[elrepo] Remove old GPG key from EL10 elrepo-release package

[Akemi Yagi]

Thank you for letting us know of the source of the incorrect
elrepo-release package. We will correct it shortly.

Akemi

On Mon, Jun 9, 2025 at 9:34 AM Joseph Christopher Sible
<jcsible at cert.org> wrote:
>
> After looking around a bit more, I found something: there are two different RPMs that both claim to be elrepo-release-10.0-1.el10.elrepo.noarch, even though they have different contents. https://elrepo.org/linux/elrepo/el10/x86_64/RPMS/elrepo-release-10.0-1.el10.elrepo.noarch.rpm is a working one that matches what you saw, and https://www.elrepo.org/elrepo-release-10.0-1.el10.elrepo.noarch.rpm is a broken one that matches what I saw.
>
> Joseph C. Sible
>
> ________________________________________
> From: elrepo-bounces at lists.elrepo.org <elrepo-bounces at lists.elrepo.org> on behalf of Joseph Christopher Sible <jcsible at cert.org>
> Sent: Monday, June 9, 2025 12:24
> To: EL Repo General Mailing List <elrepo at lists.elrepo.org>
> Subject: Re: [elrepo] Remove old GPG key from EL10 elrepo-release package
>
> Warning: External Sender - do not click links or open attachments unless you recognize the sender and know the content is safe.
>
>
> That doesn't match what I'm seeing. After doing "yum install https://www.elrepo.org/elrepo-release-10.el10.elrepo.noarch.rpm" (per the https://elrepo.org/wiki/doku.php?id=start instructions) in a fresh almalinux:10 Docker container, I see the following:
>
> [root at e487a2e63bed /]# rpm -ql elrepo-release
> /etc/pki/elrepo
> /etc/pki/elrepo/SECURE-BOOT-KEY-elrepo.org.der
> /etc/pki/rpm-gpg/RPM-GPG-KEY-elrepo.org
> /etc/pki/rpm-gpg/RPM-GPG-KEY-v2-elrepo.org
> /etc/yum.repos.d/elrepo.repo
> [root at e487a2e63bed /]# rpm -qa elrepo-release
> elrepo-release-10.0-1.el10.elrepo.noarch
> [root at e487a2e63bed /]#
>
> Regards,
>
> Joseph C. Sible
>
> ________________________________________
> From: elrepo-bounces at lists.elrepo.org <elrepo-bounces at lists.elrepo.org> on behalf of Akemi Yagi <toracat at elrepo.org>
> Sent: Monday, June 9, 2025 12:10
> To: EL Repo General Mailing List <elrepo at lists.elrepo.org>
> Subject: Re: [elrepo] Remove old GPG key from EL10 elrepo-release package
>
> Warning: External Sender - do not click links or open attachments unless you recognize the sender and know the content is safe.
>
>
> On Mon, Jun 9, 2025 at 8:15 AM Joseph Christopher Sible
> <jcsible at cert.org> wrote:
> >
> > Hello,
> >
> > Since the old GPG key doesn't work on RHEL 10, can it be removed from the /etc/yum.repos.d/elrepo.repo file that elrepo-release-10.el10 installs there? Its presence in that file causes GPG errors preventing automatic import of the new key.
> >
> > Thanks,
> >
> > Joseph C. Sible
>
> The elrepo-release-10.0-1.el10.elrepo.noarch package does not contain
> the old GPG key:
>
> $ rpm -ql elrepo-release
> /etc/pki/elrepo
> /etc/pki/elrepo/SECURE-BOOT-KEY-elrepo.org.der
> /etc/pki/rpm-gpg/RPM-GPG-KEY-v2-elrepo.org
> /etc/yum.repos.d/elrepo.repo
>
> Could you check to see if your elrepo.repo file is from the el10 rpm?
>
> Akemi
> _______________________________________________
> elrepo mailing list
> elrepo at lists.elrepo.org
> http://lists.elrepo.org/mailman/listinfo/elrepo
> _______________________________________________
> elrepo mailing list
> elrepo at lists.elrepo.org
> http://lists.elrepo.org/mailman/listinfo/elrepo
> _______________________________________________
> elrepo mailing list
> elrepo at lists.elrepo.org
> http://lists.elrepo.org/mailman/listinfo/elrepo