[artix-general] libnm-glib corrupted?

[Javier]

On Today's upgrade I'm getting:

> :: Retrieving packages...
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from mirrors.dotsrc.org : Maximum file size exceeded
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from ftp.cc.uoc.gr : The requested URL returned error: 404
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from quantum-mirror.hu : Maximum file size exceeded
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from ftp.sh.cvut.cz : Maximum file size exceeded
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from artix.unixpeople.org : Maximum file size exceeded
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from artix.cccp.io : The requested URL returned error: 404
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from mirror.linux.pizza : Maximum file size exceeded
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from mirror.one.com : The requested URL returned error: 
404
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from mirror.pascalpuffke.de : The requested URL returned error: 404
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from linuxer.ellak.gr : The requested URL returned error: 404
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from artixlinux.qontinuum.space:4443 : Maximum file size exceeded
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from mirror.easylee.nl : Maximum file size exceeded
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from eu-mirror.artixlinux.org : Maximum file size exceeded
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from artix.wheaton.edu : Maximum file size exceeded
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from mirror.clarkson.edu : Maximum file size exceeded
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from us-mirror.artixlinux.org : Maximum file size exceeded
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from mirrors.nettek.us : Maximum file size exceeded
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from mirrors.tuna.tsinghua.edu.cn : Maximum file size exceeded
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from mirrors.cloud.tencent.com : The requested URL returned error: 404
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from mirror.maakpain.kro.kr : The requested URL returned error: 404
> error: failed retrieving file 'libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst' from artix.funami.tech : Maximum file size exceeded
> warning: failed to retrieve some files
> error: failed to commit transaction (download library error)
> Errors occurred, no packages were upgraded.

Then I proceeded to grab the package manually directly from 2 different mirrors [1][2], and placing them into /var/cache/pacman/pkg, but when trying to upgrade:

> (9/9) checking keys in keyring                                          
                        [########################################################] 100%
> (9/9) checking package integrity                                        
                        [########################################################] 100%
> error: libnm-glib: signature from "Artix Buildbot <buildbot at artixlinux.org>" is invalid
> :: File /var/cache/pacman/pkg/libnm-glib-1.18.5dev+12+ga8746f48ca-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
> Do you want to delete it? [Y/n] 
> error: failed to commit transaction (invalid or corrupted package)
> Errors occurred, no packages were upgraded.

The package happens to be corrupted, or to have a bad signature.  It's signed by *buildbot*, not a dev, which might the issue, but I can't tell.

Can some dev please take a look?

Thanks !

-- 
Javier


[1]  https://mirrors.dotsrc.org/artix-linux/repos/galaxy/os/x86_64
[2]  https://us-mirror.artixlinux.org/galaxy/os/x86_64

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 228 bytes
Desc: OpenPGP digital signature
URL: <https://lists.artixlinux.org/archives/artix-general/attachments/20210429/7ec796ff/attachment.sig>