My chaotic-keyrings are not working (?)

Hello peeps! I’ve been trying to update today and I’m running into a keyring issue.
First it was TNE keyring and now apparenlty (after many tries) it is Bert Peters keyring.

Update fails with some sort of message like this always:

error: lib32-libldap: signature from "Bert Peters (packager key) <bertptrs@archlinux.org>" is unknown trust
:: File /var/cache/pacman/pkg/lib32-libldap-2.6.10-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y

error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.

Anyway, I have tried this:

For which I had the following result:

sudo pacman -Sy archlinux-keyring chaotic-keyring && sudo pacman -Syu
:: Synchronising package databases...
garuda is up to date
core is up to date
extra is up to date
multilib is up to date
error: target not found: chaotic-keyring

And this:

With the following result:

garuda-update remote keyring
gpg: /etc/pacman.d/gnupg/trustdb.gpg: trustdb created
gpg: no ultimately trusted keys found
gpg: starting migration from earlier GnuPG versions
gpg: porting secret keys from '/etc/pacman.d/gnupg/secring.gpg' to gpg-agent
gpg: migration succeeded
==> Generating pacman master key. This may take some time.
gpg: Generating pacman keyring master key...
gpg: directory '/etc/pacman.d/gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/etc/pacman.d/gnupg/openpgp-revocs.d/FB8382224AD51D7A9F79CF28DC712C543152C477.rev'
gpg: Done
==> Updating trust database...
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
==> Appending keys from archlinux.gpg...
==> Appending keys from chaotic.gpg...
==> Locally signing trusted keys in keyring...
-> Locally signed 11 keys.
==> Importing owner trust values...
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: inserting ownertrust of 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: inserting ownertrust of 4
gpg: setting ownertrust to 4
gpg: inserting ownertrust of 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
==> Disabling revoked keys in keyring...
-> Disabled 48 keys.
==> Updating trust database...
gpg: Note: third-party key signatures using the SHA1 algorithm are rejected
gpg: (use option "--allow-weak-key-signatures" to override)
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   9  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:   9  signed: 100  trust: 0-, 0q, 0n, 9m, 0f, 0u
gpg: depth: 2  valid:  77  signed:  21  trust: 77-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2025-07-01
gpg: key A6234074498E9CEE: 3 duplicate signatures removed
gpg: key A6234074498E9CEE: "Christian Hesse <eworm@archlinux.org>" 3 signatures cleaned
gpg: key A6234074498E9CEE: "Christian Hesse <eworm@archlinux.org>" 1 user ID cleaned
gpg: key 3056513887B78AEB: "Pedro Henrique Lara Campos <root@pedrohlc.com>" not changed
gpg: Note: third-party key signatures using the SHA1 algorithm are rejected
gpg: (use option "--allow-weak-key-signatures" to override)
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   9  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:   9  signed: 100  trust: 0-, 0q, 0n, 9m, 0f, 0u
gpg: depth: 2  valid:  77  signed:  21  trust: 77-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2025-07-01
gpg: Total number processed: 2
gpg:              unchanged: 1
gpg:     signatures cleaned: 3
gpg:       user IDs cleaned: 1
-> Locally signed 2 keys.
==> Updating trust database...
gpg: Note: third-party key signatures using the SHA1 algorithm are rejected
gpg: (use option "--allow-weak-key-signatures" to override)
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:  10  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:  10  signed: 100  trust: 1-, 0q, 0n, 9m, 0f, 0u
gpg: depth: 2  valid:  76  signed:  21  trust: 76-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2025-07-01
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0
gpg: error retrieving 'tne@garudalinux.org' via WKD: No fingerprint
gpg: refreshing 1 key from hkp://keyserver.ubuntu.com
gpg: key D6C9442437365605: "TNE <tne@garudalinux.org>" 1 new signature
gpg: Total number processed: 1
gpg:         new signatures: 1
rm: cannot remove '/var/cache/pacman/pkg/download-PvU2nM': Is a directory
:: Synchronising package databases...
garuda                                               53,0 KiB  41,8 KiB/s 00:01 [##############################################] 100%
core                                                116,2 KiB   343 KiB/s 00:00 [##############################################] 100%
extra                                                 7,8 MiB  7,47 MiB/s 00:01 [##############################################] 100%
multilib                                            135,0 KiB   396 KiB/s 00:00 [##############################################] 100%
error: target not found: chaotic-keyring

I also tried:

pacman-key --refresh-keys

Tho the output was so long my terminal wasn’t able to show me all of it. If useful, I’ll try to get the entire output.

