Unable to update - <matti@manjaro.org> is unknown trust

I'm finding it difficult to update my Manjaro install.
Everytime I try to update these two packages are corrupted (PGP signature)

error: dunst: signature from "Matti Hyttinen <matti@manjaro.org>" is unknown trust
:: File /var/cache/pacman/pkg/dunst-1.4.0-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: update-notifier: signature from "Matti Hyttinen <matti@manjaro.org>" is unknown trust
:: File /var/cache/pacman/pkg/update-notifier-0.7.8-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.

Deleting these files doesn't help nor did any of the commands in this forum post:

System:
  Host: MANJARO-ThinkPad-X220 Kernel: 4.19.28-1-MANJARO x86_64 bits: 64 
  compiler: gcc v: 8.2.1 Desktop: Gnome 3.30.2 Distro: Manjaro Linux 
Machine:
  Type: Laptop System: LENOVO product: 429144G v: ThinkPad X220 
  serial: <root required> 
  Mobo: LENOVO model: 429144G serial: <root required> UEFI [Legacy]: LENOVO 
  v: 8DET76WW (1.46 ) date: 06/21/2018 
Battery:
  ID-1: BAT0 charge: 70.0 Wh condition: 70.0/73.3 Wh (96%) 
  model: SANYO 42T4867 status: Charging 
CPU:
  Topology: Dual Core model: Intel Core i5-2520M bits: 64 type: MT MCP 
  arch: Sandy Bridge rev: 7 L2 cache: 3072 KiB 
  flags: lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx bogomips: 19947 
  Speed: 824 MHz min/max: 800/3200 MHz Core speeds (MHz): 1: 905 2: 886 
  3: 852 4: 858 
Graphics:
  Device-1: Intel 2nd Generation Core Processor Family Integrated Graphics 
  vendor: Lenovo driver: i915 v: kernel bus ID: 00:02.0 
  Display: x11 server: X.org 1.20.4 driver: i915 
  resolution: <xdpyinfo missing> 
  OpenGL: renderer: Mesa DRI Intel Sandybridge Mobile v: 3.3 Mesa 18.3.4 
  direct render: Yes 
Audio:
  Device-1: Intel 6 Series/C200 Series Family High Definition Audio 
  vendor: Lenovo driver: snd_hda_intel v: kernel bus ID: 00:1b.0 
  Sound Server: ALSA v: k4.19.28-1-MANJARO 
Network:
  Device-1: Intel 82579LM Gigabit Network vendor: Lenovo ThinkPad T520 
  driver: e1000e v: 3.2.6-k port: 5080 bus ID: 00:19.0 
  IF: enp0s25 state: down mac: f0:de:f1:70:8d:a7 
  Device-2: Intel Centrino Advanced-N 6205 [Taylor Peak] driver: iwlwifi 
  v: kernel port: efa0 bus ID: 03:00.0 
  IF: wlp3s0 state: up mac: a0:88:b4:9a:94:a4 
Drives:
  Local Storage: total: 465.76 GiB used: 6.83 GiB (1.5%) 
  ID-1: /dev/sda vendor: Seagate model: ST500LM000-1EJ162 size: 465.76 GiB 
Partition:
  ID-1: / size: 19.77 GiB used: 6.83 GiB (34.5%) fs: ext4 dev: /dev/sda5 
Sensors:
  System Temperatures: cpu: 50.0 C mobo: N/A 
  Fan Speeds (RPM): cpu: 3484 
Info:
  Processes: 235 Uptime: 20m Memory: 7.57 GiB used: 2.11 GiB (27.9%) 
  Init: systemd Compilers: gcc: N/A Shell: bash v: 5.0.0 inxi: 3.0.32 

1 Like

I'm having the exact same problem. Fresh Manjaro installation, first update and I get these erros too.

Total Download Size:      0,07 MiB
Total Installed Size:  4318,50 MiB
Net Upgrade Size:        76,73 MiB

:: Proceed with installation? [Y/n] y
(390/390) checking keys in keyring                                       [########################################] 100%
(390/390) checking package integrity                                     [########################################] 100%
error: dunst: signature from "Matti Hyttinen <matti@manjaro.org>" is unknown trust
:: File /var/cache/pacman/pkg/dunst-1.4.0-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] n
error: update-notifier: signature from "Matti Hyttinen <matti@manjaro.org>" is unknown trust
:: File /var/cache/pacman/pkg/update-notifier-0.7.8-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] n
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.
[archbeast ~]# 

Already did this:

sudo pacman -S archlinux-keyring manjaro-keyring
sudo pacman-key --populate archlinux manjaro
sudo pacman-key --refresh-keys

and this:

removing /var/cache/pacman/pkg so pacman will download it again.

with no success.

