Error: Failed to download metadata for repo 'opennebula': repomd.xml GPG signature verification error: Bad GPG signature

Community Support General
1

Hello all!

The ‘dnf update’ command fails on AlmaLinux 8.7:

Error: Failed to download metadata for repo 'opennebula': repomd.xml GPG signature verification error: Bad GPG signature

ll /var/cache/dnf/opennebula-ffef1a332d2519f3/pubring/
total 12
drwx------ 2 root root    6 ноя 18 17:15 private-keys-v1.d
-rw-r--r-- 1 root root 1419 ноя 18 17:15 pubring.kbx
-rw------- 1 root root   32 ноя 18 17:15 pubring.kbx~
-rw------- 1 root root 1200 ноя 18 17:15 trustdb.gpg

gpg --list-public-keys --homedir /var/cache/dnf/opennebula-ffef1a332d2519f3/pubring/
gpg: WARNING: unsafe permissions on homedir '/var/cache/dnf/opennebula-ffef1a332d2519f3/pubring'
/var/cache/dnf/opennebula-ffef1a332d2519f3/pubring/pubring.kbx
--------------------------------------------------------------
pub   rsa2048 2013-06-13 [SC]
      92B77188854CF23E1634DA89592F7F0585E16EBF
uid           [ unknown] OpenNebula Repository <contact@opennebula.org>
sub   rsa2048 2013-06-13 [E]

gpg --homedir /var/cache/dnf/opennebula-ffef1a332d2519f3/pubring/ --delete-key 92B77188854CF23E1634DA89592F7F0585E16EBF
gpg: WARNING: unsafe permissions on homedir '/var/cache/dnf/opennebula-ffef1a332d2519f3/pubring'
gpg (GnuPG) 2.2.20; Copyright (C) 2020 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.


pub  rsa2048/592F7F0585E16EBF 2013-06-13 OpenNebula Repository <contact@opennebula.org>

Delete this key from the keyring? (y/N) y

dnf check-update
OpenNebula Enterprise Edition                                                                                                                             694  B/s | 833  B     00:01    
OpenNebula Enterprise Edition                                                                                                                             4.5 kB/s | 1.7 kB     00:00    
Importing GPG key 0x85E16EBF:
 Userid     : "OpenNebula Repository <contact@opennebula.org>"
 Fingerprint: 92B7 7188 854C F23E 1634 DA89 592F 7F05 85E1 6EBF
 From       : https://downloads.opennebula.io/repo/repo.key
Is this ok [y/N]: y
OpenNebula Enterprise Edition                                                                                                                             1.0 kB/s | 833  B     00:00    
Error: Failed to download metadata for repo 'opennebula': repomd.xml GPG signature verification error: Bad GPG signature

What can be done to fix that problem?

2

https://docs.opennebula.io/6.4/intro_release_notes/release_notes_enterprise/new_repo_key.html?highlight=repo%20key

1 Like
3

@dclavijo , thank you!

The following steps helped me to fix the problem:

[root]$ gpg --list-public-keys --homedir /var/cache/dnf/opennebula-ffef1a332d2519f3/pubring/

[root]$ gpg --homedir /var/cache/dnf/opennebula-ffef1a332d2519f3/pubring/ --delete-key 92B77188854CF23E1634DA89592F7F0585E16EBF

[root]$ sed -i 's/repo\.key/repo2.key/g' /etc/yum.repos.d/opennebula.repo

[root]$ dnf check-update

I guess it would be useful to put in the post you are referring to a possible errors which might appear when using old repo.key in order to be able to find that page via search engine on the web.