After that, I tried this again:

garuda-update remote keyring

gpg: /etc/pacman.d/gnupg/trustdb.gpg: trustdb created
gpg: no ultimately trusted keys found
gpg: starting migration from earlier GnuPG versions
gpg: porting secret keys from '/etc/pacman.d/gnupg/secring.gpg' to gpg-agent
gpg: migration succeeded
==> Generating pacman master key. This may take some time.
gpg: Generating pacman keyring master key...
gpg: directory '/etc/pacman.d/gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/etc/pacman.d/gnupg/openpgp-revocs.d/F25F1AA766704B8C4704035AF585A79D405821C9.rev'
gpg: Done
==> Updating trust database...
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
==> Appending keys from archlinux.gpg...
==> Appending keys from chaotic.gpg...
==> Locally signing trusted keys in keyring...
-> Locally signed 11 keys.
==> Importing owner trust values...
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: inserting ownertrust of 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: inserting ownertrust of 4
gpg: setting ownertrust to 4
gpg: inserting ownertrust of 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
==> Disabling revoked keys in keyring...
-> Disabled 48 keys.
==> Updating trust database...
gpg: Note: third-party key signatures using the SHA1 algorithm are rejected
gpg: (use option "--allow-weak-key-signatures" to override)
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   9  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:   9  signed: 100  trust: 0-, 0q, 0n, 9m, 0f, 0u
gpg: depth: 2  valid:  77  signed:  21  trust: 77-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2025-07-01
gpg: key A6234074498E9CEE: 3 duplicate signatures removed
gpg: key A6234074498E9CEE: "Christian Hesse <eworm@archlinux.org>" 3 signatures cleaned
gpg: key A6234074498E9CEE: "Christian Hesse <eworm@archlinux.org>" 1 user ID cleaned
gpg: key 3056513887B78AEB: "Pedro Henrique Lara Campos <root@pedrohlc.com>" not changed
gpg: Note: third-party key signatures using the SHA1 algorithm are rejected
gpg: (use option "--allow-weak-key-signatures" to override)
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   9  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:   9  signed: 100  trust: 0-, 0q, 0n, 9m, 0f, 0u
gpg: depth: 2  valid:  77  signed:  21  trust: 77-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2025-07-01
gpg: Total number processed: 2
gpg:              unchanged: 1
gpg:     signatures cleaned: 3
gpg:       user IDs cleaned: 1
-> Locally signed 2 keys.
==> Updating trust database...
gpg: Note: third-party key signatures using the SHA1 algorithm are rejected
gpg: (use option "--allow-weak-key-signatures" to override)
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:  10  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:  10  signed: 100  trust: 1-, 0q, 0n, 9m, 0f, 0u
gpg: depth: 2  valid:  76  signed:  21  trust: 76-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2025-07-01
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0
gpg: error retrieving 'tne@garudalinux.org' via WKD: No fingerprint
gpg: refreshing 1 key from hkp://keyserver.ubuntu.com
gpg: key D6C9442437365605: "TNE <tne@garudalinux.org>" 1 new signature
gpg: Total number processed: 1
gpg:         new signatures: 1
rm: cannot remove '/var/cache/pacman/pkg/download-PvU2nM': Is a directory
:: Synchronising package databases...
garuda                                               53,0 KiB  42,1 KiB/s 00:01 [##############################################] 100%
core                                                116,2 KiB   315 KiB/s 00:00 [##############################################] 100%
extra                                                 7,8 MiB  7,45 MiB/s 00:01 [##############################################] 100%
multilib                                            135,0 KiB   350 KiB/s 00:00 [##############################################] 100%
error: target not found: chaotic-keyring

Bu by now, I’m getting the feeling I somehow don’t have any chaotic keyrings to update. Even searching with

pacman -Ss chaotic-keyring && paru -Ss chaotic-keyring

Brings up nothing.

So… I may have missed something. I also tried to look up my pacman.conf to see if I had… idk any repositories marked out, but turns out no. (for reference, garuda, core, extra and multilib are all marked in, without a # I mean).

So idk what else to try xD did I miss something? Can anyone help me figure this out?

Maybe it is a simple case like this one?

Thanks in advance for any help!


My inxi:

