Sunday, May 06, 2018

CentOS 7.2 - Puppet Labs PC1 Repository el 7 - x86_64 Already Installed

Recently when I try to do a normal "yum update" on one of my virtual box CentOS 7.2, I got the following error:

"The GPG keys listed for the "Puppet Labs PC1 Repository el 7 - x86_64" repository are already installed but they are not correct for this package. Check that the correct key URLs are configured for this repository."

This is due to a recent key change for the puppetlabs repo (https://groups.google.com/forum/#!topic/puppet-announce/-DiBwr51qhM).

To fix this, just download the new key and overwrite the exisitng key.

Download the correct key file:

$ curl --remote-name --location https://yum.puppetlabs.com/RPM-GPG-KEY-puppet

Verify the key:

$ gpg --with-fingerprint RPM-GPG-KEY-puppet
gpg: directory `/root/.gnupg' created
gpg: new configuration file `/root/.gnupg/gpg.conf' created
gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run
gpg: keyring `/root/.gnupg/secring.gpg' created
gpg: keyring `/root/.gnupg/pubring.gpg' created
pub 4096R/EF8D349F 2016-08-18 Puppet, Inc. Release Key (Puppet, Inc. Release Key)
Key fingerprint = 6F6B 1550 9CF8 E59E 6E46 9F32 7F43 8280 EF8D 349F

Import the new key:

$ gpg --keyid-format 0xLONG --with-fingerprint ./RPM-GPG-KEY-puppet
pub  4096R/0x7F438280EF8D349F 2016-08-18 Puppet, Inc. Release Key (Puppet, Inc. Release Key) <rel...@puppet.com>
      Key fingerprint = 6F6B 1550 9CF8 E59E 6E46  9F32 7F43 8280 EF8D 349F
sub  4096R/0xA2D80E04656674AE 2016-08-18 [expires: 2021-08-17]
$ rpm --import RPM-GPG-KEY-puppet

Now you can enjoy your "yum update".

No comments: