<div dir="ltr">Hello,<br><div class="gmail_quote"><div dir="ltr"><div><div><div><div><div><div><div><br></div>have you tried <<a href="https://wiki.archlinux.org/index.php/Pacman/Package_signing#Cannot_import_keys" target="_blank">https://wiki.archlinux.org/<wbr>index.php/Pacman/Package_<wbr>signing#Cannot_import_keys</a>><br></div>The part related to changing to the ipv4 gpg server address? I'd do something like this:<br></div><div><br></div><div>cp -r /etc/pacman.d/gnupg /etc/pacman.d/gnupg.bak<br></div>rm -rf /etc/pacman.d/gnupg<br></div>pacman-key --init<br></div><edit the address><br></div>pacman-key populate archlinux parabola<br></div>pacman-key --refresh-keys<br><div><div><div><div><div><div><br>[Although not directly related with your issue, I had some problems myself lately while i was installing the 32 bit version. Turned out that I had to install the archlinux transitional keyring instead of the other arch keyring as suggested here: <<a href="https://www.parabola.nu/news/continuation-of-i686-support/" target="_blank">https://www.parabola.nu/news/<wbr>continuation-of-i686-support/</a>><wbr>]<br></div></div></div></div></div></div></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="h5">On 6 December 2017 at 15:16, Ben <span dir="ltr"><<a href="mailto:uaqben@disroot.org" target="_blank">uaqben@disroot.org</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><div class="m_-4238421501596335136HOEnZb"><div class="m_-4238421501596335136h5">On 12/06/2017 01:43 AM, bill-auger wrote:<br>
> ben-<br>
><br>
> pbot says: reset-keyring is: sometimes necessary - see this wiki article<br>
> <a href="https://wiki.parabola.nu/Parabola_Keyring" rel="noreferrer" target="_blank">https://wiki.parabola.nu/Parab<wbr>ola_Keyring</a><br>
><br>
<br>
</div></div>Thanks Bill & Megver83<br>
<br>
<br>
Here's what I've tried:<br>
<br>
<br>
I. Resetting_the_Parabola_Keyring<br>
(<a href="https://wiki.parabola.nu/Parabola_Keyring#Resetting_the_Parabola_Keyring" rel="noreferrer" target="_blank">https://wiki.parabola.nu/Para<wbr>bola_Keyring#Resetting_the_<wbr>Parabola_Keyring</a>)<br>
<br>
+ `pacman -Scc`<br>
<br>
I was not comfortable removing all pkgs from my local cache, so I<br>
didn't go through with it.<br>
<br>
+ `pacman -Syy`<br>
<br>
~~~<br>
sudo pacman -Syy archlinux-keyring archlinux32-keyring<br>
archlinuxarm-keyring parabola-keyring<br>
:: Synchronizing package databases...<br>
libre 336.5 KiB 794K/s 00:00<br>
[######################] 100%<br>
core 108.2 KiB 636K/s 00:00<br>
[######################] 100%<br>
extra 1490.2 KiB 661K/s 00:02<br>
[######################] 100%<br>
community 3.9 MiB 944K/s 00:04<br>
[######################] 100%<br>
pcr 595.0 KiB 955K/s 00:01<br>
[######################] 100%<br>
<span>warning: archlinux-keyring-20171130-1 is up to date -- reinstalling<br>
</span>warning: archlinux32-keyring-20171113-2 is up to date -- reinstalling<br>
warning: archlinuxarm-keyring-20140119-<wbr>1 is up to date -- reinstalling<br>
<span>warning: parabola-keyring-20170912-1 is up to date -- reinstalling<br>
</span><span>resolving dependencies...<br>
looking for conflicting packages...<br>
<br>
</span>Packages (4) archlinux-keyring-20171130-1 archlinux32-keyring-20171113-2<br>
archlinuxarm-keyring-<wbr>20140119-1 parabola-keyring-20170912-1<br>
<br>
Total Installed Size: 1.09 MiB<br>
<span>Net Upgrade Size: 0.86 MiB<br>
<br>
:: Proceed with installation? [Y/n] y<br>
</span>(4/4) checking keys in keyring<br>
[######################] 100%<br>
downloading required keys...<br>
:: Import PGP key 2048R/02FD1C7A934E614545849F19<wbr>A6234074498E9CEE,<br>
"Christian Hesse (Arch Linux Package Signing) <<a href="mailto:arch@eworm.de" target="_blank">arch@eworm.de</a>>", created:<br>
2011-08-12? [Y/n] y<br>
:: Import PGP key 4096R/38D33EF29A76911343576487<wbr>33466E12EC7BA943, "Isaac<br>
David <<a href="mailto:isacdaavid@isacdaavid.info" target="_blank">isacdaavid@isacdaavid.info</a>>", created: 2015-06-25? [Y/n] y<br>
(4/4) checking package integrity<br>
[######################] 100%<br>
<span>error: archlinux-keyring: signature from "Christian Hesse (Arch Linux<br>
Package Signing) <<a href="mailto:arch@eworm.de" target="_blank">arch@eworm.de</a>>" is invalid<br>
:: File<br>
/var/cache/pacman/pkg/archlinu<wbr>x-keyring-20171130-1-any.pkg.<wbr>tar.xz is<br>
corrupted (invalid or corrupted package (PGP signature)).<br>
Do you want to delete it? [Y/n] n<br>
</span>error: archlinux32-keyring: signature from "Isaac David<br>
<span><<a href="mailto:isacdaavid@isacdaavid.info" target="_blank">isacdaavid@isacdaavid.info</a>>" is unknown trust<br>
:: File<br>
</span>/var/cache/pacman/pkg/archlinu<wbr>x32-keyring-20171113-2-any.<wbr>pkg.tar.xz is<br>
<span>corrupted (invalid or corrupted package (PGP signature)).<br>
Do you want to delete it? [Y/n] n<br>
</span>error: archlinuxarm-keyring: signature from "Isaac David<br>
<span><<a href="mailto:isacdaavid@isacdaavid.info" target="_blank">isacdaavid@isacdaavid.info</a>>" is unknown trust<br>
:: File<br>
</span>/var/cache/pacman/pkg/archlinu<wbr>xarm-keyring-20140119-1-any.<wbr>pkg.tar.xz is<br>
<span>corrupted (invalid or corrupted package (PGP signature)).<br>
Do you want to delete it? [Y/n] n<br>
</span><span>error: parabola-keyring: signature from "Isaac David<br>
<<a href="mailto:isacdaavid@isacdaavid.info" target="_blank">isacdaavid@isacdaavid.info</a>>" is unknown trust<br>
:: File /var/cache/pacman/pkg/parabola<wbr>-keyring-20170912-1-any.pkg.<wbr>tar.xz<br>
is corrupted (invalid or corrupted package (PGP signature)).<br>
Do you want to delete it? [Y/n] n<br>
</span><span>error: failed to commit transaction (invalid or corrupted package (PGP<br>
signature))<br>
Errors occurred, no packages were upgraded.<br>
</span>[ben@gnupad ~]$ sudo pacman-key --refresh-keys<br>
gpg: refreshing 3 keys from hkp://<a href="http://pool.sks-keyservers.net" rel="noreferrer" target="_blank">pool.sks-keyservers.net</a><br>
gpg: key 33466E12EC7BA943: 4 signatures not checked due to missing keys<br>
gpg: key 33466E12EC7BA943: "Isaac David <<a href="mailto:isacdaavid@isacdaavid.info" target="_blank">isacdaavid@isacdaavid.info</a>>"<br>
not changed<br>
gpg: key A6234074498E9CEE: 71 signatures not checked due to missing keys<br>
gpg: key A6234074498E9CEE: "Christian Hesse (Arch Linux Package Signing)<br>
<<a href="mailto:arch@eworm.de" target="_blank">arch@eworm.de</a>>" not changed<br>
gpg: key 7171986E4B745536: 2 signatures not checked due to missing keys<br>
gpg: key 7171986E4B745536: "Andreas Grapentin<br>
<<a href="mailto:andreas.grapentin@hpi.uni-potsdam.de" target="_blank">andreas.grapentin@hpi.uni-pot<wbr>sdam.de</a>>" not changed<br>
gpg: Total number processed: 3<br>
gpg: unchanged: 3<br>
~~~<br>
<br>
<br>
<br>
II. pacman-key --populate does not work<br>
<br>
<br>
I made a fresh USB LiveISO, and booted into it<br>
<br>
