Reinstall All Package: signature is invalid

[Hanuman]

Discussed this in another thread but it wasn't resolved and is a separate issue, so creating a separate thread for it. Reinstall packages doesn't work for me. It throws "signature is invalid" errors for lots of packages. What's wrong?

garuda-update

:: Synchronizing package databases...
core is up to date
extra is up to date
community is up to date
multilib is up to date
chaotic-aur                          1706.3 KiB  1277 KiB/s 00:01 [------------------------------------] 100%

--> Refreshing mirrorlists using reflector, please be patient..
[2022-04-13 01:30:35] WARNING: failed to rate http(s) download (https://archlinux.thaller.ws/community/os/x86_64/community.db): Download timed out after 5 second(s).
[2022-04-13 01:30:41] WARNING: failed to rate http(s) download (https://mirror.telepoint.bg/archlinux/community/os/x86_64/community.db): Download timed out after 5 second(s).
[2022-04-13 01:30:47] WARNING: failed to rate http(s) download (https://archlinux.mailtunnel.eu/community/os/x86_64/community.db): Download timed out after 5 second(s).
[2022-04-13 01:30:53] WARNING: failed to rate http(s) download (https://mirror.cyberbits.eu/archlinux/community/os/x86_64/community.db): Download timed out after 5 second(s).
################################################################################
################# Arch Linux mirrorlist generated by Reflector #################
################################################################################

# With:       reflector --latest 5 --age 2 --fastest 5 --protocol https --sort rate --save /etc/pacman.d/mirrorlist
# When:       2022-04-13 06:30:59 UTC
# From:       https://archlinux.org/mirrors/status/json/
# Retrieved:  2022-04-13 06:30:30 UTC
# Last Check: 2022-04-13 06:26:48 UTC

Server = https://phinau.de/arch/$repo/os/$arch
Server = https://archlinux.thaller.ws/$repo/os/$arch
Server = https://mirror.telepoint.bg/archlinux/$repo/os/$arch
Server = https://archlinux.mailtunnel.eu/$repo/os/$arch
Server = https://mirror.cyberbits.eu/archlinux/$repo/os/$arch

:: Synchronizing package databases...
core                                  155.7 KiB   144 KiB/s 00:01 [------------------------------------] 100%
extra                                1694.3 KiB   775 KiB/s 00:02 [------------------------------------] 100%
community                               6.5 MiB  1314 KiB/s 00:05 [------------------------------------] 100%
multilib                              172.9 KiB   163 KiB/s 00:01 [------------------------------------] 100%
chaotic-aur                          1706.3 KiB  1915 KiB/s 00:01 [------------------------------------] 100%
spawn pacman -Su
:: Starting full system upgrade...
warning: libcpufeatures-git: local (0.7.0+.r269.d20220308.8a494eb-1) is newer than chaotic-aur (0.7.0+8.r277.d20220315.188d0d3-1)
warning: lxc-git: local (4.0.0.r2198.g30ebf0964-1) is newer than chaotic-aur (lxc.4.0.0.2209-1)
there is nothing to do

Checking for plugin updates
Nothing to install / update

System updated! 🐧

Now, if I use Garuda Assistant to reinstall all packages, I get this error for lots of packages

error: sdbus-cpp: signature from "Nico Jensch (Chaotic-AUR) <dr460nf1r3@garudalinux.org>" is invalid
:: File /var/cache/pacman/pkg/sdbus-cpp-1.1.0-2-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]

My inxi

[filo]

Issues with “signature is marginal trust”, "signature is unknown trust", or “invalid or corrupted package”

If you're getting an error similar to "Can’t update: signature from *** is marginal trust" or "invalid or corrupted package" you probably just need to update your package signing keys: sudo pacman -Sy archlinux-keyring chaotic-keyring sudo pacman -Syu If you have added any other repositories, e.g. BlackArch, then add their keyring to the list. Also make sure your system clock is correct! Of course, it's also possible that the package file actually is corrupt. Remove it from /var/cache/pacman…

