FS#76855 - [openssl] invalid or corrupted pgp signature

Attached to Project: Arch Linux
Opened by Amin Vakil (aminvakil) - Saturday, 17 December 2022, 06:55 GMT
Last edited by David Runge (dvzrv) - Saturday, 17 December 2022, 18:00 GMT
Task Type Bug Report
Category Packages: Testing
Status Closed
Assigned To No-one
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 7
Private No

Details

Description:

error: openssl: signature from "Pierre Schmitz <pierre@archlinux.org>" is marginal trust
:: File /var/cache/pacman/pkg/openssl-3.0.7-4-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.

Additional info:
3.0.7-4

Steps to reproduce:

docker run --rm -it archlinux bash
sed -i '/\[testing\]/,/Include/s/^#//' /etc/pacman.conf && sed -i '/\[community-testing\]/,/Include/s/^#//' /etc/pacman.conf
pacman -Sy archlinux-keyring --noconfirm
pacman -Syu --noconfirm
This task depends upon

Closed by  David Runge (dvzrv)
Saturday, 17 December 2022, 18:00 GMT
Reason for closing:  Not a bug
Additional comments about closing:  The key has 4 main key signatures.
Comment by Pierre Schmitz (Pierre) - Saturday, 17 December 2022, 17:06 GMT
The problem is that without a private gpg key the keyring packages fails during update. This issue is specific to the archlinux Docker image. To fix this run "pacman-key --init" before updating the keyring package. An updated docker image should "fix" this issue as well.

Loading...