Here I took some photos with cell phone, but basically:<br>
<br>
1. `pacstrap /mnt archlinux-keyring archlinux32-keyring<br>
archlinuxarm-keyring parabola-keyring`<br>
<br>
it complained about `archlinux-keyring-20171130-1-<wbr>any.pkg.tar.xz` and<br>
signing key `Christian Hesse - <a href="mailto:arch@eworm.de" target="_blank">arch@eworm.de</a>`<br>
<br>
2. `rm<br>
/mnt/var/cache/pacman/pkg/arch<wbr>linux-keyring-20171130-1-any.<wbr>pkg.tar.xz`<br>
<br>
3. `pacstrap /mnt archlinux-keyring archlinux32-keyring<br>
archlinuxarm-keyring parabola-keyring`<br>
<br>
it complains that the following already exist<br>
<br>
`/mnt/usr/share/pacman/keyrin<wbr>gs/archlinux.gpg`<br>
`/mnt/usr/share/pacman/keyrin<wbr>gs/archlinux-trusted`<br>
`/mnt/usr/share/pacman/keyrin<wbr>gs/archlinux-revoked`<br>
<br>
<br>
it doesn't complain about other keyring dbs/files in that location,<br>
just specifically the three above.<br>
<br>
it still went through attempts at locally signing keys (I guess for<br>
other keyrings), but with failed to sign locally messages.<br>
when finalized, there was a message saying (more or less) `command<br>
failed to execute properly`<br>
<br>
3. I figure that I should remove all those "old/corrupt" keyring files<br>
<br>
I rm all of them, excapt `parabola-keyring` ones which I rename by<br>
appending `.old` (mainly because this is my work machine; and I really<br>
can't afford to make my situation worse than it currently is [unable to<br>
use Iceweasel, and no longer able to update anything via `pacman -Syu`])<br>
<br>
4. I re-run the pacstrap command to install the four keyring packages<br>
<br>
pacstrap fails to chroot.<br>
<br>
it says /mnt is busy<br>
<br>
I search; come across recommendation to run `lsof | grep mnt`<br>
<br>
lsof is not available on the LiveISO.. i give up trying to figue<br>
who/what was squatting /mnt<br>
<br>
I manage to `umount -l /mnt`<br>
<br>
I remount it<br>
<br>
I run pacstrap; it goes through ok, but does complain all the way<br>
through its routine of locally signing keys.. saying it fails sign them.<br>
<br>
5. I check keyrings are present in `/mnt/usr/share/pacman/keyring<wbr>s/`,<br>
and yes they are all back (plus the `.old` ones for parabola-keyring)<br>
<br>
6. I umount and reboot and write this email.<br>
<br>
7. I also just tried the following two commands<br>
<br>
<br>
~~~<br>
$ sudo pacman-key --populate parabola archlinux<br>
==> Appending keys from parabola.gpg...<br>
==> Appending keys from archlinux.gpg...<br>
==> Locally signing trusted keys in keyring...<br>
-> Locally signing key DE8B63715BAA521666340836A763C2<wbr>9157A016B6...<br>
-> Locally signing key DDB867B92AA789C165EEFA799B729B<wbr>06A680C281...<br>
==> ERROR: DDB867B92AA789C165EEFA799B729B<wbr>06A680C281 could not be locally<br>
signed.<br>
-> Locally signing key B15F27D6FB402E1839BA97C619C872<wbr>54F41DB195...<br>
==> ERROR: B15F27D6FB402E1839BA97C619C872<wbr>54F41DB195 could not be locally<br>
signed.<br>
-> Locally signing key 560B3DEC2F13E822ACED475B2EC52A<wbr>C76AEEB6A0...<br>
==> ERROR: 560B3DEC2F13E822ACED475B2EC52A<wbr>C76AEEB6A0 could not be locally<br>
signed.<br>
-> Locally signing key 1B8C5E87702444D3D825CC8086ED62<wbr>396D5DBA58...<br>
==> ERROR: 1B8C5E87702444D3D825CC8086ED62<wbr>396D5DBA58 could not be locally<br>
signed.<br>
-> Locally signing key 684148BB25B49E986A4944C5518425<wbr>2D824B18E8...<br>
==> ERROR: 684148BB25B49E986A4944C5518425<wbr>2D824B18E8 could not be locally<br>
