Community Packages

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#75262 - [docker] pacman -Syu or Syyu fails due to signatures

Attached to Project: Community Packages
Opened by Mircea Dan (ByReaL) - Thursday, 07 July 2022, 00:45 GMT
Last edited by Toolybird (Toolybird) - Friday, 02 September 2022, 21:32 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To No-one
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
docker pacman -Syu or Syyu fails due to signatures


Additional info:
* package version(s)
* config and/or log files etc.
* link to upstream bug report, if any

Steps to reproduce:

create Dockerfile with:
'''
FROM archlinux/base

RUN pacman --noconfirm -Sy
RUN pacman --noconfirm -S archlinux-keyring # you can remove this
RUN pacman --noconfirm -Syyu # you can use Syu instead of Syyu
'''

run:
docker build --no-cache /<patch to archlinux docker file created in previous step>/archlinux


you will get errors like:
checking keyring...
checking package integrity...
error: pacman: signature from "Morten Linderud <morten@linderud.pw>" is marginal trust
:: File /var/cache/pacman/pkg/pacman-6.0.1-5-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] error: failed to commit transaction (invalid or corrupted package)

Errors occurred, no packages were upgraded.
The command '/bin/sh -c pacman --noconfirm -Syyu' returned a non-zero code: 1




or like this:
checking keyring...
downloading required keys...
:: Import PGP key 9D4C5AA15426DA0A, "Frederik Schwan <freswa@archlinux.org>"? [Y/n]
:: Import PGP key 9D4C5AA15426DA0A, "Frederik Schwan <freswa@archlinux.org>"? [Y/n]
:: Import PGP key 9D4C5AA15426DA0A, "Frederik Schwan <freswa@archlinux.org>"? [Y/n]
:: Import PGP key 3B94A80E50A477C7, "Jan Alexander Steffens (heftig) <heftig@archlinux.org>"? [Y/n]
:: Import PGP key 3B94A80E50A477C7, "Jan Alexander Steffens (heftig) <heftig@archlinux.org>"? [Y/n]
:: Import PGP key 3B94A80E50A477C7, "Jan Alexander Steffens (heftig) <heftig@archlinux.org>"? [Y/n]
:: Import PGP key 3B94A80E50A477C7, "Jan Alexander Steffens (heftig) <heftig@archlinux.org>"? [Y/n]
:: Import PGP key 3B94A80E50A477C7, "Jan Alexander Steffens (heftig) <heftig@archlinux.org>"? [Y/n]
:: Import PGP key 3B94A80E50A477C7, "Jan Alexander Steffens (heftig) <heftig@archlinux.org>"? [Y/n]
:: Import PGP key 3B94A80E50A477C7, "Jan Alexander Steffens (heftig) <heftig@archlinux.org>"? [Y/n]
:: Import PGP key 3B94A80E50A477C7, "Jan Alexander Steffens (heftig) <heftig@archlinux.org>"? [Y/n]
:: Import PGP key 3B94A80E50A477C7, "Jan Alexander Steffens (heftig) <heftig@archlinux.org>"? [Y/n]
:: Import PGP key 3B94A80E50A477C7, "Jan Alexander Steffens (heftig) <heftig@archlinux.org>"? [Y/n]
:: Import PGP key 3B94A80E50A477C7, "Jan Alexander Steffens (heftig) <heftig@archlinux.org>"? [Y/n]
:: Import PGP key 3B94A80E50A477C7, "Jan Alexander Steffens (heftig) <heftig@archlinux.org>"? [Y/n]
checking package integrity...
error: libcap-ng: signature from "Levente Polyak (anthraxx) <levente@leventepolyak.net>" is unknown trust
error: bzip2: signature from "Levente Polyak (anthraxx) <levente@leventepolyak.net>" is unknown trust
:: File /var/cache/pacman/pkg/libcap-ng-0.8.3-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
:: File /var/cache/pacman/pkg/bzip2-1.0.8-4-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] error: pam: signature from "Levente Polyak (anthraxx) <levente@leventepolyak.net>" is unknown trust

:: File /var/cache/pacman/pkg/pam-1.5.2-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] error: zstd: signature from "Levente Polyak (anthraxx) <levente@leventepolyak.net>" is unknown trust

:: File /var/cache/pacman/pkg/zstd-1.5.2-7-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] error: libpsl: signature from "Levente Polyak (anthraxx) <levente@leventepolyak.net>" is unknown trust

:: File /var/cache/pacman/pkg/libpsl-0.21.1-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] error: tpm2-tss: signature from "Jonas Witschel <diabonas@gmx.de>" is unknown trust

:: File /var/cache/pacman/pkg/tpm2-tss-3.2.0-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] error: pinentry: signature from "Levente Polyak (anthraxx) <levente@leventepolyak.net>" is unknown trust

:: File /var/cache/pacman/pkg/pinentry-1.2.0-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
:: File /var/cache/pacman/pkg/gzip-1.12-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] error: gzip: signature from "Levente Polyak (anthraxx) <levente@leventepolyak.net>" is unknown trust
error: failed to commit transaction (invalid or corrupted package)

Errors occurred, no packages were upgraded.
The command '/bin/sh -c pacman --noconfirm -Syu' returned a non-zero code: 1





This task depends upon

Closed by  Toolybird (Toolybird)
Friday, 02 September 2022, 21:32 GMT
Reason for closing:  No response
Comment by Toolybird (Toolybird) - Wednesday, 03 August 2022, 06:54 GMT
Is this still happening? The signatures have been in a state of flux lately so the usual advice is to issue the command listed here [1] which I can see you have already mentioned above...so I'm not quite sure what's up with your docker.

[1] https://wiki.archlinux.org/title/Pacman/Package_signing#Upgrade_system_regularly

Loading...