garuda-inxi
System:
Kernel: 6.14.2-zen1-1-zen arch: x86_64 bits: 64 compiler: gcc v: 14.2.1
clocksource: tsc avail: hpet,acpi_pm
parameters: BOOT_IMAGE=/@/boot/vmlinuz-linux-zen
root=UUID=91a612fc-50d2-49ac-a449-1fa9b8405a8d rw rootflags=subvol=@
quiet rd.luks.uuid=bb1cc1fb-a092-41ee-b6c3-4d7be6cc86ef loglevel=3
ibt=off
Desktop: KDE Plasma v: 6.3.4 tk: Qt v: N/A info: frameworks v: 6.12.0
wm: kwin_wayland vt: 1 dm: SDDM Distro: Garuda base: Arch Linux
Machine:
Type: Desktop Mobo: ASUSTeK model: PRIME H310M-E R2.0/BR v: Rev X.0x
serial: <superuser required> part-nu: SKU uuid: <superuser required>
UEFI: American Megatrends v: 1605 date: 07/14/2020
CPU:
Info: model: Intel Core i3-8100 bits: 64 type: MCP arch: Coffee Lake
gen: core 8 level: v3 note: check built: 2018 process: Intel 14nm family: 6
model-id: 0x9E (158) stepping: 0xB (11) microcode: 0xF6
Topology: cpus: 1x dies: 1 clusters: 4 cores: 4 smt: <unsupported> cache:
L1: 256 KiB desc: d-4x32 KiB; i-4x32 KiB L2: 1024 KiB desc: 4x256 KiB
L3: 6 MiB desc: 1x6 MiB
Speed (MHz): avg: 800 min/max: 800/3600 scaling: driver: intel_pstate
governor: powersave cores: 1: 800 2: 800 3: 800 4: 800 bogomips: 28800
Flags: avx avx2 ht lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3
Vulnerabilities: <filter>
Graphics:
Device-1: NVIDIA TU116 [GeForce GTX 1660 SUPER] driver: nvidia v: 570.133.07
alternate: nouveau,nvidia_drm non-free: 550/565.xx+ status: current (as of
2025-01; EOL~2026-12-xx) arch: Turing code: TUxxx process: TSMC 12nm FF
built: 2018-2022 pcie: gen: 3 speed: 8 GT/s lanes: 16 ports: active: none
off: HDMI-A-1 empty: DP-1,DVI-D-1 bus-ID: 01:00.0 chip-ID: 10de:21c4
class-ID: 0300
Display: wayland server: X.org v: 1.21.1.16 with: Xwayland v: 24.1.6
compositor: kwin_wayland driver: X: loaded: nvidia
unloaded: modesetting,nouveau alternate: fbdev,nv,vesa
gpu: nvidia,nvidia-nvswitch display-ID: 0
Monitor-1: HDMI-A-1 model: TV PHILCO serial: <filter> built: 2015 res:
mode: 1360x768 hz: 60 scale: 100% (1) dpi: 91 gamma: 1.06
size: 708x398mm (27.87x15.67") diag: 484mm (19.1") ratio: 5:4, 4:3 modes:
max: 1360x768 min: 640x480
API: EGL v: 1.5 hw: drv: nvidia nouveau drv: nvidia platforms: device: 0
drv: nvidia device: 1 drv: nouveau device: 2 drv: swrast gbm: drv: nvidia
surfaceless: drv: nvidia wayland: drv: nvidia x11: drv: nvidia
API: OpenGL v: 4.6.0 compat-v: 4.5 vendor: nvidia mesa v: 570.133.07
glx-v: 1.4 direct-render: yes renderer: NVIDIA GeForce GTX 1660
SUPER/PCIe/SSE2 memory: 5.86 GiB display-ID: :1.0
API: Vulkan v: 1.4.309 layers: 10 device: 0 type: discrete-gpu name: NVIDIA
GeForce GTX 1660 SUPER driver: N/A device-ID: 10de:21c4
surfaces: xcb,xlib,wayland device: 1 type: cpu name: llvmpipe (LLVM
19.1.7 256 bits) driver: N/A device-ID: 10005:0000
surfaces: xcb,xlib,wayland
Info: Tools: api: clinfo, eglinfo, glxinfo, vulkaninfo
de: kscreen-console,kscreen-doctor gpu: corectrl, nvidia-settings,
nvidia-smi wl: wayland-info x11: xdpyinfo, xprop, xrandr
Audio:
Device-1: Intel 200 Series PCH HD Audio vendor: ASUSTeK
driver: snd_hda_intel v: kernel alternate: snd_soc_avs bus-ID: 00:1f.3
chip-ID: 8086:a2f0 class-ID: 0403
Device-2: NVIDIA TU116 High Definition Audio driver: snd_hda_intel
v: kernel pcie: gen: 3 speed: 8 GT/s lanes: 16 bus-ID: 01:00.1
chip-ID: 10de:1aeb class-ID: 0403
API: ALSA v: k6.14.2-zen1-1-zen status: kernel-api with: aoss
type: oss-emulator tools: N/A
Server-1: sndiod v: N/A status: off tools: aucat,midicat,sndioctl
Server-2: PipeWire v: 1.4.2 status: active with: 1: pipewire-pulse
status: active 2: wireplumber status: active 3: pipewire-alsa type: plugin
