Build System signature invalid despite enable package signin

This forum is for discussion about general software issues.

Build System signature invalid despite enable package signin

Postby moradinkain » Fri Jul 21, 2017 10:35 pm

I'd appreciate any guidance or advice on this, as I've been beating my head against it the past few days.

Clean install onto a ODroid C2 following the posted installation instructions. Followed up with enabling signature checking also via the posted instructions. Archlinuxarm keys seem to be successfully imported and signed. Upon trying to run an update however, after downloading files I'm confronted with:
$this->bbcode_second_pass_code('', '
[root@alarm alarm]# pacman -Syyu
:: Synchronizing package databases...
core 184.0 KiB 1022K/s 00:00 [#################################################################] 100%
extra 2.3 MiB 1455K/s 00:02 [#################################################################] 100%
community 3.8 MiB 162K/s 00:24 [#################################################################] 100%
alarm 44.6 KiB 212K/s 00:00 [#################################################################] 100%
aur 6.8 KiB 680K/s 00:00 [#################################################################] 100%
:: Starting full system upgrade...
error: extra database is inconsistent: name mismatch on package libreoffice-still-sq
resolving dependencies...
looking for conflicting packages...

Packages (39) curl-7.54.1-2 device-mapper-2.02.172-2 dnssec-anchors-20170711-1 expat-2.2.2-1 glib2-2.52.3-1 glibc-2.25-4 gnupg-2.1.21-3 gnutls-3.5.14-1 grep-3.1-1
haveged-1.9.1-3 iproute2-4.12.0-2 libarchive-3.3.2-1 libelf-0.169-2 libgcrypt-1.7.8-1 libldap-2.4.44-5 libnghttp2-1.23.1-1 libnl-3.3.0-1 libsystemd-233.75-3.1
libtirpc-1.0.2-1 libusb-1.0.21-2 linux-odroid-c2-3.14.79-27 logrotate-3.12.3-1 lvm2-2.02.172-2 mkinitcpio-busybox-1.26.1-1 nano-2.8.5-1 npth-1.5-1
p11-kit-0.23.7-1 pacman-5.0.2-2 pcre-8.41-1 perl-5.26.0-1 popt-1.16-9 psmisc-23.1-1 s-nail-14.9.0-1 sqlite-3.19.3-1 systemd-233.75-3.1
systemd-sysvcompat-233.75-3.1 texinfo-6.4-1 thin-provisioning-tools-0.7.0-1 zlib-1:1.2.11-2

Total Download Size: 61.66 MiB
Total Installed Size: 228.22 MiB
Net Upgrade Size: 3.18 MiB

