Add explicit key rotation fix steps
1 parent
19ab7aeaf8
commit
f2880f1f71
1 file changed
+14
-3
@@ -33,7 +33,20 @@ error: database 'relspec' is not valid (invalid or corrupted database (PGP signa
|
||||
- `SigLevel = Optional TrustAll` does not help — a signature from a missing key still fails.
|
||||
- `keyring is not writable` only means the command ran without root; it is not the cause.
|
||||
|
||||
Fix: re-import the current key (Setup steps above), then `yay -Sy relspec`.
|
||||
Fix:
|
||||
|
||||
```sh
|
||||
curl -sSf https://git.warky.dev/api/packages/wdevs/arch/repository.key -o /tmp/relspec.key
|
||||
sudo pacman-key --add /tmp/relspec.key
|
||||
sudo pacman-key --lsign-key 13DACD9EE6E5BA4ED059113B4672DC0F3BDF6DE9
|
||||
yay -Sy relspec
|
||||
```
|
||||
|
||||
Optional cleanup:
|
||||
|
||||
```sh
|
||||
sudo pacman-key --delete 3354C1D1D0277531BB57A2E71289ABA000C5D933
|
||||
```
|
||||
|
||||
Check which key signs the DB:
|
||||
|
||||
@@ -42,8 +55,6 @@ curl -sSfO https://git.warky.dev/api/packages/wdevs/arch/relspec/x86_64/relspec.
|
||||
gpg --list-packets relspec.db.sig | grep 'issuer fpr'
|
||||
```
|
||||
|
||||
Remove an old key: `sudo pacman-key --delete <OLD_FINGERPRINT>`
|
||||
|
||||
## Key history
|
||||
|
||||
| Fingerprint | Created |
|
||||
Reference in new issue
Block a user