-
Incident report
-
Resolution: Fixed
-
Trivial
-
None
-
None
-
None
-
CentOS 7.2.1511
Installing the zabbix agent rpm package is failing on CentOS 7 and it seems to be caused by a change that was made to the GPG key at http://repo.zabbix.com/RPM-GPG-KEY-ZABBIX, which was modified on 2016-08-13.
Example of failure:
# yum install ./zabbix-agent-2.4.2-1.el7.x86_64.rpm Loaded plugins: fastestmirror, priorities Examining ./zabbix-agent-2.4.2-1.el7.x86_64.rpm: zabbix-agent-2.4.2-1.el7.x86_64 Marking ./zabbix-agent-2.4.2-1.el7.x86_64.rpm to be installed Resolving Dependencies --> Running transaction check ---> Package zabbix-agent.x86_64 0:2.4.2-1.el7 will be installed --> Processing Dependency: zabbix for package: zabbix-agent-2.4.2-1.el7.x86_64 Loading mirror speeds from cached hostfile * base: mirror.us.leaseweb.net * extras: mirror.datto.com * updates: mirror.symnds.com --> Running transaction check ---> Package zabbix.x86_64 0:2.4.8-1.el7 will be installed --> Finished Dependency Resolution Dependencies Resolved ====================================================================================================================================== Package Arch Version Repository Size ====================================================================================================================================== Installing: zabbix-agent x86_64 2.4.2-1.el7 /zabbix-agent-2.4.2-1.el7.x86_64 566 k Installing for dependencies: zabbix x86_64 2.4.8-1.el7 zabbix 163 k Transaction Summary ====================================================================================================================================== Install 1 Package (+1 Dependent package) Total size: 729 k Installed size: 1.2 M Is this ok [y/d/N]: y Downloading packages: warning: /var/cache/yum/x86_64/7/zabbix/packages/zabbix-2.4.8-1.el7.x86_64.rpm: Header V4 DSA/SHA1 Signature, key ID 79ea5ed4: NOKEY Retrieving key from http://repo.zabbix.com/RPM-GPG-KEY-ZABBIX Importing GPG key 0x79EA5ED4: Userid : "Zabbix SIA <[email protected]>" Fingerprint: fbab d5fb 2025 5eca b22e e194 d13d 58e4 79ea 5ed4 From : http://repo.zabbix.com/RPM-GPG-KEY-ZABBIX Is this ok [y/N]: y Public key for zabbix-2.4.8-1.el7.x86_64.rpm is not installed Failing package is: zabbix-2.4.8-1.el7.x86_64 GPG Keys are configured as: http://repo.zabbix.com/RPM-GPG-KEY-ZABBIX
When installed with rpm -import http://repo.zabbix.com/RPM-GPG-KEY-ZABBIX, rpm will see the new key (A14FE591) but not the old one (79EA5ED4), which seems to also be in the file.
[root@docker-asg-0 ~]# rpm -q gpg-pubkey --qf '%{name}-%{version}-%{release} --> %{summary}\n'
gpg-pubkey-f4a80eb5-53a7ff4b --> gpg(CentOS-7 Key (CentOS 7 Official Signing Key) <[email protected]>)
gpg-pubkey-352c64e5-52ae6884 --> gpg(Fedora EPEL (7) <[email protected]>)
gpg-pubkey-a14fe591-578876fd --> gpg(Zabbix LLC <[email protected]>)
I pulled the old key 79EA5ED4 one of my other servers. After removing the old key (with rpm -e) and installing the old key (rpm --import), I was able to install the zabbix-agent rpm.