LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Arch
User Name
Password
Arch This Forum is for the discussion of Arch Linux.

Notices


Reply
  Search this Thread
Old 06-05-2012, 10:43 PM   #1
pixellany
LQ Veteran
 
Registered: Nov 2005
Location: Annapolis, MD
Distribution: Arch/XFCE
Posts: 17,802

Rep: Reputation: 739Reputation: 739Reputation: 739Reputation: 739Reputation: 739Reputation: 739Reputation: 739
New "feature"--signatures on Arch packages


I'm running 2 Arch systems---one a Gateway desktop, the other a Lenovo lap.

both running the most current Arch + XFCE, both updated regularly.

since pacman 4.03, pacman has a new "feature"--signature (key) checking on packages. Somehow, the Gateway has been updated with no hitches. The Lenovo, OTOH, is squawking at me that the signatures are all wrong---and the basic pacman-key commands are not helping. eg "pacman-key --init" hangs the computer.

Two questions:
1. Why did we need this new feature? (and are other distros doing this?)

2. Anyone else here having similar issues?
 
Old 06-06-2012, 02:51 AM   #2
Babertje
Member
 
Registered: Jun 2009
Location: Haarlem, The Netherlands
Distribution: Archlinux
Posts: 125

Rep: Reputation: 20
pacman-key --init does not "hang" your computer, you just need to make some random "noise" simple way to make that noise is to start the key init process, open a second terminal and do a few dozen times "cat /proc/sys/kernel/random/uuid" unit the init job is done...

see http://www.archlinux.org/news/having...rify-packages/
and https://wiki.archlinux.org/index.php/Pacman-key
  • Q:1] Yes we need Signing because we can verify that those packages you get from a mirror originate from the main server and where created by the original packager from who you now hold the keys.
  • Q:2] If you run in these situations read the News section first on http://www.archlinux.org/news/
 
Old 06-06-2012, 03:10 AM   #3
syg00
LQ Veteran
 
Registered: Aug 2003
Location: Australia
Distribution: Lots ...
Posts: 17,617

Rep: Reputation: 2777Reputation: 2777Reputation: 2777Reputation: 2777Reputation: 2777Reputation: 2777Reputation: 2777Reputation: 2777Reputation: 2777Reputation: 2777Reputation: 2777
Quote:
Originally Posted by Babertje View Post
[*]Q:2] If you run in these situations read the News section first on http://www.archlinux.org/news/
Lol.

I used to trip up on Arch all the time - soon became a habit to go look at the homepage (rather than my saved link) every so often just to keep an eye on the upcoming news. Had way less unusable (Arch) systems after that ....
 
Old 06-06-2012, 05:38 AM   #4
pixellany
LQ Veteran
 
Registered: Nov 2005
Location: Annapolis, MD
Distribution: Arch/XFCE
Posts: 17,802

Original Poster
Rep: Reputation: 739Reputation: 739Reputation: 739Reputation: 739Reputation: 739Reputation: 739Reputation: 739
thanks for the inputs!!---As soon as my caffeine level reaches operational status, I'll try again.

Are any other distros doing something similar?
 
Old 06-08-2012, 03:34 PM   #5
jv2112
Member
 
Registered: Jan 2009
Location: New England
Distribution: Arch Linux
Posts: 719

Rep: Reputation: 103Reputation: 103
Lightbulb

You can modify your pacman.conf ( /etc/pacman.conf) to ignore that feature. I did because I find it quite annoying. I have been a Arch user for just under a year and have had no issues.

Code:
Under the [options] section

SigLevel = Never
 
Old 06-08-2012, 05:49 PM   #6
Babertje
Member
 
Registered: Jun 2009
Location: Haarlem, The Netherlands
Distribution: Archlinux
Posts: 125

Rep: Reputation: 20
Great idea but the "Siglevel = Never" as a global option will be phased out soon.
Future versions of pacman will get a separate SigLevel for the pacman -U from your local packages made from AUR pkgbuilds and "SigLevel = Optional TrustAll" can be used for your own repo server
 
Old 06-09-2012, 03:56 AM   #7
jv2112
Member
 
Registered: Jan 2009
Location: New England
Distribution: Arch Linux
Posts: 719

Rep: Reputation: 103Reputation: 103
No fun
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Telling people to use "Google," to "RTFM," or "Use the search feature" Ausar General 77 03-21-2010 11:26 AM
How do you install thinks on Arch? What is arch for "emerge", "apt-get" etc? just a man Arch 8 02-04-2010 11:06 AM
Do i need "RPM Packages" or "SuSe Source code packages" Donati Linux - Software 3 03-19-2009 07:32 PM
"the Following Packages Have Bad Signatures" sramelyk Linux - Newbie 1 08-21-2004 05:52 PM
"Bad signatures"- unsuccessful rpm installation kpachopoulos Linux - Software 1 03-01-2004 10:15 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Arch

All times are GMT -5. The time now is 10:56 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration