-
Notifications
You must be signed in to change notification settings - Fork 30
Description
Description
The installation of the stackit CLI via dnf on Red Hat Enterprise Linux 8 fails due to a GPG check FAILED error. Despite configuring the repository with the official GPG key as per the documentation, the package signature verification fails during the transaction.
Steps to reproduce
- Configure the repository file
/etc/yum.repos.d/stackit.repoas per the documentation:[stackit] name=STACKIT CLI baseurl=https://packages.stackit.cloud/rpm/cli/$basearch enabled=1 gpgcheck=1 gpgkey=https://packages.stackit.cloud/keys/key.gpg
- Execute
dnf clean packagesto ensure a clean state. - Run
dnf install stackit.
Actual behavior
The package downloads successfully, but the installation aborts immediately after download with a GPG error.
Downloading Packages:
stackit_0.49.0_linux_amd64.rpm 5.6 MB/s | 15 MB 00:02
-------------------------------------------------------------------------------------------------------
Total 5.6 MB/s | 15 MB 00:02
Problem opening package stackit_0.49.0_linux_amd64.rpm
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED
If using dnf install -y stackit --nogpgcheck i am getting
Error: Transaction test error:
package stackit-0.49.0-1.x86_64 does not verify: Header RSA signature: BAD (package tag 268: invalid OpenPGP signature)
Expected behavior
The stackit package should pass the GPG signature verification using the key provided at https://packages.stackit.cloud/keys/key.gpg and install successfully.
Environment
OS: Red Hat Enterprise Linux 8 (x86_64)
Version of STACKIT CLI: 0.49.0-1 (Target version in repo)
Additional information
Verified current repo configuration matches the documentation:
[root@******* yum.repos.d]# cat stackit.repo
[stackit]
name=STACKIT CLI
baseurl=https://packages.stackit.cloud/rpm/cli/$basearch
enabled=1
gpgcheck=1
gpgkey=https://packages.stackit.cloud/keys/key.gpg