Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-144980

RHEL10.1 dnf update results in public gpg key failure

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • None
    • Moderate
    • rhel-swm
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • x86_64
    • None

      What were you trying to do that didn't work?

      Was updating RHEL10.1 after installing from latest RHEL10.1 Binary DVD ISO updated 10-23-2025 https://access.cdn.redhat.com/content/origin/files/sha256/59/5925e05c32d8324a72e146a29293d60707571817769de73df63eab8dbd6d3196/rhel-10.1-x86_64-dvd.iso

      What is the impact of this issue to you?

      The system was unable to be updated until a manual intervention of updating the GPG keys package, it seems like there is a dependency missing first install the latest redhat-release package. It is also unexpexted, since the latest version of the RHEL10.1 ISO was used.

      Please provide the package NVR for which the bug is seen:

      RHEL10.1

      How reproducible is this bug?:

      Have produced this issue with a physical server and again in a VM. So very.

      Steps to reproduce

      1. Download the RHEL10.1 binary DVD ISO data 10-23-2026
      2. Install RHEL10.1 with the Virtualization package group
      3. Register RHEL10.1 with subscription-manager register
      4. Run dnf update with GPG key errors

      From the output of dnf GPG keys imported successfully:

      $ sudo dnf update
      Importing GPG key 0xFD431D51:
       Userid     : "Red Hat, Inc. (release key 2) <security@redhat.com>"
       Fingerprint: 567E 347A D004 4ADE 55BA 8A5F 199E 2F91 FD43 1D51
       From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
      Is this ok [y/N]: y
      Key imported successfully
      Importing GPG key 0x5A6340B3:
       Userid     : "Red Hat, Inc. (auxiliary key 3) <security@redhat.com>"
       Fingerprint: 7E46 2425 8C40 6535 D56D 6F13 5054 E4A4 5A63 40B3
       From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
      Is this ok [y/N]: y
      Key imported successfully
      

      But then many errors related to the GPG keys are reports:

      Import of key(s) didn't help, wrong key(s)?
      Red Hat Enterprise Linux 10 for x86_64 - BaseOS (RPMs)                                                            3.6 MB/s | 3.7 kB     00:00    
      GPG key at file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release (0xFD431D51) is already installed
      GPG key at file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release (0x5A6340B3) is already installed
      Public key for kernel-devel-6.12.0-124.29.1.el10_1.x86_64.rpm is not installed. Failing package is: kernel-devel-6.12.0-124.29.1.el10_1.x86_64
       GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
      The GPG keys listed for the "Red Hat Enterprise Linux 10 for x86_64 - BaseOS (RPMs)" repository are already installed but they are not correct for this package.
      Check that the correct key URLs are configured for this repository.. Failing package is: kernel-6.12.0-124.29.1.el10_1.x86_64
       GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
      Public key for kernel-core-6.12.0-124.29.1.el10_1.x86_64.rpm is not installed. Failing package is: kernel-core-6.12.0-124.29.1.el10_1.x86_64
       GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
      Public key for kernel-modules-6.12.0-124.29.1.el10_1.x86_64.rpm is not installed. Failing package is: kernel-modules-6.12.0-124.29.1.el10_1.x86_64
       GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
      Public key for kernel-modules-core-6.12.0-124.29.1.el10_1.x86_64.rpm is not installed. Failing package is: kernel-modules-core-6.12.0-124.29.1.el10_1.x86_64 
      

      Eventually did a search to see what packages provided the latest GPG keys:

      $ sudo dnf whatprovides "*/RPM-GPG-KEY-redhat-release"
      ...
      redhat-release-10.0-30.el10.x86_64 : Red Hat Enterprise Linux release file
      Repo        : rhel-10-for-x86_64-baseos-rpms
      Matched from:
      Filename    : /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
      

      Next installed the latest GPG keys:

      $ sudo dnf update redhat-release
      Updating Subscription Management repositories.
      Last metadata expiration check: 0:00:24 ago on Wed 28 Jan 2026 10:58:13 AM EST.
      Dependencies resolved.
      ==================================================================================================================================================
       Package                          Architecture             Version                         Repository                                        Size
      ==================================================================================================================================================
      Upgrading:
       redhat-release                   x86_64                   10.1-18.el10                    rhel-10-for-x86_64-baseos-rpms                    61 k
      
      Transaction Summary
      ==================================================================================================================================================
      Upgrade  1 Package
      
      Total size: 61 k
      Is this ok [y/N]: y
      Downloading Packages:
      [SKIPPED] redhat-release-10.1-18.el10.x86_64.rpm: Already downloaded                                                                             
      Running transaction check
      Transaction check succeeded.
      Running transaction test
      Transaction test succeeded.
      Running transaction
        Preparing        :                                                                                                                          1/1 
        Upgrading        : redhat-release-10.1-18.el10.x86_64                                                                                       1/2 
        Cleanup          : redhat-release-10.1-16.el10.x86_64                                                                                       2/2 
        Running scriptlet: redhat-release-10.1-16.el10.x86_64                                                                                       2/2 
      Failed to connect to user scope bus via machine transport: No medium found
      
      Installed products updated.
      
      Upgraded:
        redhat-release-10.1-18.el10.x86_64                                                                                                              
      
      Complete!
      

      After this manual intervention to update the GPG keys updates for RHEL10.1 began working normally:

      $ sudo dnf update -y
      Updating Subscription Management repositories.
      Last metadata expiration check: 0:00:41 ago on Wed 28 Jan 2026 10:58:13 AM EST.
      Dependencies resolved.
      ==================================================================================================================================================
       Package                                      Architecture  Version                                Repository                                Size
      ==================================================================================================================================================
      Installing:
       kernel                                       x86_64        6.12.0-124.29.1.el10_1                 rhel-10-for-x86_64-baseos-rpms           1.4 M
      ...
      Installed:
        kernel-6.12.0-124.29.1.el10_1.x86_64                                    kernel-core-6.12.0-124.29.1.el10_1.x86_64                               
        kernel-devel-6.12.0-124.29.1.el10_1.x86_64                              kernel-modules-6.12.0-124.29.1.el10_1.x86_64                            
        kernel-modules-core-6.12.0-124.29.1.el10_1.x86_64                       kernel-modules-extra-6.12.0-124.29.1.el10_1.x86_64                      
      
      Complete!
      

      Expected results

      Expected RHEL10.1 to update after installations without any other solutions or interventions.

      Actual results

      Had to develop a solution to work around this issues, documented above.

              packaging-team-maint packaging-team-maint
              jfargen@redhat.com Jamie Fargen
              packaging-team-maint packaging-team-maint
              Software Management QE Software Management QE
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: