Almalinux dnf upgrade fail: GPG check FAILED

[jordanefillatre]

Since the 17/01/24, the dnf upgrade run from almalinux:8.8 image fail:

AlmaLinux 8 - BaseOS                                                                                                            3.3 MB/s | 3.4 kB     00:00    
Importing GPG key 0xC21AD6EA:
 Userid     : "AlmaLinux <packager@almalinux.org>"
 Fingerprint: E53C F5EF 91CE B0AD 1812 ECB8 51D6 647E C21A D6EA
 From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
Is this ok [y/N]: y
Key imported successfully
Import of key(s) didn't help, wrong key(s)?
Public key for platform-python-3.6.8-56.el8_9.3.alma.1.x86_64.rpm is not installed. Failing package is: platform-python-3.6.8-56.el8_9.3.alma.1.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
Public key for python3-libs-3.6.8-56.el8_9.3.alma.1.x86_64.rpm is not installed. Failing package is: python3-libs-3.6.8-56.el8_9.3.alma.1.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
Public key for sqlite-libs-3.26.0-19.el8_9.x86_64.rpm is not installed. Failing package is: sqlite-libs-3.26.0-19.el8_9.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED

It appears that these packages versions have been added between the 16-Jan-2024 at 11:57 and the 16-Jan-2024 at 16:46

[codyro]

Please see if this resolves your issue: https://almalinux.org/blog/2023-12-20-almalinux-8-key-update/

[dosas]

That solves the issue (I would see it as a workaround) but it would be nice to have a docker image with up to date gpg key.
Are there any plans for image updates?

[codyro]

It looks like you're using the 8.8 tag--can you see if the latest/8.9 show this issue for you?

[dosas]

@codyro Thanks 8.9 works fine!

[jordanefillatre]

If older tag than 8.9 can't be used without issues, may be they can be removed from registry?

[codyro]

If older tag than 8.9 can't be used without issues, may be they can be removed from registry?

Let me see if we can get these updated with the newer key.

[sarahub]

Hi, I'm now getting this error with the latest tag: FROM almalinux/almalinux:latest Will you please fix your latest package?

#7 1.538 AlmaLinux 8 - AppStream                         3.3 MB/s | 3.4 kB     00:00    

#7 1.605 Importing GPG key 0xC21AD6EA:

#7 1.605  Userid     : "AlmaLinux <packager@almalinux.org>"

#7 1.605  Fingerprint: E53C F5EF 91CE B0AD 1812 ECB8 51D6 647E C21A D6EA

#7 1.605  From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux

#7 1.606 Key imported successfully

#7 1.608 Import of key(s) didn't help, wrong key(s)?

#7 1.608 Public key for wget-1.19.5-12.el8_10.x86_64.rpm is not installed. Failing package is: wget-1.19.5-12.el8_10.x86_64

#7 1.608  GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux

#7 1.609 The downloaded packages were saved in cache until the next successful transaction.

#7 1.609 You can remove cached packages by executing 'yum clean packages'.

#7 1.614 Error: GPG check FAILED

[LKHN]

@sarahub Hi,

Looks like from the output, your are still using the old sources. Please, use the actual sources from the wiki page: https://wiki.almalinux.org/containers/docker-images.html

Since the current container images sources rests on https://github.com/AlmaLinux/container-images , please open an issue when you face any issues with the current container images.