signed.<br>
-> Locally signing key 49F707A1CB366C580E625B3C456032<wbr>D717A4CD9C...<br>
==> ERROR: 49F707A1CB366C580E625B3C456032<wbr>D717A4CD9C could not be locally<br>
signed.<br>
-> Locally signing key DC7E500D8D4407641EA82893476DC6<wbr>56262FB1AE...<br>
==> ERROR: DC7E500D8D4407641EA82893476DC6<wbr>56262FB1AE could not be locally<br>
signed.<br>
-> Locally signing key 91FFE0700E80619CEB73235CA88E23<wbr>E377514E00...<br>
==> ERROR: 91FFE0700E80619CEB73235CA88E23<wbr>E377514E00 could not be locally<br>
signed.<br>
-> Locally signing key 6DB9C4B4F0D8C0DC432CF6E4227CA7<wbr>C556B2BA78...<br>
==> ERROR: 6DB9C4B4F0D8C0DC432CF6E4227CA7<wbr>C556B2BA78 could not be locally<br>
signed.<br>
-> Locally signing key 8C3F8ABD30DF2AFAC6C039A45906AB<wbr>5E9AAD00E5...<br>
==> ERROR: 8C3F8ABD30DF2AFAC6C039A45906AB<wbr>5E9AAD00E5 could not be locally<br>
signed.<br>
-> Locally signing key 3954A7AB837D0EA9CFA9798925DB7D<wbr>9B5A8D4B40...<br>
==> ERROR: 3954A7AB837D0EA9CFA9798925DB7D<wbr>9B5A8D4B40 could not be locally<br>
signed.<br>
-> Locally signing key D3EAD7F9D076EB9AF650149DA170D6<wbr>A0B669E21A...<br>
==> ERROR: D3EAD7F9D076EB9AF650149DA170D6<wbr>A0B669E21A could not be locally<br>
signed.<br>
-> Locally signing key AB19265E5D7D20687D303246BA1DFB<wbr>64FFF979E7...<br>
==> ERROR: AB19265E5D7D20687D303246BA1DFB<wbr>64FFF979E7 could not be locally<br>
signed.<br>
-> Locally signing key 2DFFE834A07FC9A06F4AAAF444BC7D<wbr>7F49B9A5A4...<br>
==> ERROR: 2DFFE834A07FC9A06F4AAAF444BC7D<wbr>7F49B9A5A4 could not be locally<br>
signed.<br>
-> Locally signing key 0E8B644079F599DFC1DDC397334888<wbr>2F6AC6A4C2...<br>
==> ERROR: 0E8B644079F599DFC1DDC397334888<wbr>2F6AC6A4C2 could not be locally<br>
signed.<br>
-> Locally signing key DE00C1C500DDCC4AAF06EA99B238AD<wbr>C68BE13357...<br>
==> ERROR: DE00C1C500DDCC4AAF06EA99B238AD<wbr>C68BE13357 could not be locally<br>
signed.<br>
-> Locally signing key 1285E187FDE4EF93444F75F9A3CDCD<wbr>E939A264EE...<br>
==> ERROR: 1285E187FDE4EF93444F75F9A3CDCD<wbr>E939A264EE could not be locally<br>
signed.<br>
-> Locally signing key C90B027951EB38B7FA25E2E73052D5<wbr>B24E10CAF9...<br>
==> ERROR: C90B027951EB38B7FA25E2E73052D5<wbr>B24E10CAF9 could not be locally<br>
signed.<br>
-> Locally signing key ACFD80729A8CE443544A2C7ADF6727<wbr>98D2CF9D7D...<br>
==> ERROR: ACFD80729A8CE443544A2C7ADF6727<wbr>98D2CF9D7D could not be locally<br>
signed.<br>
-> Locally signing key CB6E213A349B8DF9E96B622AC3F4FF<wbr>CF3EAE8697...<br>
==> ERROR: CB6E213A349B8DF9E96B622AC3F4FF<wbr>CF3EAE8697 could not be locally<br>
signed.<br>
-> Locally signing key 38D33EF29A7691134357648733466E<wbr>12EC7BA943...<br>
==> ERROR: 38D33EF29A7691134357648733466E<wbr>12EC7BA943 could not be locally<br>
signed.<br>
-> Locally signing key BFA8008A8265677063B11BF4717198<wbr>6E4B745536...<br>
==> ERROR: BFA8008A8265677063B11BF4717198<wbr>6E4B745536 could not be locally<br>
signed.<br>
-> Locally signing key C9297FDFA44D416DEBF0948365BDCF<wbr>F76F0F94D7...<br>
==> ERROR: C9297FDFA44D416DEBF0948365BDCF<wbr>F76F0F94D7 could not be locally<br>
signed.<br>
-> Locally signing key B70107A3E6A744682A22208D7D19D1<wbr>AFDD312BBE...<br>
==> ERROR: B70107A3E6A744682A22208D7D19D1<wbr>AFDD312BBE could not be locally<br>
signed.<br>
-> Locally signing key 99195DD3BB6FE10A2F36ED84456987<wbr>44D4FFBFC9...<br>
==> ERROR: 99195DD3BB6FE10A2F36ED84456987<wbr>44D4FFBFC9 could not be locally<br>
signed.<br>
