SteamOS 3.5.5: can't install pacman packages because of unknown trust

[Mr_Steppy]

I just updated to SteamOS 3.5.5 from the stable channel and tried to reinstall the glibc and base-devel packages with pacman.

This fails with the following:

glibc: signature from "GitLab CI Package Builder <[e-mail]>" is unknown trust

I've already tried:

pacman-key --init
pacman-key --populate archlinux

I can't reinstall archlinux-keyring because that fails with the same error.

Has anybody some ideas how I might get pacman working again?

[AGENTFBI007]

Same problem on the beta branch. I "fixed" it by temporarily adding

SigLevel = TrustAll

under

[options]

in the file

/etc/pacman.conf

Keep in mind that this is normally not recommended. It kind of says ignore the signature verification. But I wasn't able to fix it using another method. More info regarding the setting can be found here: https://wiki.archlinux.org/title/Pacman/Package_signing#Configuring_pacman

I guess they broke something. The

linux-neptune-headers

package which is neeed for

xone

also installs an outdated not matching version. I had to manually download the package via

wget

from https://steamdeck-packages.steamos.cloud/archlinux-mirror/jupiter-main/os/x86_64/

[Mr_Steppy]

As temporary workaround this will certainly do. Thank you very much!

[Stonium]

After setting SigLevel = TrustAll you can run
sudo pacman -S holo-keyring archlinux-keyring
then after installing it set it back and it will work.

[NimrodX]

Not like I really know what's going on because I'm totally new to Arch Linux and pacman, but try this as it seems to have fixed some of these issues for me:

    pacman-key --init
    pacman-key --populate archlinux
    pacman-key --populate holo

FYI, here are all the keyring packages I have installed (I'm on preview channel):

$ pacman -Ss .*keyring
holo-3.5/holo-keyring 20220203-4 (holo-base) [installed]
    Holo PGP keyring
core-3.5/archlinux-keyring 20230504-1 [installed]
    Arch Linux PGP keyring
extra-3.5/alpine-keyring 2.4-1
    Public keys for Alpine Linux packages
extra-3.5/debian-archive-keyring 2023.3-1
    GnuPG archive keys of the Debian archive
extra-3.5/debian-ports-archive-keyring 2023.02.01-1
    GnuPG archive keys of the debian-ports archive
extra-3.5/deepin-polkit-agent-ext-gnomekeyring 0.1.0-2 (deepin)
    GNOME keyring extension for dde-polkit-agent
extra-3.5/gnome-keyring 1:42.1-3 (gnome)
    Stores passwords and encryption keys
extra-3.5/jetring 0.30-1
    gpg keyring maintenance using changesets
extra-3.5/libgnome-keyring 3.12.0+13+g4f8ab73-3
    GNOME keyring client library (deprecated)
extra-3.5/python-keyring 23.13.1-1
    Store and access your passwords safely
extra-3.5/python-keyrings-alt 1:4.2.0-3
    Alternate keyring implementations
extra-3.5/sequoia-keyring-linter 1.0.0-1 (sequoia)
    OpenPGP certificate linter
extra-3.5/ubuntu-keyring 2021.03.26-1
    GnuPG keys of the Ubuntu archive

[NimrodX]

Actually what you want is probably in here:

$ more /usr/bin/steamos-devmode
...
    rm -rf /etc/pacman.d/gnupg/ || :
    pacman-key --init
    pacman-key --populate
    pacman -Sy --noconfirm --needed archlinux-keyring
    pacman --noconfirm -S $(pacman -Qnkq | cut -d' ' -f1 | sort | uniq)
    pacman -S base-devel multilib-devel --needed
...

[wildtiger]

Originally posted by NimrodX:

Not like I really know what's going on because I'm totally new to Arch Linux and pacman, but try this as it seems to have fixed some of these issues for me:

    pacman-key --init
    pacman-key --populate archlinux
    pacman-key --populate holo

Thanks, "pacman-key --populate holo" was the one that fixed it for me.

[NimrodX]

no problem, but long term I think I'd either use /usr/bin/steamos-devmode or use the same procedure they use there with pacman-key. The SteamOS people will probably update that script with anything else if it needed to be added in the future.

[Jonathan]

Originally posted by Stonium:

After setting SigLevel = TrustAll you can run
sudo pacman -S holo-keyring archlinux-keyring
then after installing it set it back and it will work.

This right here did the trick for me. Many thanks.

[Leyn]

I could run `pacman-key --populate holo` without changing SigLevel at all and it fixed the issue, thanks!

Originally posted by NimrodX:

no problem, but long term I think I'd either use /usr/bin/steamos-devmode or use the same procedure they use there with pacman-key.

I didn't know about steamos-devmode, that seems to do everything at once (disable read-only mode, populate keyring, also restore dev headers) so it should be simpler to run `sudo steamos-devmode enable` next time!

Unless I just switch to another solution (rwfus or Homebrew on Linux) in the meantime. Now that I can use pacman, it's easier to use any workaround that relies on installing another package in the first place!

[HybridZach]

Originally posted by NimrodX:

Actually what you want is probably in here:

$ more /usr/bin/steamos-devmode
...
    rm -rf /etc/pacman.d/gnupg/ || :
    pacman-key --init
    pacman-key --populate
    pacman -Sy --noconfirm --needed archlinux-keyring
    pacman --noconfirm -S $(pacman -Qnkq | cut -d' ' -f1 | sort | uniq)
    pacman -S base-devel multilib-devel --needed
...

Thanks! I had screwed with my keys and pacman so many times I messed stuff up a whole bunch when updating my deck to the beta branch recently, this script that you pointed out was on the deck which I did not know about fixed my issues.

It did corrupt my keys for sublime text but I just re ran the GPG key install curl line and it worked again.

For those wanting a TLDR I fixed everything pretty much by running

`Sudo steamos-devmode enable`

[NimrodX]

I wish there was a wiki or somewhere we could just document all the scrips and stuff I've found poking around.....

[Spiffy_Diffy]

Originally posted by Stonium:

After setting SigLevel = TrustAll you can run
sudo pacman -S holo-keyring archlinux-keyring
then after installing it set it back and it will work.

How do you set SigLevel = TrustAll ?
When I type that into Konsole on the steam deck it just says the command doesn't exist. I can't seem to find anywhere online how to set SigLevel = TrustAll

[NimrodX]

/usr/bin/steamos-devmode enable

Just use this.

Also, there's a new script:

/usr/bin/steamos-unminimize

This can be run with the --dev option to get base-devel installed if desired. Without that it will install man pages for everything.

[OVoice]

Originally posted by NimrodX:

/usr/bin/steamos-devmode enable

Just use this.

Also, there's a new script:

/usr/bin/steamos-unminimize

This can be run with the --dev option to get base-devel installed if desired. Without that it will install man pages for everything.

It helped well, thank you