Skip to content

Signature from ... MSYS2 development key ... is unknown trust #615

Description

@tobiasherzke

My second time that a Github Actions run using

      - name: Setup MSYS2
        if: matrix.platform == 'windows'
        uses: msys2/setup-msys2@v2
        with:
          msystem: ${{ matrix.msystem }}
          update: true
          install: ${{ matrix.msys2_packages }}

failed with

error: clangarm64: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust

See build logs at the end.

Restarting the job a few hours later ran to completion.

Could it be that the optimization suggested in #45 and realized in e61dc97 (now probably living here: https://github.com/msys2/setup-msys2/blob/main/main.js#L162 ) trades sporadic build failures for an 11-second speed gain? If so, please consider rolling back the disable-key-refresh change.

Build logs:

Run msys2/setup-msys2@v2
  with:
    msystem: CLANGARM64
    update: true
    install: dos2unix git make openbsd-netcat tar unzip wget zip mingw-w64-clang-aarch64-cmake mingw-w64-clang-aarch64-clang mingw-w64-clang-aarch64-boost mingw-w64-clang-aarch64-libsndfile mingw-w64-clang-aarch64-portaudio mingw-w64-clang-aarch64-eigen3 mingw-w64-clang-aarch64-curl mingw-w64-clang-aarch64-liblo mingw-w64-clang-aarch64-jack2 mingw-w64-clang-aarch64-7zip
    path-type: minimal
    release: true
    platform-check-severity: fatal
    cache: true
  env:
    D: 
    DEBIAN_FRONTEND: noninteractive
Downloading MSYS2...
Extracting MSYS2...
Disable Key Refresh...
Restoring package cache...
  Cache restore for msys2-pkgs-upd:true-conf:9ce8a61f, got undefined
  Cache restore for msys2-pkgs-upd:true-conf:9ce8a61f, got undefined
Starting MSYS2 for the first time...
  C:\Windows\system32\cmd.exe /D /S /C C:\a\_temp\setup-msys2\msys2.cmd -c "'uname' '-a'"
  MSYS2 is starting for the first time. Executing the initial setup.
  Copying skeleton files.
  These files are for the users to personalise their msys2 experience.
  
  They will never be overwritten nor automatically updated.
  
  './.bashrc' -> '/home/runneradmin/.bashrc'
  './.bash_profile' -> '/home/runneradmin/.bash_profile'
  './.profile' -> '/home/runneradmin/.profile'
  'C:\Windows\system32\drivers\etc\hosts' -> '/etc/hosts'
  'C:\Windows\system32\drivers\etc\protocol' -> '/etc/protocols'
  'C:\Windows\system32\drivers\etc\services' -> '/etc/services'
  'C:\Windows\system32\drivers\etc\networks' -> '/etc/networks'
  gpg: /etc/pacman.d/gnupg/trustdb.gpg: trustdb created
  gpg: no ultimately trusted keys found
  gpg: starting migration from earlier GnuPG versions
  gpg: porting secret keys from '/etc/pacman.d/gnupg/secring.gpg' to gpg-agent
  gpg: migration succeeded
  ==> Generating pacman master key. This may take some time.
  gpg: Generating pacman keyring master key...
  gpg: directory '/etc/pacman.d/gnupg/openpgp-revocs.d' created
  gpg: revocation certificate stored as '/etc/pacman.d/gnupg/openpgp-revocs.d/8A5871E5294B1A2247829C6AB8F7CB069C5A1CF8.rev'
  gpg: Done
  ==> Updating trust database...
  gpg: marginals needed: 3  completes needed: 1  trust model: pgp
  gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
  ==> Appending keys from msys2.gpg...
  pacman-key (pacman) 6.1.0
  Copyright (c) 2010-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>.
  
  This is free software; see the source for copying conditions.
  There is NO WARRANTY, to the extent permitted by law.
  Initial setup complete. MSYS2 is now ready to use.
  MINGW64_NT-10.0-26200-ARM64 runnervmccxbg 3.6.7-f2802c5f.x86_64 2026-03-15 08:40 UTC x86_64 Msys
Disable CheckSpace...
  C:\Windows\system32\cmd.exe /D /S /C C:\a\_temp\setup-msys2\msys2.cmd -c "'sed' '-i' 's/^CheckSpace/#CheckSpace/g' '/etc/pacman.conf'"
Updating packages...
  C:\Windows\system32\cmd.exe /D /S /C C:\a\_temp\setup-msys2\msys2.cmd -c "'pacman' '--noconfirm' '-Syuu' '--overwrite' '*'"
  error: clangarm64: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: mingw32: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: mingw64: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: ucrt64: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: clang64: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: msys: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  :: Synchronizing package databases...
   clangarm64 downloading...
   mingw32 downloading...
   mingw64 downloading...
   ucrt64 downloading...
   clang64 downloading...
   msys downloading...
  error: clangarm64: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: mingw32: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: mingw64: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: ucrt64: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: clang64: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: msys: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: failed to synchronize all databases (invalid or corrupted database (PGP signature))
Killing remaining tasks...
  C:\Windows\system32\taskkill.exe /F /FI "MODULES eq msys-2.0.dll"
  
  INFO: No tasks running with the specified criteria.
Final system upgrade...
  C:\Windows\system32\cmd.exe /D /S /C C:\a\_temp\setup-msys2\msys2.cmd -c "'pacman' '--noconfirm' '-Syuu' '--overwrite' '*'"
  error: clangarm64: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: mingw32: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: mingw64: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: ucrt64: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: clang64: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: msys: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  :: Synchronizing package databases...
   clangarm64 downloading...
   mingw32 downloading...
   mingw64 downloading...
   ucrt64 downloading...
   clang64 downloading...
   msys downloading...
  error: clangarm64: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: mingw32: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: mingw64: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: ucrt64: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: clang64: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: msys: signature from "Christoph Reiter (MSYS2 development key) <reiter.christoph@gmail.com>" is unknown trust
  error: failed to synchronize all databases (invalid or corrupted database (PGP signature))
  Error: Error: The process 'C:\Windows\system32\cmd.exe' failed with exit code 1

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions