You are not logged in.

#1 2025-02-19 11:55:49

rwd3
Member
Registered: 2023-08-10
Posts: 9

linux-lts-headers-6.12.13-1.1-pentium4 signed with expired key

When I tried to update I got this error:

File /var/cache/pacman/pkg/linux-lts-headers-6.12.13-1.1-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package).

When I check it manually it seems this package is signed with an expired key.:

[user1@arch-server sigtest]$ gpg --verify linux-lts-headers-6.12.13-1.1-pentium4.pkg.tar.zst.sig linux-lts-headers-6.12.13-1.1-pentium4.pkg.tar.zst
gpg: Signature made Mon 17 Feb 2025 08:00:53 PM CET
gpg:                using RSA key 16194A82231E9EF823562181C8E8F5A0AF9BA7E7
gpg: Can't check signature: No public key
[user1@arch-server sigtest]$ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 16194A82231E9EF823562181C8E8F5A0AF9BA7E7
gpg: /home/user1/.gnupg/trustdb.gpg: trustdb created
gpg: key C8E8F5A0AF9BA7E7: public key "Andreas Baumann (sign) <mail@andreasbaumann.cc>" imported
gpg: Total number processed: 1
gpg:               imported: 1
[user1@arch-server sigtest]$ gpg --verify linux-lts-headers-6.12.13-1.1-pentium4.pkg.tar.zst.sig linux-lts-headers-6.12.13-1.1-pentium4.pkg.tar.zst
gpg: Signature made Mon 17 Feb 2025 08:00:53 PM CET
gpg:                using RSA key 16194A82231E9EF823562181C8E8F5A0AF9BA7E7
gpg: Good signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" [expired]
gpg: Note: This key has expired!
Primary key fingerprint: 1619 4A82 231E 9EF8 2356  2181 C8E8 F5A0 AF9B A7E7

I know I can set siglevel to 'never' to get around it, but will this package be signed with an up-to-date key sometime in the future?

Offline

#2 2025-02-20 13:41:14

abaumann
Administrator
From: Zurich
Registered: 2019-11-14
Posts: 1,066
Website

Re: linux-lts-headers-6.12.13-1.1-pentium4 signed with expired key

Does it still happen, if you upgrade the archlinux32-kering first?

Offline

#3 2025-02-24 11:11:27

rwd3
Member
Registered: 2023-08-10
Posts: 9

Re: linux-lts-headers-6.12.13-1.1-pentium4 signed with expired key

abaumann wrote:

Does it still happen, if you upgrade the archlinux32-kering first?

It appears so, yes:

[user1@arch-server ~]$ sudo pacman -Syy
:: Synchronizing package databases...
 core                                                               109.0 KiB   363 KiB/s 00:00 [########################################################] 100%
 extra                                                                6.8 MiB  3.14 MiB/s 00:02 [########################################################] 100%
[user1@arch-server ~]$ 
[user1@arch-server ~]$ sudo pacman -S archlinux32-keyring
warning: archlinux32-keyring-20250119-1.0 is up to date -- reinstalling
resolving dependencies...
looking for conflicting packages...

Packages (1) archlinux32-keyring-20250119-1.0

Total Installed Size:  0.05 MiB
Net Upgrade Size:      0.00 MiB

:: Proceed with installation? [Y/n] 
(1/1) checking keys in keyring                                                                  [########################################################] 100%
(1/1) checking package integrity                                                                [########################################################] 100%
(1/1) loading package files                                                                     [########################################################] 100%
(1/1) checking for file conflicts                                                               [########################################################] 100%
(1/1) checking available disk space                                                             [########################################################] 100%
:: Running pre-transaction hooks...
(1/1) tmp-exec.hook
:: Processing package changes...
(1/1) reinstalling archlinux32-keyring                                                          [########################################################] 100%
==> Appending keys from archlinux32.gpg...
==> Updating trust database...
gpg: next trustdb check due at 2025-06-16
[user1@arch-server ~]$ sudo pacman -S linux-lts-headers
resolving dependencies...
looking for conflicting packages...

Packages (1) linux-lts-headers-6.12.13-1.1

Total Download Size:   21.24 MiB
Total Installed Size:  87.87 MiB
Net Upgrade Size:       1.66 MiB

:: Proceed with installation? [Y/n] 
:: Retrieving packages...
 linux-lts-headers-6.12.13-1.1-pentium4                              21.2 MiB  3.27 MiB/s 00:06 [########################################################] 100%
(1/1) checking keys in keyring                                                                  [########################################################] 100%
(1/1) checking package integrity                                                                [########################################################] 100%
(1/1) loading package files                                                                     [########################################################] 100%
:: File /var/cache/pacman/pkg/linux-lts-headers-6.12.13-1.1-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package).
Do you want to delete it? [Y/n] 

Offline

Board footer

Powered by FluxBB