Do you still need to update archlinux-keyring before pacman -Syu?
+0
−0
For some time pacman used to have a problem where:
- Occasionally Arch maintainers introduce new GPG keys
- They start signing packages with the keys
- Your local pacman doesn't receive these until you update
archlinux-keyring - When you do a full system update, some new packages are signed with new keys
- Pacman attempts to validate everything before updating the keyring, which means the new packages fail
- The system update fails
- Keyring is not updated because it was part of the system update
The solution was to do something like pacman -Sy archlinux-keyring && pacman -Su and I've had it in my update script for a while.
Is this issue still the case? I noticed some systemd services about updating the keyring recently, but I have no idea if it's doing what I think.
0 answers
0 comment threads