BlackArch/blackarch

Black keyring invalidity and strap.sh not working...

Kalidude69 opened this issue · 7 comments

Kalidude69 commented
  • I have searched open and closed issues for duplicates
  • I am submitting a bug report for existing functionality that does not work as intended

Bug description

When trying to synchronize the BlackArch repository, I encounter an invalid signature error from "Levon 'noptrix' Kayan". The error prevents me from updating or installing packages from the BlackArch repository. Here's the error message:

Steps to reproduce

  • Add the BlackArch repository to /etc/pacman.conf as per official documentation.
  • Run the following command: 
    sudo pacman -Syyu

Also changing SigLevel = Never .... does fix it but is it safe??

Actual result:
The synchronization process fails, displaying the invalid signature error.

Expected result:
The repository should synchronize successfully, allowing for package updates and installations without any errors.

Info for developers

Device: laptop (i5 10th gen CPU, 8GB RAM)
GNU/Linux distribution: CachyOS (Arch-based)
BlackArch keyring version: Latest version as of blackarch-keyring 20180925-5

D3vil0p3r commented

Also changing SigLevel = Never .... does fix it but is it safe??

No

Assuming that all packages are still signed with a valid key, I guess you are using a BA mirror that could have packages signed with an invalid key (i.e., because the mirror is not syncing correctly). Try to use other different mirrors and check if you can get a good result. Remember to clean pacman cache each time you do this test.

Kalidude69 commented

i dont understand what you meant to say.....

anunna commented

I screenshot would help more with your current situation.

It may be:

echo "F9A6E68A711354D84A9B91637533BAFE69A25079:4:" >> /usr/share/pacman/keyrings/blackarch-trusted
pacman-key --populate
Kalidude69 commented

I screenshot would help more with your current situation.

It may be:

echo "F9A6E68A711354D84A9B91637533BAFE69A25079:4:" >> /usr/share/pacman/keyrings/blackarch-trusted
pacman-key --populate

heyyy thanks!! doing this fixed it....but btw another query ... is this fine ???

SigLevel=DatabaseOptional TrustedOnly
Include = /etc/pacman.d/blackarch-mirrorlist
Kalidude69 commented

image
were you asking for this screenshot?
if not im sorry

anunna commented

No, the "Actual result" error that you reported. But anyway, did my comment resolve your problem after adding it?

Kalidude69 commented

No, the "Actual result" error that you reported. But anyway, did my comment resolve your problem after adding it?

yes the things you said did fix the problem .... the actual result error I said before was just a line coming up when synchronizing pacman...I encounter an invalid signature error from "Levon 'noptrix' Kayan"...blackarch db didnt sync back then but now it's fixed thanks!!

  • 👍1