FreeBSD 15 – pkg repository signature verification fails during install – Fix & Prevention

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Package installs and upgrades stop with signature mismatch errors, delaying patching and blocking dependency deployment.

Environment & Reproduction

Seen after repository key rotation or stale mirror metadata.

freebsd-version
pkg update -f
pkg install -y curl

Root Cause Analysis

Local trust metadata is outdated or repo configuration points to mirrors serving inconsistent package signatures.

Quick Triage

Confirm active repo configuration and package database state.

pkg -vv
cat /etc/pkg/FreeBSD.conf
ls -l /var/db/pkg

Step-by-Step Diagnosis

Force metadata refresh and inspect detailed verification output.

pkg clean -ay
rm -rf /var/db/pkg/repo-*
pkg update -f
pkg -d upgrade

Solution – Primary Fix

Restore canonical repo config, refresh trust metadata, and retry transactions.

cp /usr/share/examples/pkg/FreeBSD.conf /etc/pkg/FreeBSD.conf
pkg update -f
pkg upgrade -y

Solution – Alternative Approaches

Temporarily switch to a known-good mirror while repository propagation stabilizes.

mkdir -p /usr/local/etc/pkg/repos
cat > /usr/local/etc/pkg/repos/FreeBSD.conf <<'EOF'
FreeBSD: { url: "pkg+http://pkg.FreeBSD.org/${ABI}/latest" }
EOF
pkg update -f

Verification & Acceptance Criteria

Repository update and package installation complete without signature warnings.

pkg update
pkg audit -F
pkg info curl

Rollback Plan

Restore previous repo override and cached metadata if compatibility with internal mirrors is required.

rm -f /usr/local/etc/pkg/repos/FreeBSD.conf
pkg clean -ay
pkg update -f

Prevention & Hardening

Standardize mirror policy and schedule trust validation checks.

pkg update -q
pkg audit -F

Related Errors & Cross-Refs

Commonly overlaps with DNS failures, TLS trust errors, and stale repository cache states.

Related tutorial: View the step-by-step tutorial for FreeBSD 15.

View all FreeBSD 15 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

FreeBSD Handbook package management and pkg repository configuration documentation.