Error: Failed to download metadata for repo 'opennebula': repomd.xml GPG signature verification error: Bad GPG signature

Hello all!

The ‘dnf update’ command fails on AlmaLinux 8.7:

Error: Failed to download metadata for repo 'opennebula': repomd.xml GPG signature verification error: Bad GPG signature
ll /var/cache/dnf/opennebula-ffef1a332d2519f3/pubring/
total 12
drwx------ 2 root root    6 ноя 18 17:15 private-keys-v1.d
-rw-r--r-- 1 root root 1419 ноя 18 17:15 pubring.kbx
-rw------- 1 root root   32 ноя 18 17:15 pubring.kbx~
-rw------- 1 root root 1200 ноя 18 17:15 trustdb.gpg
gpg --list-public-keys --homedir /var/cache/dnf/opennebula-ffef1a332d2519f3/pubring/
gpg: WARNING: unsafe permissions on homedir '/var/cache/dnf/opennebula-ffef1a332d2519f3/pubring'
/var/cache/dnf/opennebula-ffef1a332d2519f3/pubring/pubring.kbx
--------------------------------------------------------------
pub   rsa2048 2013-06-13 [SC]
      92B77188854CF23E1634DA89592F7F0585E16EBF
uid           [ unknown] OpenNebula Repository <contact@opennebula.org>
sub   rsa2048 2013-06-13 [E]
gpg --homedir /var/cache/dnf/opennebula-ffef1a332d2519f3/pubring/ --delete-key 92B77188854CF23E1634DA89592F7F0585E16EBF
gpg: WARNING: unsafe permissions on homedir '/var/cache/dnf/opennebula-ffef1a332d2519f3/pubring'
gpg (GnuPG) 2.2.20; Copyright (C) 2020 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.


pub  rsa2048/592F7F0585E16EBF 2013-06-13 OpenNebula Repository <contact@opennebula.org>

Delete this key from the keyring? (y/N) y
dnf check-update
OpenNebula Enterprise Edition                                                                                                                             694  B/s | 833  B     00:01    
OpenNebula Enterprise Edition                                                                                                                             4.5 kB/s | 1.7 kB     00:00    
Importing GPG key 0x85E16EBF:
 Userid     : "OpenNebula Repository <contact@opennebula.org>"
 Fingerprint: 92B7 7188 854C F23E 1634 DA89 592F 7F05 85E1 6EBF
 From       : https://downloads.opennebula.io/repo/repo.key
Is this ok [y/N]: y
OpenNebula Enterprise Edition                                                                                                                             1.0 kB/s | 833  B     00:00    
Error: Failed to download metadata for repo 'opennebula': repomd.xml GPG signature verification error: Bad GPG signature

What can be done to fix that problem?

https://docs.opennebula.io/6.4/intro_release_notes/release_notes_enterprise/new_repo_key.html?highlight=repo%20key

1 Like

@dclavijo , thank you!

The following steps helped me to fix the problem:

[root]$ gpg --list-public-keys --homedir /var/cache/dnf/opennebula-ffef1a332d2519f3/pubring/

[root]$ gpg --homedir /var/cache/dnf/opennebula-ffef1a332d2519f3/pubring/ --delete-key 92B77188854CF23E1634DA89592F7F0585E16EBF

[root]$ sed -i 's/repo\.key/repo2.key/g' /etc/yum.repos.d/opennebula.repo

[root]$ dnf check-update

I guess it would be useful to put in the post you are referring to a possible errors which might appear when using old repo.key in order to be able to find that page via search engine on the web.

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.