You are not logged in.

#1 2022-02-12 16:51:21

logic_guy76
Member
Registered: 2020-05-24
Posts: 7

problem importing PGP keys

I hadn't updated my archlinux32 installation for a few months and when I tried to do a system upgrade I got lots of errors about invalid keys.  I tried to follow the instructions at https://archlinux32.org/download/ "https://archlinux32.org/download/:Fixing Broken Keyring(s)"  When I execute

[root@mainpc cbailey]# pacman -S archlinux-keyring archlinux32-keyring

I get:

warning: archlinux-keyring-20220125-1.0 is up to date -- reinstalling
resolving dependencies...
looking for conflicting packages...

Packages (2) archlinux-keyring-20220125-1.0  archlinux32-keyring-20220131-1.1

Total Installed Size:   1.48 MiB
Net Upgrade Size:      -0.04 MiB

:: Proceed with installation? [Y/n] y
(2/2) checking keys in keyring                            [##############################] 100%
downloading required keys...
:: Import PGP key C8E8F5A0AF9BA7E7, "Andreas Baumann <mail@andreasbaumann.cc>"? [Y/n] y
error: key "C8E8F5A0AF9BA7E7" could not be looked up remotely
error: required key missing from keyring
error: failed to commit transaction (unexpected error)
Errors occurred, no packages were upgraded.

Any suggestions?
Thanks

Offline

#2 2022-02-12 17:50:13

levi
Moderator
From: Yorkshire, UK
Registered: 2018-06-16
Posts: 1,196

Re: problem importing PGP keys

I'm not sure why those instructions tell you to install archlinux-keyring (the 64-bit version) alongside archlinux32-keyring.  I guess that was useful when we were migrating from that service way back when, but these days, I think it's overkill and could potentially be causing this problem.  Just do a pacman -S archlinux32-keyring' instead and see if that works for you.


Architecture: pentium4, Testing repos: Yes, Hardware: EeePC 901+2GB RAM+OS half on the SD card.

Offline

#3 2022-02-12 18:35:32

logic_guy76
Member
Registered: 2020-05-24
Posts: 7

Re: problem importing PGP keys

I get:

[root@mainpc cbailey]# pacman -S archlinux32-keyring
resolving dependencies...
looking for conflicting packages...

Packages (1) archlinux32-keyring-20220131-1.1

Total Download Size:    0.04 MiB
Total Installed Size:   0.04 MiB
Net Upgrade Size:      -0.04 MiB

:: Proceed with installation? [Y/n] 
:: Retrieving packages...
 archlinux32-keyring-20220131-1.1-any       35.9 KiB   283 KiB/s 00:00 [########################################] 100%
(1/1) checking keys in keyring                                         [########################################] 100%
(1/1) checking package integrity                                       [########################################] 100%
error: archlinux32-keyring: signature from "Erich Eckner (just to sign arch packages) <arch-packages@eckner.net>" is unknown trust
:: File /var/cache/pacman/pkg/archlinux32-keyring-20220131-1.1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]

Offline

#4 2022-02-12 20:42:40

logic_guy76
Member
Registered: 2020-05-24
Posts: 7

Re: problem importing PGP keys

I tried

pacman-key --init
pacman-key --populate archlinux archlinux32

then tried to update archlinux32-keyring again and this time it worked.

Tried performing a full system upgrade again and this time it worked!

Offline

#5 2022-02-12 21:28:44

levi
Moderator
From: Yorkshire, UK
Registered: 2018-06-16
Posts: 1,196

Re: problem importing PGP keys

Yes, especially if you're coming from an old update, it's often worth trying multiple different approaches until something sticks.


Architecture: pentium4, Testing repos: Yes, Hardware: EeePC 901+2GB RAM+OS half on the SD card.