-> Locally signing key 8CD7227DA467D3ED404F6EEFDB590F<wbr>739E5AC458...<br>
==> ERROR: 8CD7227DA467D3ED404F6EEFDB590F<wbr>739E5AC458 could not be locally<br>
signed.<br>
-> Locally signing key 6A02EFFEEE2464AD376E05A81A6777<wbr>66EBE25A09...<br>
==> ERROR: 6A02EFFEEE2464AD376E05A81A6777<wbr>66EBE25A09 could not be locally<br>
signed.<br>
-> Locally signing key EBDF658E5A72B7B8BD5FB0F46DB12E<wbr>6B3CE04A86...<br>
==> ERROR: EBDF658E5A72B7B8BD5FB0F46DB12E<wbr>6B3CE04A86 could not be locally<br>
signed.<br>
-> Locally signing key 916FFBC76D2E641BA416BA53364F4E<wbr>1483446AC5...<br>
==> ERROR: 916FFBC76D2E641BA416BA53364F4E<wbr>1483446AC5 could not be locally<br>
signed.<br>
-> Locally signing key 0EF5D686FC13831A54874C275FC681<wbr>B4822DABB0...<br>
==> ERROR: 0EF5D686FC13831A54874C275FC681<wbr>B4822DABB0 could not be locally<br>
signed.<br>
~~~<br>
<br>
<br>
~~~<br>
$ sudo pacman -S parabola-keyring archlinux-keyring<br>
<span>warning: parabola-keyring-20170912-1 is up to date -- reinstalling<br>
warning: archlinux-keyring-20171130-1 is up to date -- reinstalling<br>
resolving dependencies...<br>
looking for conflicting packages...<br>
<br>
Packages (2) archlinux-keyring-20171130-1 parabola-keyring-20170912-1<br>
<br>
Total Installed Size: 1.01 MiB<br>
</span>Net Upgrade Size: 0.00 MiB<br>
<span><br>
:: Proceed with installation? [Y/n] y<br>
(2/2) checking keys in keyring<br>
[#############################<wbr>###################] 100%<br>
(2/2) checking package integrity<br>
[#############################<wbr>###################] 100%<br>
error: parabola-keyring: signature from "Isaac David<br>
<<a href="mailto:isacdaavid@isacdaavid.info" target="_blank">isacdaavid@isacdaavid.info</a>>" is unknown trust<br>
:: File /var/cache/pacman/pkg/parabola<wbr>-keyring-20170912-1-any.pkg.<wbr>tar.xz<br>
is corrupted (invalid or corrupted package (PGP signature)).<br>
Do you want to delete it? [Y/n] n<br>
error: archlinux-keyring: signature from "Christian Hesse (Arch Linux<br>
</span>Package Signing) <<a href="mailto:arch@eworm.de" target="_blank">arch@eworm.de</a>>" is unknown trust<br>
<span>:: File<br>
/var/cache/pacman/pkg/archlinu<wbr>x-keyring-20171130-1-any.pkg.<wbr>tar.xz is<br>
corrupted (invalid or corrupted package (PGP signature)).<br>
Do you want to delete it? [Y/n] n<br>
error: failed to commit transaction (invalid or corrupted package (PGP<br>
signature))<br>
Errors occurred, no packages were upgraded.<br>
</span>~~~<br>
<br>
<br>
III. Next steps<br>
<br>
Any suggestions welcome! :)<br>
<br>
I don't mind re-doing something I've done, be it in different order or<br>
if you recommend that it's worth trying again.<br>
<br>
Also, if there's a way to not remove all pkg.tar.xz from my cache, but<br>
only the keyring ones, then yes I don't mind doing that (or educate me<br>
on why I shouldn't be scared of zapping all my pkgs cache :) )<br>
<br>
Thanks again for your help!<br>
<span class="m_-4238421501596335136HOEnZb"><font color="#888888"><br>
Ben<br>
<br>
</font></span><br></div></div><span class="">______________________________<wbr>_________________<br>
Assist mailing list<br>
<a href="mailto:Assist@lists.parabola.nu" target="_blank">Assist@lists.parabola.nu</a><br>
<a href="https://lists.parabola.nu/mailman/listinfo/assist" rel="noreferrer" target="_blank">https://lists.parabola.nu/mail<wbr>man/listinfo/assist</a><br>
<br></span></blockquote></div><br></div>
</div><br></div>