[elrepo] Remove old GPG key from EL10 elrepo-release package

[Joseph Christopher Sible]

After looking around a bit more, I found something: there are two different RPMs that both claim to be elrepo-release-10.0-1.el10.elrepo.noarch, even though they have different contents. https://elrepo.org/linux/elrepo/el10/x86_64/RPMS/elrepo-release-10.0-1.el10.elrepo.noarch.rpm is a working one that matches what you saw, and https://www.elrepo.org/elrepo-release-10.0-1.el10.elrepo.noarch.rpm is a broken one that matches what I saw.

Joseph C. Sible

________________________________________
From: elrepo-bounces at lists.elrepo.org <elrepo-bounces at lists.elrepo.org> on behalf of Joseph Christopher Sible <jcsible at cert.org>
Sent: Monday, June 9, 2025 12:24
To: EL Repo General Mailing List <elrepo at lists.elrepo.org>
Subject: Re: [elrepo] Remove old GPG key from EL10 elrepo-release package
 
Warning: External Sender - do not click links or open attachments unless you recognize the sender and know the content is safe.


That doesn't match what I'm seeing. After doing "yum install https://www.elrepo.org/elrepo-release-10.el10.elrepo.noarch.rpm" (per the https://elrepo.org/wiki/doku.php?id=start instructions) in a fresh almalinux:10 Docker container, I see the following:

[root at e487a2e63bed /]# rpm -ql elrepo-release
/etc/pki/elrepo
/etc/pki/elrepo/SECURE-BOOT-KEY-elrepo.org.der
/etc/pki/rpm-gpg/RPM-GPG-KEY-elrepo.org
/etc/pki/rpm-gpg/RPM-GPG-KEY-v2-elrepo.org
/etc/yum.repos.d/elrepo.repo
[root at e487a2e63bed /]# rpm -qa elrepo-release
elrepo-release-10.0-1.el10.elrepo.noarch
[root at e487a2e63bed /]#

Regards,

Joseph C. Sible

________________________________________
From: elrepo-bounces at lists.elrepo.org <elrepo-bounces at lists.elrepo.org> on behalf of Akemi Yagi <toracat at elrepo.org>
Sent: Monday, June 9, 2025 12:10
To: EL Repo General Mailing List <elrepo at lists.elrepo.org>
Subject: Re: [elrepo] Remove old GPG key from EL10 elrepo-release package

Warning: External Sender - do not click links or open attachments unless you recognize the sender and know the content is safe.


On Mon, Jun 9, 2025 at 8:15 AM Joseph Christopher Sible
<jcsible at cert.org> wrote:
>
> Hello,
>
> Since the old GPG key doesn't work on RHEL 10, can it be removed from the /etc/yum.repos.d/elrepo.repo file that elrepo-release-10.el10 installs there? Its presence in that file causes GPG errors preventing automatic import of the new key.
>
> Thanks,
>
> Joseph C. Sible

The elrepo-release-10.0-1.el10.elrepo.noarch package does not contain
the old GPG key:

$ rpm -ql elrepo-release
/etc/pki/elrepo
/etc/pki/elrepo/SECURE-BOOT-KEY-elrepo.org.der
/etc/pki/rpm-gpg/RPM-GPG-KEY-v2-elrepo.org
/etc/yum.repos.d/elrepo.repo

Could you check to see if your elrepo.repo file is from the el10 rpm?

Akemi
_______________________________________________
elrepo mailing list
elrepo at lists.elrepo.org
http://lists.elrepo.org/mailman/listinfo/elrepo
_______________________________________________
elrepo mailing list
elrepo at lists.elrepo.org
http://lists.elrepo.org/mailman/listinfo/elrepo