Reinstall All Package: signature is invalid

Discussed this in another thread but it wasn't resolved and is a separate issue, so creating a separate thread for it. Reinstall packages doesn't work for me. It throws "signature is invalid" errors for lots of packages. What's wrong?

garuda-update

:: Synchronizing package databases...
core is up to date
extra is up to date
community is up to date
multilib is up to date
chaotic-aur                          1706.3 KiB  1277 KiB/s 00:01 [------------------------------------] 100%

--> Refreshing mirrorlists using reflector, please be patient..
[2022-04-13 01:30:35] WARNING: failed to rate http(s) download (https://archlinux.thaller.ws/community/os/x86_64/community.db): Download timed out after 5 second(s).
[2022-04-13 01:30:41] WARNING: failed to rate http(s) download (https://mirror.telepoint.bg/archlinux/community/os/x86_64/community.db): Download timed out after 5 second(s).
[2022-04-13 01:30:47] WARNING: failed to rate http(s) download (https://archlinux.mailtunnel.eu/community/os/x86_64/community.db): Download timed out after 5 second(s).
[2022-04-13 01:30:53] WARNING: failed to rate http(s) download (https://mirror.cyberbits.eu/archlinux/community/os/x86_64/community.db): Download timed out after 5 second(s).
################################################################################
################# Arch Linux mirrorlist generated by Reflector #################
################################################################################

# With:       reflector --latest 5 --age 2 --fastest 5 --protocol https --sort rate --save /etc/pacman.d/mirrorlist
# When:       2022-04-13 06:30:59 UTC
# From:       https://archlinux.org/mirrors/status/json/
# Retrieved:  2022-04-13 06:30:30 UTC
# Last Check: 2022-04-13 06:26:48 UTC

Server = https://phinau.de/arch/$repo/os/$arch
Server = https://archlinux.thaller.ws/$repo/os/$arch
Server = https://mirror.telepoint.bg/archlinux/$repo/os/$arch
Server = https://archlinux.mailtunnel.eu/$repo/os/$arch
Server = https://mirror.cyberbits.eu/archlinux/$repo/os/$arch

:: Synchronizing package databases...
core                                  155.7 KiB   144 KiB/s 00:01 [------------------------------------] 100%
extra                                1694.3 KiB   775 KiB/s 00:02 [------------------------------------] 100%
community                               6.5 MiB  1314 KiB/s 00:05 [------------------------------------] 100%
multilib                              172.9 KiB   163 KiB/s 00:01 [------------------------------------] 100%
chaotic-aur                          1706.3 KiB  1915 KiB/s 00:01 [------------------------------------] 100%
spawn pacman -Su
:: Starting full system upgrade...
warning: libcpufeatures-git: local (0.7.0+.r269.d20220308.8a494eb-1) is newer than chaotic-aur (0.7.0+8.r277.d20220315.188d0d3-1)
warning: lxc-git: local (4.0.0.r2198.g30ebf0964-1) is newer than chaotic-aur (lxc.4.0.0.2209-1)
there is nothing to do

Checking for plugin updates
Nothing to install / update

System updated! 🐧

Now, if I use Garuda Assistant to reinstall all packages, I get this error for lots of packages

error: sdbus-cpp: signature from "Nico Jensch (Chaotic-AUR) <[email protected]>" is invalid
:: File /var/cache/pacman/pkg/sdbus-cpp-1.1.0-2-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]

My inxi

3 Likes

yes forgot to mention that was done a few times

I used this to clear the keyring and start fresh

sudo rm -fr /etc/pacman.d/gnupg
sudo pacman-key --init
sudo pacman-key --populate archlinux chaotic
sudo pacman -Syy archlinux-keyring chaotic-keyring
sudo pacman -Syu

This command either loops endlessly or takes a very long time.

sudo pacman-key --refresh-keys --keyserver hkps://keyserver.ubuntu.com

gpg: error retrieving '[email protected]' via WKD: No data
gpg: error reading key: No data
gpg: refreshing 1 key from hkps://keyserver.ubuntu.com
gpg: key D53A0445B47A0DAB: "Connor Behan <[email protected]>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
gpg: error retrieving '[email protected]' via WKD: No data
gpg: error reading key: No data
gpg: refreshing 1 key from hkps://keyserver.ubuntu.com
gpg: key 40F557B731496106: "Andrzej Giniewicz (giniu) <[email protected]>" 1 signature cleaned
gpg: Total number processed: 1
gpg:     signatures cleaned: 1
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:  13  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:  13  signed:  94  trust: 0-, 0q, 0n, 13m, 0f, 0u
gpg: depth: 2  valid:  88  signed:  32  trust: 88-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2022-05-06
gpg: error retrieving '[email protected]' via WKD: No data
gpg: error reading key: No data
gpg: refreshing 1 key from hkps://keyserver.ubuntu.com
gpg: key 73B8ED52F1D357C1: "Lukas Jirkovsky <[email protected]>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
gpg: error retrieving '[email protected]' via WKD: No data
gpg: error reading key: No data
gpg: error retrieving '[email protected]' via WKD: No data
gpg: error reading key: No data

How come is this problem so difficult to diagnose? It wasn't resolved in the other thread either.

Need any extra information?

Are you kidding or trolling?

It is a FAQ and Tutorials post.

The keyring part is solved often, your garuda-update say

Done, nothing to reinstall.


If you don't have problems, you'll create them.

Updates work totally fine.

"Reinstall all packages" doesn't, is that normal or an indication that there's a problem somewhere?

Because I was dealing with another problem "possibly" due to package mixup; if there's something abnormal here, better solve it first.

It looks like the first mirror server is not synced properly (packages are older than most other servers).
Create/fix your mirrorlist properly (preferably manually, if you can follow Archwiki instructions on this) and then update your system.
After you do this, then ReInstall All Packages should work as designed.

3 Likes

garuda-update uses Reflector. Doesn't that mean it's already automatically updating the mirrorlist every time?

--> Refreshing mirrorlists using reflector, please be patient..

Can you try update remote fullfix and see where that gets you?

5 Likes
Total Download Size:    8948.45 MiB
Total Installed Size:  25452.93 MiB
Net Upgrade Size:          2.93 MiB

So far so good, it's updating, and appears to be changing a few packages (9GB out of 25GB ?) or maybe it's 25GB compressed as 9GB?

Completed successfully.

Rebooted.

Trying "Reinstall all packages" again. All good! :smiley:

Thanks

yes.

That's what that command already did :eyes:

This command also removed some package version warnings during update, so it did change some packages.

As for the original problem I was having -- with SMPlayer not working with MPV. I just found the solution. Deleted ~/.config/mpv and now it works.

2 long-standing problems finally solved today! yay!

1 Like

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.