Offline

#6 2025-04-17 10:25:05

stefanwelte
Member
Registered: 2022-12-29
Posts: 7

Re: problem importing PGP keys

Tried following instructions
https://wiki.archlinux.de/title/Arch_Linux_32
on an installation with state as of Archlinux-i686-EOL 11/14/2017

$ pacman -Syy archlinux32-keyring-transition
:: Synchronisiere Paketdatenbanken...
...
core/archlinux32-keyring-transition  20220209-1.0           0,04 MiB
Gesamtgröße der installierten Pakete:  0,04 MiB
:: Installation fortsetzen? [J/n] 
(1/1) Prüfe Schlüssel im Schlüsselring                                                                  [##############################################################] 100%
Lade benötigte Schlüssel herunter...
Fehler: key "C8E8F5A0AF9BA7E7" could not be looked up remotely
Fehler: Erforderlicher Schlüssel fehlt im Schlüsselbund
Fehler: Konnte den Vorgang nicht durchführen (Unerwarteter Fehler)
Fehler sind aufgetreten, keine Pakete wurden aktualisiert.

logic_guy76s solution didn't work:

$ pacman-key --init
$ pacman-key --populate archlinux archlinux32
==> FEHLER: Die Schlüsselbund-Datei /usr/share/pacman/keyrings/archlinux32.gpg existiert nicht.

Any other approaches?

Thanks.

Offline

#7 2025-04-18 09:56:46

abaumann
Administrator
From: Zurich
Registered: 2019-11-14
Posts: 1,075
Website

Re: problem importing PGP keys

Not sure if you can really go trhough 8 years of keys since the archlinux to archlinux32 transition keys.

Offline

#8 2025-04-18 10:27:23

stefanwelte
Member
Registered: 2022-12-29
Posts: 7

Re: problem importing PGP keys

Following official instructions for transition at https://www.archlinux32.org/download/ results in problem with different key: CEB167EFB5722BD6

$ pacman -Syy archlinux32-keyring-transition
:: Synchronizing package databases...
 core                                                                                                 151.8 KiB   535K/s 00:00 [############################################################################] 100%
 extra                                                                                               2018.7 KiB   843K/s 00:02 [############################################################################] 100%
 community                                                                                              5.0 MiB   591K/s 00:09 [############################################################################] 100%
resolving dependencies...
looking for conflicting packages...

Package (1)                          New Version  Net Change

core/archlinux32-keyring-transition  20191103-1     0.03 MiB

Total Installed Size:  0.03 MiB

:: Proceed with installation? [Y/n] 
(1/1) checking keys in keyring                                                                                                 [############################################################################] 100%
downloading required keys...
error: key "CEB167EFB5722BD6" could not be looked up remotely
error: required key missing from keyring
error: failed to commit transaction (unexpected error)
Errors occurred, no packages were upgraded.

Offline

#9 2025-04-18 10:29:10

stefanwelte
Member
Registered: 2022-12-29
Posts: 7

Re: problem importing PGP keys

abaumann wrote:

Not sure if you can really go trhough 8 years of keys since the archlinux to archlinux32 transition keys.

Would be nice and helpful if.
May I disable key(ring) system for transition (temporarily)?

Offline

#10 2025-04-18 17:56:35

stefanwelte
Member
Registered: 2022-12-29
Posts: 7

Re: problem importing PGP keys

$ cat /etc/pacman.d/gnupg/gpg.conf 
no-greeting
no-permission-warning
lock-never
keyserver hkp://pool.sks-keyservers.net
keyserver-options timeout=10

$ nslookup pool.sks-keyservers.net
Server:         1.1.1.1
Address:        1.1.1.1#53

** server can't find pool.sks-keyservers.net: SERVFAIL

Problem solved by using another keyserver or/and replacing keyserver line in /etc/pacman.d/gnupg/gpg.conf :

pacman-key -r CEB167EFB5722BD6  --keyserver hkp://keyserver.ubuntu.com:80

Would be good to be mentioned in section "Fixing Broken Keyring(s)" on page: https://www.archlinux32.org/download/
e.g. "Eventually manually importing key by command 'pacman-key -r CEB167EFB5722BD6  --keyserver hkp://keyserver.ubuntu.com:80' or replacing keyserver line in /etc/pacman.d/gnupg/gpg.conf accordingly is necessary."

Offline

#11 2025-04-19 08:50:21

abaumann
Administrator
From: Zurich
Registered: 2019-11-14
Posts: 1,075
Website

Re: problem importing PGP keys

Very good point. Will add it there.

Offline

Board footer

Powered by FluxBB