CentOS 更新 MariaDB 10.5.19-1.el8 失敗 (Error: GPG check FAILED)

最近一次的 CentOS stream 8 更新過程,因為 MariaDB 更新失敗導致暫停更新,觀察錯誤訊息為 Error: GPG check FAILED,猜想應該是套件的發行方,更新了 GPG 金鑰所導致,重新安裝新的 GPG 金鑰,應該就可以解決問題。

問題內容

GPG key at file:///etc/pki/rpm-gpg/MariaDB-Server-GPG-KEY (0x1BB943DB) is already installed
The GPG keys listed for the "MariaDB Server" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.. Failing package is: MariaDB-client-10.5.19-1.el8.x86_64
GPG Keys are configured as: file:///etc/pki/rpm-gpg/MariaDB-Server-GPG-KEY
Public key for MariaDB-common-10.5.19-1.el8.x86_64.rpm is not installed. Failing package is: MariaDB-common-10.5.19-1.el8.x86_64
GPG Keys are configured as: file:///etc/pki/rpm-gpg/MariaDB-Server-GPG-KEY
Public key for MariaDB-devel-10.5.19-1.el8.x86_64.rpm is not installed. Failing package is: MariaDB-devel-10.5.19-1.el8.x86_64
GPG Keys are configured as: file:///etc/pki/rpm-gpg/MariaDB-Server-GPG-KEY
Public key for MariaDB-server-10.5.19-1.el8.x86_64.rpm is not installed. Failing package is: MariaDB-server-10.5.19-1.el8.x86_64
GPG Keys are configured as: file:///etc/pki/rpm-gpg/MariaDB-Server-GPG-KEY
Public key for MariaDB-shared-10.5.19-1.el8.x86_64.rpm is not installed. Failing package is: MariaDB-shared-10.5.19-1.el8.x86_64
GPG Keys are configured as: file:///etc/pki/rpm-gpg/MariaDB-Server-GPG-KEY
Public key for galera-4-26.4.14-1.el8.x86_64.rpm is not installed. Failing package is: galera-4-26.4.14-1.el8.x86_64
GPG Keys are configured as: file:///etc/pki/rpm-gpg/MariaDB-Server-GPG-KEY
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'yum clean packages'.
Error: GPG check FAILED

發生錯誤的關鍵應該就在於 GPG 未通過檢核。

觀察與分析

前往 Planet MariaDB 翻翻看有沒有相關的訊息,果然就發現一篇名為 New GPG Release Key for RPMs 的貼文,文中提到舊 RPM 套件的 GPG 金鑰使用 SHA1 ,由於 Debian 與 Ubuntu 已使用 SHA2 的 GPG 金鑰簽署套件,所以要讓 RPM 套件也使用新的金鑰簽署。

解決方案

只要執行下列指令匯入 GPG 金鑰就可以解決問題:

$ sudo rpm --import https://supplychain.mariadb.com/MariaDB-Server-GPG-KEY

參考資料

發佈留言

這個網站採用 Akismet 服務減少垃圾留言。進一步了解 Akismet 如何處理網站訪客的留言資料