[arch-devops] Unable to push packages

[Sébastien Luttringer]

Hello,

I'm failing to push diffutils on gemini this morning.

gemini.ao ~ $ ./packages-db/db-update  
==> ERROR: Package testing/diffutils-3.8-1-x86_64.pkg.tar.zst does not have a
valid signature
==> Removing left over lock from [testing] (x86_64)

gemini.ao ~ $ gpg --no-auto-check-trustdb --homedir /etc/pacman.d/gnupg --
verify staging/testing/diffutils-3.8-1-x86_64.pkg.tar.zst.sig                 
gpg: WARNING: unsafe ownership on homedir '/etc/pacman.d/gnupg'
gpg: assuming signed data in 'staging/testing/diffutils-3.8-1-
x86_64.pkg.tar.zst'
gpg: Signature made Mon 02 Aug 2021 06:32:45 AM UTC
gpg:                using RSA key 57224EC9A5FCA6FBC92BB8AA4A1AFC345EBE18F8
gpg: Note: trustdb not writable
gpg: please do a --check-trustdb
gpg: Good signature from "Sébastien Luttringer <seblu at seblu.net>" [marginal]
gpg:                 aka "Sébastien Luttringer <root at seblu.net>" [marginal]
gpg:                 aka "Sébastien Luttringer <seblu at archlinux.org>"
[marginal]
gpg:                 aka "Sébastien Luttringer <sebastien at luttringer.net>"
[full]
gpg:                 aka "Sébastien Luttringer
<sebastien.luttringer at epita.net>" [marginal]
gpg:                 aka "Sébastien Luttringer
<sebastien.luttringer at gmail.com>" [full]


I think the server trust store need to be fixed.

Regards,

Sébastien "Seblu" Luttringer
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: This is a digitally signed message part
URL: <https://lists.archlinux.org/pipermail/arch-devops/attachments/20210802/de42adf5/attachment.sig>