Add explicit key rotation fix steps
1 parent
19ab7aeaf8
commit
f2880f1f71
1 file changed
+14
-3
@@ -33,7 +33,20 @@ error: database 'relspec' is not valid (invalid or corrupted database (PGP signa
|
|||||||
- `SigLevel = Optional TrustAll` does not help — a signature from a missing key still fails.
|
- `SigLevel = Optional TrustAll` does not help — a signature from a missing key still fails.
|
||||||
- `keyring is not writable` only means the command ran without root; it is not the cause.
|
- `keyring is not writable` only means the command ran without root; it is not the cause.
|
||||||
|
|
||||||
Fix: re-import the current key (Setup steps above), then `yay -Sy relspec`.
|
Fix:
|
||||||
|
|
||||||
|
```sh
|
||||||
|
curl -sSf https://git.warky.dev/api/packages/wdevs/arch/repository.key -o /tmp/relspec.key
|
||||||
|
sudo pacman-key --add /tmp/relspec.key
|
||||||
|
sudo pacman-key --lsign-key 13DACD9EE6E5BA4ED059113B4672DC0F3BDF6DE9
|
||||||
|
yay -Sy relspec
|
||||||
|
```
|
||||||
|
|
||||||
|
Optional cleanup:
|
||||||
|
|
||||||
|
```sh
|
||||||
|
sudo pacman-key --delete 3354C1D1D0277531BB57A2E71289ABA000C5D933
|
||||||
|
```
|
||||||
|
|
||||||
Check which key signs the DB:
|
Check which key signs the DB:
|
||||||
|
|
||||||
@@ -42,8 +55,6 @@ curl -sSfO https://git.warky.dev/api/packages/wdevs/arch/relspec/x86_64/relspec.
|
|||||||
gpg --list-packets relspec.db.sig | grep 'issuer fpr'
|
gpg --list-packets relspec.db.sig | grep 'issuer fpr'
|
||||||
```
|
```
|
||||||
|
|
||||||
Remove an old key: `sudo pacman-key --delete <OLD_FINGERPRINT>`
|
|
||||||
|
|
||||||
## Key history
|
## Key history
|
||||||
|
|
||||||
| Fingerprint | Created |
|
| Fingerprint | Created |
|
||||||
Reference in new issue
Block a user