[Hanuman]

yes forgot to mention that was done a few times

I used this to clear the keyring and start fresh

sudo rm -fr /etc/pacman.d/gnupg
sudo pacman-key --init
sudo pacman-key --populate archlinux chaotic
sudo pacman -Syy archlinux-keyring chaotic-keyring
sudo pacman -Syu

This command either loops endlessly or takes a very long time.

sudo pacman-key --refresh-keys --keyserver hkps://keyserver.ubuntu.com

gpg: error retrieving 'connor.behan@gmail.com' via WKD: No data
gpg: error reading key: No data
gpg: refreshing 1 key from hkps://keyserver.ubuntu.com
gpg: key D53A0445B47A0DAB: "Connor Behan <connor.behan@gmail.com>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
gpg: error retrieving 'gginiu@gmail.com' via WKD: No data
gpg: error reading key: No data
gpg: refreshing 1 key from hkps://keyserver.ubuntu.com
gpg: key 40F557B731496106: "Andrzej Giniewicz (giniu) <gginiu@gmail.com>" 1 signature cleaned
gpg: Total number processed: 1
gpg:     signatures cleaned: 1
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:  13  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:  13  signed:  94  trust: 0-, 0q, 0n, 13m, 0f, 0u
gpg: depth: 2  valid:  88  signed:  32  trust: 88-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2022-05-06
gpg: error retrieving 'l.jirkovsky@gmail.com' via WKD: No data
gpg: error reading key: No data
gpg: refreshing 1 key from hkps://keyserver.ubuntu.com
gpg: key 73B8ED52F1D357C1: "Lukas Jirkovsky <l.jirkovsky@gmail.com>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
gpg: error retrieving 'arcanis@archlinux.org' via WKD: No data
gpg: error reading key: No data
gpg: error retrieving 'arcanis.arch@gmail.com' via WKD: No data
gpg: error reading key: No data

[Hanuman]

How come is this problem so difficult to diagnose? It wasn't resolved in the other thread either.

Need any extra information?

[SGS]

Are you kidding or trolling?

@Hanuman

It wasn’t resolved in the other thread either.

It is a FAQ and Tutorials post.

The keyring part is solved often, your garuda-update say

@Hanuman

System updated! 🐧

Done, nothing to reinstall.

---

If you don’t have problems, you’ll create them.

[Hanuman]

Updates work totally fine.

"Reinstall all packages" doesn't, is that normal or an indication that there's a problem somewhere?

Because I was dealing with another problem "possibly" due to package mixup; if there's something abnormal here, better solve it first.

[petsam]

@Hanuman

Updates work totally fine.

“Reinstall all packages” doesn’t, is that normal or an indication that there’s a problem somewhere?

It looks like the first mirror server is not synced properly (packages are older than most other servers).
Create/fix your mirrorlist properly (preferably manually, if you can follow Archwiki instructions on this) and then update your system.
After you do this, then ReInstall All Packages should work as designed.

[Hanuman]

garuda-update uses Reflector. Doesn't that mean it's already automatically updating the mirrorlist every time?

--> Refreshing mirrorlists using reflector, please be patient..

[TNE]

Can you try update remote fullfix and see where that gets you?

[Hanuman]

Total Download Size:    8948.45 MiB
Total Installed Size:  25452.93 MiB
Net Upgrade Size:          2.93 MiB

So far so good, it's updating, and appears to be changing a few packages (9GB out of 25GB ?) or maybe it's 25GB compressed as 9GB?

Completed successfully.

Rebooted.

Trying "Reinstall all packages" again. All good!

Thanks

[TNE]

@Hanuman

or maybe it’s 25GB compressed as 9GB?

yes.

@Hanuman

Trying “Reinstall all packages” again. All good!

That’s what that command already did

[Hanuman]

This command also removed some package version warnings during update, so it did change some packages.

As for the original problem I was having -- with SMPlayer not working with MPV. I just found the solution. Deleted ~/.config/mpv and now it works.

2 long-standing problems finally solved today! yay!