-14 Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>
sig 5184252D824B18E8 2015-05-20 Thomas B�chler (Arch Linux Master Key) <thomas@master-key.archlinux.org>
sig BA1DFB64FFF979E7 2015-04-22 Allan McRae (Arch Linux Master Key) <allan@master-key.archlinux.org>
sig A88E23E377514E00 2015-12-23 Florian Pritz (Arch Linux Master Key) <florian@master-key.archlinux.org>
sig 3 50FB9B273A9D0BB5 2016-02-20 Johannes L�thberg <johannes@kyriasis.com>
sub rsa8192 2014-01-14 [E] [expires: 2018-02-19]
sig 50FB9B273A9D0BB5 2016-02-20 Johannes L�thberg <johannes@kyriasis.com>
sub rsa8192 2014-09-21 [S] [expires: 2018-02-19]
sig 50FB9B273A9D0BB5 2016-02-20 Johannes L�thberg <johannes@kyriasis.com>
Comment by Doug Newgard (Scimmia) - Wednesday, 06 July 2016, 07:07 GMT
Wait, so the archlinux-keyring info wasn't even from the system where you have the issue?

Useless.
Comment by misha (kmisha) - Wednesday, 06 July 2016, 07:11 GMT
Yes, sorry. I'll check back later on the computer where there was a problem.
Thanks for the support.
Comment by misha (kmisha) - Wednesday, 06 July 2016, 15:05 GMT
% LANG=C pacman -Qi archlinux-keyring
Name : archlinux-keyring
Version : 20160402-1
Description : Arch Linux PGP keyring
Architecture : any
URL : https://projects.archlinux.org/archlinux-keyring.git/
Licenses : GPL
Groups : None
Provides : None
Depends On : None
Optional Deps : None
Required By : pacman
Optional For : None
Conflicts With : None
Replaces : None
Installed Size : 792,00 KiB
Packager : Pierre Schmitz <pierre@archlinux.de>
Build Date :
Install Date :
Install Reason : Installed as a dependency for another package
Install Script : Yes
Validated By : Signature

% LANG=C pacman-key --list-sigs Johannes
gpg: Note: trustdb not writable
pub rsa8192 2014-01-14 [SC] [expired: 2016-06-03]
5134EF9EAF65F95B6BB1608E50FB9B273A9D0BB5
uid [ expired] Johannes L�thberg <johannes@kyriasis.com>
sig 7EFD567D4C7EA887 2015-05-12 Ionut Biru (Arch Linux Master Key) <ionut@master-key.archlinux.org>
sig 3348882F6AC6A4C2 2015-05-14 Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>
sig 5184252D824B18E8 2015-05-20 Thomas B�chler (Arch Linux Master Key) <thomas@master-key.archlinux.org>
sig BA1DFB64FFF979E7 2015-04-22 Allan McRae (Arch Linux Master Key) <allan@master-key.archlinux.org>
sig A88E23E377514E00 2015-12-23 Florian Pritz (Arch Linux Master Key) <florian@master-key.archlinux.org>
sig 3 50FB9B273A9D0BB5 2015-06-04 Johannes L�thberg <johannes@kyriasis.com>
Comment by Doug Newgard (Scimmia) - Wednesday, 06 July 2016, 15:14 GMT
OK, that's strange. You do have the current package, but it didn't seem to actually update the database as Johannes' key is still expired. Reinstalling archlinux-keyring may do the job, or just run pacman-key --refresh-keys. I wonder what went wrong on the previous installation.
Comment by misha (kmisha) - Wednesday, 06 July 2016, 15:51 GMT
% LANG=C pacman -Qi archlinux-keyring
Name : archlinux-keyring
Version : 20160402-1
Description : Arch Linux PGP keyring
Architecture : any
URL : https://projects.archlinux.org/archlinux-keyring.git/
Licenses : GPL
Groups : None
Provides : None
Depends On : None
Optional Deps : None
Required By : pacman
Optional For : None
Conflicts With : None
Replaces : None
Installed Size : 792,00 KiB
Packager : Pierre Schmitz <pierre@archlinux.de>
Build Date :
Install Date :
Install Reason : Installed as a dependency for another package
Install Script : Yes
Validated By : Signature

% LANG=C pacman-key --list-sigs Johannes
gpg: Note: trustdb not writable
pub rsa8192 2014-01-14 [SC] [expired: 2016-06-03]
5134EF9EAF65F95B6BB1608E50FB9B273A9D0BB5
uid [ expired] Johannes L�thberg <johannes@kyriasis.com>
sig 7EFD567D4C7EA887 2015-05-12 Ionut Biru (Arch Linux Master Key) <ionut@master-key.archlinux.org>
sig 3348882F6AC6A4C2 2015-05-14 Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>
sig 5184252D824B18E8 2015-05-20 Thomas B�chler (Arch Linux Master Key) <thomas@master-key.archlinux.org>
sig BA1DFB64FFF979E7 2015-04-22 Allan McRae (Arch Linux Master Key) <allan@master-key.archlinux.org>
sig A88E23E377514E00 2015-12-23 Florian Pritz (Arch Linux Master Key) <florian@master-key.archlinux.org>
sig 3 50FB9B273A9D0BB5 2015-06-04 Johannes L�thberg <johannes@kyriasis.com>
Comment by misha (kmisha) - Wednesday, 06 July 2016, 15:58 GMT
pacman-key --refresh-keys it helped me. Thanks for the help.

Loading...