On [[Garuda Linux]], an [[Arch Linux]] derivative, I was unable to install any packages because of a key lookup failure due to an untrusted root key or something.
Below here are some bits I tried while debugging it.
```sh
pacman-key --populate
sudo pacman -Sy archlinux-keyring
curl -L https://archlinux.org/packages/core/any/archlinux-keyring/download/ -o archlinux-keyring.pkg.tar.zst
pacman
sudo pacman-key --lsign-key [your key id]
```
```sh
gpg –edit-key [your key id]
# select the key (I just typed ‘1’ and hit enter; you can confirm by typing ‘list’
# type ‘trust’ to change the ownertrust
# select option 5, “I trust ultimately”, then say ‘yes’ to the confirmation
quit
```
I ended up creating a new GPG key for myself and then signing the system key. This resolved the problem.
# References
- https://www.reddit.com/r/archlinux/comments/x2sw37/who_is_christian_hesse_and_is_this_error_my_fault/
- https://trog.qgl.org/20091030/troubleshooting-gnupg-gpg-no-ultimately-trusted-keys-found/
- https://github.com/linux-surface/linux-surface/wiki/Installation-and-Setup#Arch