4: pw-jack type: plugin tools: pactl,pw-cat,pw-cli,wpctl
Network:
Device-1: Realtek RTL8111/8168/8211/8411 PCI Express Gigabit Ethernet
vendor: ASUSTeK RTL8111H driver: r8169 v: kernel pcie: gen: 1
speed: 2.5 GT/s lanes: 1 port: d000 bus-ID: 03:00.0 chip-ID: 10ec:8168
class-ID: 0200
IF: enp3s0 state: up speed: 100 Mbps duplex: full mac: <filter>
Info: services: NetworkManager,systemd-timesyncd
Drives:
Local Storage: total: 2.78 TiB used: 1.08 TiB (38.8%)
SMART Message: Unable to run smartctl. Root privileges required.
ID-1: /dev/sda maj-min: 8:0 model: SATA SSD size: 55.9 GiB block-size:
physical: 512 B logical: 512 B speed: 6.0 Gb/s tech: SSD serial: <filter>
fw-rev: Sb10 scheme: GPT
ID-2: /dev/sdb maj-min: 8:16 vendor: Seagate model: ST3000NM0053
size: 2.73 TiB block-size: physical: 512 B logical: 512 B speed: 6.0 Gb/s
tech: HDD rpm: 7200 serial: <filter> fw-rev: G00A scheme: GPT
Partition:
ID-1: / raw-size: 558.79 GiB size: 558.79 GiB (100.00%)
used: 121.06 GiB (21.7%) fs: btrfs dev: /dev/dm-0 maj-min: 253:0
mapped: luks-bb1cc1fb-a092-41ee-b6c3-4d7be6cc86ef
ID-2: /boot/efi raw-size: 5.59 GiB size: 5.58 GiB (99.80%)
used: 242.3 MiB (4.2%) fs: vfat dev: /dev/sda2 maj-min: 8:2
ID-3: /home raw-size: 558.79 GiB size: 558.79 GiB (100.00%)
used: 121.06 GiB (21.7%) fs: btrfs dev: /dev/dm-0 maj-min: 253:0
mapped: luks-bb1cc1fb-a092-41ee-b6c3-4d7be6cc86ef
ID-4: /var/log raw-size: 558.79 GiB size: 558.79 GiB (100.00%)
used: 121.06 GiB (21.7%) fs: btrfs dev: /dev/dm-0 maj-min: 253:0
mapped: luks-bb1cc1fb-a092-41ee-b6c3-4d7be6cc86ef
ID-5: /var/tmp raw-size: 558.79 GiB size: 558.79 GiB (100.00%)
used: 121.06 GiB (21.7%) fs: btrfs dev: /dev/dm-0 maj-min: 253:0
mapped: luks-bb1cc1fb-a092-41ee-b6c3-4d7be6cc86ef
Swap:
Kernel: swappiness: 133 (default 60) cache-pressure: 100 (default) zswap: no
ID-1: swap-1 type: zram size: 15.55 GiB used: 85.3 MiB (0.5%)
priority: 100 comp: zstd avail: lzo-rle,lzo,lz4,lz4hc,deflate,842
max-streams: 4 dev: /dev/zram0
Sensors:
System Temperatures: cpu: 32.0 C mobo: N/A
Fan Speeds (rpm): N/A
Info:
Memory: total: 16 GiB available: 15.55 GiB used: 3.89 GiB (25.0%)
Processes: 265 Power: uptime: 6h 47m states: freeze,mem,disk suspend: deep
avail: s2idle wakeups: 1 hibernate: platform avail: shutdown, reboot,
suspend, test_resume image: 6.15 GiB services: org_kde_powerdevil,
power-profiles-daemon, upowerd Init: systemd v: 257 default: graphical
tool: systemctl
Packages: 1960 pm: pacman pkgs: 1949 libs: 579 tools: octopi,paru
pm: flatpak pkgs: 11 Compilers: clang: 19.1.7 gcc: 14.2.1 alt: 13
Shell: garuda-inxi default: fish v: 4.0.1 running-in: konsole inxi: 3.3.37
Garuda (2.7.2-1):
System install date:     2025-03-05
Last full system update: 2025-01-14
Is partially upgraded:   Yes
Relevant software:       snapper NetworkManager dracut nvidia-dkms
Windows dual boot:       No/Undetected
Failed units:            archlinux-keyring-wkd-sync.service

Maybe you could try the manual installation:

3 Likes

Something’s messed up with your pacman.conf configuration file. I recommend running:

garuda-update remote fix

to restore it to a working state.

9 Likes

I thought of posting it so you people could give a look, but turns out I would exceed the post max character limit xD but alright, I’ll try that when I get back home and if that doesn’t work, I’ll reply with the full conf file

1 Like

i also encountered this. garuda-update remote fix addressed the issue

after that, i just had to import a few settings back into /etc/pacman.conf

then the next garuda-update worked

1 Like

Ran on smoothly :relieved_face:
Thank you and thanks everybody who came to help me :3