Any suggestions?

At least I'm not the only one experiencing these errors... When your expertise are in NT and not Unix well, it's not going to be a fun night.
Though I suspect that adding the signatures from Matti Hyttinen might fix it... But I don't know the command for that.

@Chrysostomus, is there an issue with your key?

What makes this stranger is that I've installed the same Manjaro image on two systems, only the ThinkPad X220 is having these issues so ¯_(ツ)_/¯

I can confirm the same issue with dunst, and I know my keyring is correct.

I suspect the packages need to be rebuilt/re-signed and re-uploaded:

$ pacman -Si dunst
Repository      : community
Name            : dunst
Version         : 1.4.0-1
...
Packager        : Matti Hyttinen <matti@manjaro.com>
Build Date      : Wed 03 Apr 2019 20:52:57 BST
...

@Chrysostomus Did you sign the packages with the correct key? :stuck_out_tongue:

I have also experienced this issue.
It looks like the signing key has expired:

$ LANG=C gpg --homedir /etc/pacman.d/gnupg --list-keys matti@manjaro.org
gpg: WARNING: unsafe ownership on homedir '/etc/pacman.d/gnupg'
gpg: Note: trustdb not writable
pub   rsa2048 2017-06-01 [SC] [expired: 2019-06-02]
      2D14560CDCE6A75BB186DB758238651DDF5E0594
uid           [ expired] Matti Hyttinen <matti@manjaro.org>
1 Like

Bingo. :+1:

Matti! Update your key!

Ah, it's that time of the year again... Updating now

EDIT: Okay, refreshed now.

2 Likes

I've followed every instruction in this post, and I cannot get past this error... Trying to do a bunch of initial updates (just installed Manjaro a couple hours ago) and I am unable to update anything...

Confirming. Fresh install of i3manjaro on a virtual machine, having the same issue.

You probably need to get it from a keyserver that has the updated key.

Try refreshing against a specific server:

sudo pacman-key --refresh-keys --keyserver pgp.mit.edu

Alternatively, you could just import it directly:

sudo pacman-key -r 8238651DDF5E0594 --keyserver pgp.mit.edu

Someone brought to my attention that their attempt to install via Manjaro Architect was failing, so I tried running it in a VM to test, and sure enough, it failed: https://i.imgur.com/HZbf8Th.png

The relevant error message appears to be this:

error: manjaro-achitect: signature from "Matti Hyttinen matti@manjaro.org" is unknown trust

:: File /var/cache/pacman/pkg/manjaro-architect-0.9.26-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature))

How and where should something like this be reported? And is there any way to bypass this error or should we just wait until it's fixed? Thanks.

Welcome!

Please read the posts that are (now) above. If you have any additional questions please feel free to ask

Cheers! Refreshing the keys worked. :slight_smile:

1 Like

I think I should put it on the calendar next time. I forget to refresh the key every year.

$ sudo pacman-key -r 8238651DDF5E0594 --keyserver pgp.mit.edu
gpg: keyserver receive failed: No keyserver available
==> ERROR: Remote key not fetched correctly from keyserver.

Erm... That shouldn't happen right?

I still can't update. Same errors..
Already did this

sudo pacman -S archlinux-keyring manjaro-keyring
sudo pacman-key --populate archlinux manjaro
sudo pacman-key --refresh-keys

with no success..
Please help

sudo pacman-key -r 8238651DDF5E0594 --keyserver pgp.mit.edu
gpg: keyserver receive failed: No data
==> ERROR: Remote key not fetched correctly from keyserver.

I've tried all commands. None have worked.

2 Likes

sudo pacman-key -r 8238651DDF5E0594 --keyserver pgp.mit.edu
gpg: keyserver receive failed: No keyserver available
==> ERROR: Remote key not fetched correctly from keyserver.

have the same story :frowning:

Forum kindly sponsored by