Affected versions: CentOS Stream 10

📖 ~1 min read

Table of contents
  1. Symptom & Impact
  2. Environment & Reproduction
  3. Root Cause Analysis
  4. Quick Triage
  5. Step-by-Step Diagnosis
  6. Solution – Primary Fix
  7. Solution – Alternative Approaches
  8. Verification & Acceptance Criteria
  9. Rollback Plan
  10. Prevention & Hardening
  11. Related Errors & Cross-Refs
  12. References & Further Reading

Symptom & Impact

CentOS Stream repo GPG check fails on CentOS Stream 10 disrupts services and slows incident response until the root cause is resolved.

Environment & Reproduction

GPG verification fails after mirror swap because retired key is still pinned in repo file.

rpm -qa gpg-pubkey
cat /etc/yum.repos.d/centos*.repo
ls /etc/pki/rpm-gpg/

Root Cause Analysis

Misalignment between repo configuration and CentOS Stream 10 defaults causes the failure path described above.

Quick Triage

Confirm package state, service status, and recent changes before deeper diagnostics.

systemctl status
rpm -qa | grep -i 
journalctl -p err -b --no-pager | tail -100

Step-by-Step Diagnosis

Capture detailed logs, configuration deltas, and runtime state to isolate the failing component.

dnf --refresh repolist -v
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-Official
rpmkeys --checksig /var/cache/dnf/
Illustrative mockup for centos-stream-10 — repo_centos_stream_repo_diagnostics
Diagnostics for repo/centos-stream-repo on CentOS Stream 10 — Illustrative mockup — Progressive Robot

Solution – Primary Fix

Apply the targeted configuration change and restart the relevant services to restore expected behavior.

Still having issues? Our IT Solutions & Services team can diagnose and resolve this for you. Get in touch for a free consultation.

sudo rpm -e gpg-pubkey-
sudo rpm --import https://www.centos.org/keys/RPM-GPG-KEY-CentOS-Official
sudo dnf clean all && sudo dnf makecache
Illustrative mockup for centos-stream-10 — repo_centos_stream_repo_fix_results
Fix verification for repo/centos-stream-repo on CentOS Stream 10 — Illustrative mockup — Progressive Robot

Solution – Alternative Approaches

Use –nogpgcheck only temporarily; never as a permanent fix.

Verification & Acceptance Criteria

Validate the fix with deterministic checks and ensure no regressions in dependent services.

dnf check-update
rpmkeys -l

Rollback Plan

Revert configuration and restart services to return to the previous known-good state.

rpm --import /root/backup/RPM-GPG-KEY-CentOS-Official-old

Prevention & Hardening

Mirror keys via internal Satellite and rotate on key updates.

Related: RPM-GPG keys, mirror swap; see also adjacent topics in the CentOS Stream 10 common problems series.

Related tutorial: View the step-by-step tutorial for centos-stream-10.

View all centos-stream-10 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

CentOS Stream documentation, Red Hat upstream guides, and CentOS Stream 10 release notes covering this subsystem.

Need Expert Help?

If you cannot resolve this yourself, our team offers hands-on Server Management, Managed IT Services, and flexible Support Plans. Contact us today — we respond within one business day.