:: Proceed with installation? [Y/n]
:: Retrieving packages...
glibc-2.25-4-aarch64 8.0 MiB 242K/s 00:34 [#################################################################] 100%
zlib-1:1.2.11-2-aarch64 76.0 KiB 691K/s 00:00 [#################################################################] 100%
p11-kit-0.23.7-1-aarch64 332.6 KiB 1232K/s 00:00 [#################################################################] 100%
perl-5.26.0-1-aarch64 13.5 MiB 1972K/s 00:07 [#################################################################] 100%
libldap-2.4.44-5-aarch64 256.4 KiB 1221K/s 00:00 [#################################################################] 100%
curl-7.54.1-2-aarch64 873.7 KiB 1618K/s 00:01 [#################################################################] 100%
libgcrypt-1.7.8-1-aarch64 382.6 KiB 269K/s 00:01 [#################################################################] 100%
libsystemd-233.75-3.1-aarch64 286.4 KiB 253K/s 00:01 [#################################################################] 100%
pcre-8.41-1-aarch64 857.6 KiB 1479K/s 00:01 [#################################################################] 100%
glib2-2.52.3-1-aarch64 2.1 MiB 1838K/s 00:01 [#################################################################] 100%
gnutls-3.5.14-1-aarch64 2.2 MiB 1915K/s 00:01 [#################################################################] 100%
sqlite-3.19.3-1-aarch64 1034.8 KiB 165K/s 00:06 [#################################################################] 100%
gnupg-2.1.21-3-aarch64 1866.9 KiB 213K/s 00:09 [#################################################################] 100%
grep-3.1-1-aarch64 180.1 KiB 154K/s 00:01 [#################################################################] 100%
libelf-0.169-2-aarch64 326.2 KiB 186K/s 00:02 [#################################################################] 100%
libnl-3.3.0-1-aarch64 309.1 KiB 1189K/s 00:00 [#################################################################] 100%
iproute2-4.12.0-2-aarch64 612.6 KiB 1750K/s 00:00 [#################################################################] 100%
systemd-233.75-3.1-aarch64 3.6 MiB 1879K/s 00:02 [#################################################################] 100%
linux-odroid-c2-3.14.79-27-aarch64 21.2 MiB 178K/s 02:02 [#################################################################] 100%
lvm2-2.02.172-2-aarch64 1149.3 KiB 1715K/s 00:01 [#################################################################] 100%
nano-2.8.5-1-aarch64 408.8 KiB 335K/s 00:01 [#################################################################] 100%
pacman-5.0.2-2-aarch64 727.4 KiB 319K/s 00:02 [#################################################################] 100%
psmisc-23.1-1-aarch64 90.7 KiB 604K/s 00:00 [#################################################################] 100%
s-nail-14.9.0-1-aarch64 393.6 KiB 1458K/s 00:00 [#################################################################] 100%
texinfo-6.4-1-aarch64 1174.3 KiB 1779K/s 00:01 [#################################################################] 100%
(39/39) checking keys in keyring [#################################################################] 100%
(39/39) checking package integrity [#################################################################] 100%
error: glibc: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/glibc-2.25-4-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: p11-kit: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/p11-kit-0.23.7-1-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: perl: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/perl-5.26.0-1-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: libldap: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/libldap-2.4.44-5-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: curl: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/curl-7.54.1-2-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: libgcrypt: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/libgcrypt-1.7.8-1-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: libsystemd: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/libsystemd-233.75-3.1-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: pcre: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/pcre-8.41-1-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: glib2: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/glib2-2.52.3-1-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: gnutls: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/gnutls-3.5.14-1-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: sqlite: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/sqlite-3.19.3-1-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: gnupg: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/gnupg-2.1.21-3-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: grep: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/grep-3.1-1-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: libelf: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/libelf-0.169-2-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: libnl: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/libnl-3.3.0-1-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: iproute2: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/iproute2-4.12.0-2-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: systemd: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/systemd-233.75-3.1-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: linux-odroid-c2: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/linux-odroid-c2-3.14.79-27-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: lvm2: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/lvm2-2.02.172-2-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: nano: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/nano-2.8.5-1-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: pacman: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/pacman-5.0.2-2-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: psmisc: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/psmisc-23.1-1-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: s-nail: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/s-nail-14.9.0-1-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: texinfo: signature from "Arch Linux ARM Build System <builder@archlinuxarm.org>" is invalid
:: File /var/cache/pacman/pkg/texinfo-6.4-1-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.
')
I've tried refreshing the keys, switching to a different keyserver and refreshing the keys again, all to no avail. My pacman.conf currently looks like:
$this->bbcode_second_pass_code('', '
#
# /etc/pacman.conf
#
# See the pacman.conf(5) manpage for option and repository directives

#
# GENERAL OPTIONS
#
[options]
# The following paths are commented out with their default values listed.
# If you wish to use different paths, uncomment and update the paths.
#RootDir = /
#DBPath = /var/lib/pacman/
#CacheDir = /var/cache/pacman/pkg/
#LogFile = /var/log/pacman.log
#GPGDir = /etc/pacman.d/gnupg/
#HookDir = /etc/pacman.d/hooks/
HoldPkg = pacman glibc
#XferCommand = /usr/bin/curl -C - -f %u > %o
#XferCommand = /usr/bin/wget --passive-ftp -c -O %o %u
#CleanMethod = KeepInstalled
#UseDelta = 0.7
Architecture = aarch64

# Pacman won't upgrade packages listed in IgnorePkg and members of IgnoreGroup
#IgnorePkg =
#IgnoreGroup =

#NoUpgrade =
#NoExtract =

# Misc options
#UseSyslog
#Color
#TotalDownload
CheckSpace
#VerbosePkgLists

# PGP signature checking
# NOTE: None of this will work without running `pacman-key --init` first.
# The compiled in default is equivalent to the following line. This requires
# you to locally sign and trust packager keys using `pacman-key` for them to be
# considered valid.
SigLevel = Required DatabaseOptional
LocalFileSigLevel = Optional
#RemoteFileSigLevel = Required
# If you wish to check signatures but avoid local sign and trust issues, use
# the following line. This will treat any key imported into pacman's keyring as
# trusted.
#SigLevel = Optional TrustAll
# For now, off by default unless you read the above.
#SigLevel = Never

