When I upgrade my packages, it says that the pgp signature of every package is wrong. But I know that that's not right. How do I stop this message from happening?

8 comments

Update only archlinux-keyring and try again.

# pacman -S archlinux-keyring # pacman -Syu

In some cases you may need to re-populate the keyring.

# pacman-key --init # pacman-key --populate
- I tried both options in order and neither worked.
  
  Then maybe the downloaded packages are actually corrupted. You could check if they have plausible file sizes. IIRC pacman will ask you if you want to delete the non-matching files but I'm not entirely sure. They should end up in /var/cache/pacman/pkg.
https://wiki.archlinux.org/title/Pacman/Package_signing#Troubleshooting
- I tried syncing my times using hwclock. It didn't work. Unless maybe you can't sync your clock with hwclock. I'm pretty bad at this. I also tried the other things but it didn't work either.
  
  You also need to sync NTP. That's the service that checks the internet to ensure the time is correct. On top of that you might want to ensure the timezone is set correctly. Also, consider reading the section on cleaning cached packages and changing your key server.

8 comments