[ZBX-21774] RPM GPG key apparently different for zabbix-agent2-5.0.28-1.el8.x86_64 package Created: 2022 Oct 17 Updated: 2022 Oct 18 Resolved: 2022 Oct 18 |
|
| Status: | Closed |
| Project: | ZABBIX BUGS AND ISSUES |
| Component/s: | Agent (G) |
| Affects Version/s: | 5.0.28 |
| Fix Version/s: | None |
| Type: | Incident report | Priority: | Trivial |
| Reporter: | Fraser Gutteridge | Assignee: | Zabbix Support Team |
| Resolution: | Won't fix | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Environment: |
Rocky Linux 8 |
||
| Description |
|
Steps to reproduce:
Output: Last metadata expiration check: 0:00:04 ago on Mon 17 Oct 2022 10:26:37 AM EDT. Dependencies resolved. ==================================================================================== Package Architecture Version Repository Size ==================================================================================== Installing: zabbix-agent2 x86_64 5.0.28-1.el8 zabbix 5.3 M Installing dependencies: compat-openssl11 x86_64 1:1.1.1k-4.el9_0 appstream 1.5 M Transaction Summary ==================================================================================== Install 2 Packages Total size: 6.7 M Installed size: 22 M Is this ok [y/N]: y Downloading Packages: [SKIPPED] compat-openssl11-1.1.1k-4.el9_0.x86_64.rpm: Already downloaded [SKIPPED] zabbix-agent2-5.0.28-1.el8.x86_64.rpm: Already downloaded Zabbix Official Repository - x86_64 1.6 MB/s | 1.7 kB 00:00 Importing GPG key 0xA14FE591: Userid : "Zabbix LLC <[email protected]>" Fingerprint: A184 8F53 52D0 22B9 471D 83D0 082A B56B A14F E591 From : /etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-A14FE591 Is this ok [y/N]: y Key import failed (code 2). Failing package is: zabbix-agent2-5.0.28-1.el8.x86_64 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-A14FE591 The downloaded packages were saved in cache until the next successful transaction. You can remove cached packages by executing 'yum clean packages'. Error: GPG check FAILED This is occurring on a completely new VM (no Zabbix repos configured previously), and after attempting the usual yum troubleshooting steps (clean, makecache, etc). I have compared the installed keys with the ones on repo.zabbix.com and they are exactly the same...so I am assuming that the zabbix-agent2-5.0.28-1.el8.x86_64.rpm was signed with some key that hasn't been made available. |
| Comments |
| Comment by Edgar Akhmetshin [ 2022 Oct 18 ] |
|
Hello Fraser, Cannot reproduce using base Rocky Linux 8 image: docker create -i -t --platform linux/amd64 --name rl8 rockylinux:8.6 /bin/bash docker start rl8 docker exec -ti rl8 bash dnf install https://repo.zabbix.com/zabbix/5.0/rhel/8/x86_64/zabbix-release-5.0-1.el8.noarch.rpm dnf makecache dnf install dnf-plugins-core dnf install zabbix-agent2 ... Importing GPG key 0x6D745A60: Userid : "Release Engineering <[email protected]>" Fingerprint: 7051 C470 A929 F454 CEBE 37B7 15AF 5DAC 6D74 5A60 From : /etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial Is this ok [y/N]: y Key imported successfully Zabbix Official Repository - x86_64 1.6 MB/s | 1.7 kB 00:00 Importing GPG key 0xA14FE591: Userid : "Zabbix LLC <[email protected]>" Fingerprint: A184 8F53 52D0 22B9 471D 83D0 082A B56B A14F E591 From : /etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-A14FE591 Is this ok [y/N]: y Key imported successfully ... dnf download zabbix-agent2 [root@1aa5ec3e344a /]# rpm -qa gpg-pubkey* gpg-pubkey-6d745a60-60287f36 gpg-pubkey-a14fe591-578876fd [root@1aa5ec3e344a /]# rpm -qi gpg-pubkey-a14fe591-578876fd Name : gpg-pubkey Version : a14fe591 Release : 578876fd Architecture: (none) Install Date: Tue Oct 18 06:18:39 2022 Group : Public Keys Size : 0 License : pubkey Signature : (none) Source RPM : (none) Build Date : Fri Jul 15 05:39:09 2016 Build Host : localhost Relocations : (not relocatable) Packager : Zabbix LLC <[email protected]> Summary : gpg(Zabbix LLC <[email protected]>) Description : -----BEGIN PGP PUBLIC KEY BLOCK----- Version: rpm-4.14.3 (NSS-3) mQENBFeIdv0BCADAzkjO9jHoDRfpJt8XgfsBS8FpANfHF2L29ntRwd8ocDwxXSbt BuGIkUSkOPUTx6i/e9hd8vYh4mcX3yYpiW8Sui4aXbJu9uuSdU5KvPOaTsFeit9j BDK4b0baFYBDpcBBrgQuyviMAVAczu5qlwolA/Vu6DWqah1X9p+4EFa1QitxkhYs 3br2ZGy7FZA3f2sZaVhHAPAOBSuQ1W6tiUfTIj/Oc7N+FBjmh3VNfIvMBa0E3rA2 JlObxUEywsgGo7FPWnwjZyv883slHp/I3H4Or9VBouTWA2yICeROmMwjr4mOZtJT z9e4v/a2cG/mJXgxCe+FjBvTvrgOVHAXaNwLABEBAAG0IFphYmJpeCBMTEMgPHBh Y2thZ2VyQHphYmJpeC5jb20+iQE4BBMBAgAiBQJXiHb9AhsDBgsJCAcDAgYVCAIJ CgsEFgIDAQIeAQIXgAAKCRAIKrVroU/lkbO8B/4/MhxoUN2RPmH7BzFGIntKEWAw bRkDzyQOk9TjXVegfsBnzmDSdowh7gyteVauvr62jiVtowlE/95vbXqbBCISLqKG i9Wmbrj7lUXBd2sP7eApFzMUhb3G3GuV5pCnRBIzerDfhXiLE9EWRN89JYDxwCLY ctQHieZtdmlnPyCbFF6wcXTHUEHBPqdTa6hvUqQL2lHLFoduqQz4Q47Cz7tZxnbr akAewEToPcjMoteCSfXwF/BRxSUDlN7tKFfBpYQawS8ZtN09ImHOO6CZ/pA0qQim iNiRUfA25onIDWLLY/NMWg+gK94NVVZ7KmFG3upDB5/uefK6Xwu2PsgiXSQguQEN BFeIdv0BCACZgfqgz5YoX+ujVlw1gX1J+ygf10QsUM9GglLEuDiSS/Aa3C2UbgEa +N7JuvzZigGFCvxtAzaerMMDzbliTqtMGJOTjWEVGxWQ3LiY6+NWgmV46AdXik7s UXM155f1vhOzYp6EZj/xtGvyUzTLUkAlnZNrhEUbUmOhDLassVi32hIyMR5W7w6I Ii0zIM1mSuLR0H6oDEpR3GzuGVHGj4/sLeAg7iY5MziGwySBQk0Dg0xH5YqHb+uK zCTH/ILu3srPJq+237Px/PctAZCEA96ogc/DNF2XjdUpMSaEybR0LuHHstAqkrq8 AyRtDJNYE+09jDFdUIukhErLuo1YPWqFABEBAAGJAR8EGAECAAkFAleIdv0CGwwA CgkQCCq1a6FP5ZH8+wf/erZneDXqM6xYT8qncFpc1GtOCeODNb19Ii22lDEXd9qN UlAz2SB6zC5oywlnR0o1cglcrW96MD/uuCL/+tTczeB2C455ofs2mhpK7nKiA4FM +JZZ6XSBnq7sfsYD6knbvS//SXQV/qYb4bKMvwYnyMz63escgQhOsTT20ptc/w7f C+YPBR/rHImKspyIwxyqU8EXylFW8f3Ugi2+Fna3CAPR9yQIAChkCjUawUa2VFmm 5KP8DHg6oWM5mdqcpvU5DMqpi8SA26DEFvULs8bR+kgDd5AU3I4+ei71GslOdfk4 s1soKT4X2UK+dCCXui+/5ZJHakC67t5OgbMas3Hz4Q== =5TOS -----END PGP PUBLIC KEY BLOCK----- [root@1aa5ec3e344a /]# rpm -K zabbix-agent2-5.0.28-1.el8.x86_64.rpm zabbix-agent2-5.0.28-1.el8.x86_64.rpm: digests signatures OK Looks like you have a mess with system configuration: EL8 and EL9 packages, also compat-openssl11 which is not used on EL8. Please be advised that this section of the tracker is for bug reports only. The case you have submitted can not be qualified as one, so please reach out to [email protected] for commercial support (https://zabbix.com/support) or consultancy services. Alternatively, you can also use our IRC channel or community forum (https://www.zabbix.com/forum) for assistance. With that said, we are closing this ticket. Thank you for understanding. Regards, |