[arch-general] Question on removing pacman keys (and adding new ones)

Sebastian Pipping sebastian at pipping.org
Thu Jun 25 00:31:52 UTC 2015

Hi there!

In relation to making virtual machine images of Arch I noticed that
sharing images with pacman keys inside would enable two systems to
present spoofed packages to the other unnoticed.  True?
It seems like a good idea to remove and re-add pacman keys specific to
each system again, later.

I wonder how to best remove the system-specific keys (not secure
deletion, just not breaking the system) and how (more than when) to
re-add new ones to the existing system to get it back to fully
functional.  Any ideas?

Many thanks in advance, best,


More information about the arch-general mailing list