Add explicit key rotation fix steps

warkanum committed 2026-10-15 16:56:14 +00:00
1 parent 19ab7aeaf8
commit f2880f1f71
1 file changed
+14 -3
@@ -33,7 +33,20 @@ error: database 'relspec' is not valid (invalid or corrupted database (PGP signa
- `SigLevel = Optional TrustAll` does not help — a signature from a missing key still fails.
- `keyring is not writable` only means the command ran without root; it is not the cause.
Fix: re-import the current key (Setup steps above), then `yay -Sy relspec`.
Fix:
```sh
curl -sSf https://git.warky.dev/api/packages/wdevs/arch/repository.key -o /tmp/relspec.key
sudo pacman-key --add /tmp/relspec.key
sudo pacman-key --lsign-key 13DACD9EE6E5BA4ED059113B4672DC0F3BDF6DE9
yay -Sy relspec
```
Optional cleanup:
```sh
sudo pacman-key --delete 3354C1D1D0277531BB57A2E71289ABA000C5D933
```
Check which key signs the DB:
@@ -42,8 +55,6 @@ curl -sSfO https://git.warky.dev/api/packages/wdevs/arch/relspec/x86_64/relspec.
gpg --list-packets relspec.db.sig | grep 'issuer fpr'
```
Remove an old key: `sudo pacman-key --delete <OLD_FINGERPRINT>`
## Key history
| Fingerprint | Created |