#
# REPOSITORIES
# - can be defined here or included from another file
# - pacman will search repositories in the order defined here
# - local/custom mirrors can be added here or in separate files
# - repositories listed first will take precedence when packages
# have identical names, regardless of version number
# - URLs will have $repo replaced by the name of the current repo
# - URLs will have $arch replaced by the name of the architecture
#
# Repository entries are of the format:
# [repo-name]
# Server = ServerName
# Include = IncludePath
#
# The header [repo-name] is crucial - it must be present and
# uncommented to enable the repo.
#

# The testing repositories are disabled by default. To enable, uncomment the
# repo name header and Include lines. You can add preferred servers immediately
# after the header, and they will be used before the default mirrors.

[core]
Include = /etc/pacman.d/mirrorlist

[extra]
Include = /etc/pacman.d/mirrorlist

[community]
Include = /etc/pacman.d/mirrorlist

[alarm]
Include = /etc/pacman.d/mirrorlist

[aur]
Include = /etc/pacman.d/mirrorlist

# An example of a custom package repository. See the pacman manpage for
# tips on creating your own repositories.
#[custom]
#SigLevel = Optional TrustAll
#Server = file:///home/custompkgs
')

I've tried commenting out the SigLevel=Required DatabaseOptional and LocalFileSigLevel lines and uncommenting the SigLevel=Never line, but this then results in checksum errors when trying to update:
$this->bbcode_second_pass_code('', '
[root@alarm alarm]# pacman -S glibc
resolving dependencies...
looking for conflicting packages...

Packages (1) glibc-2.25-4

Total Download Size: 8.00 MiB
Total Installed Size: 33.75 MiB
Net Upgrade Size: 0.03 MiB

:: Proceed with installation? [Y/n]
:: Retrieving packages...
glibc-2.25-4-aarch64 8.0 MiB 1913K/s 00:04 [#################################################################] 100%
(1/1) checking keys in keyring [#################################################################] 100%
(1/1) checking package integrity [#################################################################] 100%
:: File /var/cache/pacman/pkg/glibc-2.25-4-aarch64.pkg.tar.xz is corrupted (invalid or corrupted package (checksum)).
Do you want to delete it? [Y/n]
error: failed to commit transaction (invalid or corrupted package (checksum))
Errors occurred, no packages were upgraded.
')

I've never saved any of the corrupted files, so my cache should be clean, but I've cleaned it just to be sure and the problem remains. Pacman-key currently shows:
$this->bbcode_second_pass_code('', '
[root@alarm alarm]# pacman-key --list-keys
/etc/pacman.d/gnupg/pubring.gpg
-------------------------------
pub rsa2048 2017-07-21 [SC]
DE0877CFDE1E3A22DABCA47FB5A32F2D5B7A2851
uid [ultimate] Pacman Keyring Master Key <pacman@localhost>

pub rsa4096 2014-01-18 [SC]
9D22B7BB678DC056B1F7723CB55C5315DCD9EE1A
uid [ full ] Jason Plum (Arch Linux ARM Master Key) <jplum@master-key.archlinuxarm.org>
sub rsa4096 2014-01-18 [E]

pub rsa4096 2014-01-18 [SC]
02922214DE8981D14DC2ACABBC704E86B823CD25
uid [ full ] Kevin Mihelich (Arch Linux ARM Master Key) <kevin@master-key.archlinuxarm.org>
sub rsa4096 2014-01-18 [E]

pub rsa4096 2014-01-18 [SC]
69DD6C8FD314223E14362848BF7EEF7A9C6B5765
uid [ full ] Michael Brown (ArchLinux ARM Master Key) <mbrown@master-key.archlinuxarm.org>
sub rsa4096 2014-01-18 [E]

pub rsa4096 2014-01-18 [SC]
68B3537F39A313B3E574D06777193F152BDBE6A6
uid [ full ] Arch Linux ARM Build System <builder@archlinuxarm.org>
sub rsa4096 2014-01-18 [E]
')

I've been using Arch for a long while, but have never come across this sort of signing issue and have run out of options to try. Any suggestions or recommendations would be greatly appreciated. This machine was running Archlinux ARM happily earlier this summer, but I needed to wipe and do a reinstall and then have run against this frustrating issue.

First time forum poster, so my apologies if I've left out needed information or formatted anything incorrectly!
moradinkain
 
Posts: 1
Joined: Fri Jul 21, 2017 10:06 pm

Return to General

Who is online

Users browsing this forum: No registered users and 4 guests