Do you still need to update archlinux-keyring before pacman -Syu?

For some time pacman used to have a problem where:

• Occasionally Arch maintainers introduce new GPG keys
• They start signing packages with the keys
• Your local pacman doesn't receive these until you update archlinux-keyring
• When you do a full system update, some new packages are signed with new keys
• Pacman attempts to validate everything before updating the keyring, which means the new packages fail
• The system update fails
• Keyring is not updated because it was part of the system update

The solution was to do something like pacman -Sy archlinux-keyring && pacman -Su and I've had it in my update script for a while.

Is this issue still the case? I noticed some systemd services about updating the keyring recently, but I have no idea if it's doing what I think.

posted 8 months ago

CC BY-SA 4.0

matthewsnyder‭

1086 reputation 79 53 175 73