比如neo4j-community，AUR比blackarch源里的新，直接用pacman或者yay等AUR Helper安装就会装一个远古的老版本 （不是3.X版本稳定的原因，单纯就是没人维护，官网的版本现在3.5.28是20 April 2021发布的，BlackArch的官方源更新是在一2020年3月）
1 2 3 4
aur/neo4j-community 4.2.2-1 (+63 0.40) (Out-of-date: 2021-06-06) (Installed) A fully transactional graph database implemented in Java blackarch/neo4j-community 3.5.14-1 (144.4 MiB 165.9 MiB) (Installed: 4.2.2-1) A fully transactional graph database implemented in Java
主动安装AUR里的可以这样：yay neo4j-community然后Packages to install选项手动选AUR里的。或者你手动下载AUR里的PKGBUILD然后makepkg自己build。再或者直接不要blackarch这个第三方源了（推荐），/etc/pacman.d里注释掉。
不然每次更新还要忽略一堆warning: neo4j-community: local (4.2.2-1) is newer than blackarch (3.5.14-1)。
[blackarch] Server = http://mirrors.uestc.cn/blackarch/$repo/os/$arch
Server请改成你在那里提供服务而且网速比较快的，比如tuna的
1 2
[blackarch] Server = https://mirrors.tuna.tsinghua.edu.cn/blackarch/$repo/os/$arch
为何要写这么水的一篇博客
我之前谷歌随手搜出了ustc的镜像使用帮助，然后就开始了飘红报错，试了一圈中文的解决方案，并没有用。 （当然中文博客基本都过时了，还是有很多好好写的，不止CSDN,比如这个：用 Arch Linux 打造完美渗透环境）
报错：
1 2 3 4 5 6 7 8 9 10 11 12 13
error: blackarch: key "F9A6E68A711354D84A9B91637533BAFE69A25079" is unknown :: Import PGP key F9A6E68A711354D84A9B91637533BAFE69A25079? [Y/n] Y Y error: key "F9A6E68A711354D84A9B91637533BAFE69A25079" could not be looked up remotely :: Synchronizing package databases...
error: blackarch: key "F9A6E68A711354D84A9B91637533BAFE69A25079" is unknown :: Import PGP key F9A6E68A711354D84A9B91637533BAFE69A25079? [Y/n] error: key "F9A6E68A711354D84A9B91637533BAFE69A25079" could not be looked up remotely error: failed to update blackarch (invalid or corrupted database (PGP signature)) error: failed to synchronize all databases
$ sudo pacman -S blackarch-keyring error: blackarch: key "F9A6E68A711354D84A9B91637533BAFE69A25079" is unknown :: Import PGP key F9A6E68A711354D84A9B91637533BAFE69A25079? [Y/n] Y error: key "F9A6E68A711354D84A9B91637533BAFE69A25079" could not be looked up remotely error: database 'blackarch' is not valid (invalid or corrupted database (PGP signature))
loading packages... resolving dependencies... looking for conflicting packages...
Packages (1) blackarch-keyring-20140118-3
Total Installed Size: 0.04 MiB
:: Proceed with installation? [Y/n] (1/1) checking keys in keyring [#######################################] 100% (1/1) checking package integrity [#######################################] 100% (1/1) loading package files [#######################################] 100% (1/1) checking for file conflicts [#######################################] 100% :: Processing package changes... (1/1) installing blackarch-keyring [#######################################] 100% ==> Appending keys from blackarch.gpg... gpg: public key DB323392796CA067 is 3037 days newer than the signature gpg: public key CF66D153D884358F is 16 seconds newer than the signature ==> Locally signing trusted keys in keyring... -> Locally signing key A0917C4147A37007CB54C1CFD295AA940EFDDF62... -> Locally signing key 4345771566D76038C7FEB43863EC0ADBEA87E4E3... -> Locally signing key CBA3C7D4798912702DCF568E67D8BDF42AD93F4E... -> Locally signing key 8F9A9793CB8591147C2EC70566E0CDBD1E01F333... ==> Importing owner trust values... gpg: inserting ownertrust of 4 gpg: setting ownertrust to 4 gpg: setting ownertrust to 4 gpg: setting ownertrust to 4 ==> Updating trust database... gpg: key 1EB2638FF56C0C53: no user ID for key signature packet of class 10 gpg: key 1EB2638FF56C0C53: no user ID for key signature packet of class 10
gpg: public key DB323392796CA067 is 3037 days newer than the signature gpg: marginals needed: 3 completes needed: 1 trust model: pgp gpg: public key CF66D153D884358F is 16 seconds newer than the signature gpg: depth: 0 valid: 1 signed: 56 trust: 0-, 0q, 0n, 0m, 0f, 1u gpg: depth: 1 valid: 56 signed: 81 trust: 1-, 0q, 0n, 55m, 0f, 0u gpg: depth: 2 valid: 77 signed: 26 trust: 77-, 0q, 0n, 0m, 0f, 0u gpg: next trustdb check due at 2020-12-03 :: Running post-transaction hooks... (1/1) Arming ConditionNeedsUpdate... ==> Appending keys from archlinuxcn.gpg... ==> Appending keys from archlinux.gpg... ==> Appending keys from blackarch.gpg... ==> Appending keys from endeavouros.gpg... ==> Locally signing trusted keys in keyring... -> Locally signing key 57957BAD5D038B07C28EF49A15B26377262268C1... ==> Importing owner trust values... ==> Disabling revoked keys in keyring... -> Disabling key 8F76BEEA0289F9E1D3E229C05F946DED983D4366... ==> Updating trust database... gpg: next trustdb check due at 2020-12-03