RHEL 10 – dnf transaction blocked by GPG signature verification failure – Fix & Prevention

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Security updates cannot install because package signatures fail verification.

Environment & Reproduction

Observed after mirror change or stale keyring.

dnf upgrade -y

Root Cause Analysis

Repository metadata references a key not present in local RPM trust database.

Quick Triage

Inspect configured gpgkey entries and imported keys.

grep -R gpgkey /etc/yum.repos.d
rpm -qa gpg-pubkey*

Step-by-Step Diagnosis

Trace which repository and package trigger the signature failure.

dnf -v upgrade
rpm -qi gpg-pubkey --qf '%{NAME}-%{VERSION}-%{RELEASE} %{SUMMARY}
'

Solution – Primary Fix

Import the correct vendor GPG key and refresh metadata.

sudo rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
sudo dnf clean metadata
sudo dnf makecache

Solution – Alternative Approaches

Re-sync repository definitions from subscription-manager if key URL is outdated.

sudo subscription-manager repos --list-enabled

Verification & Acceptance Criteria

Updates run without GPG warnings and all packages validate.

Rollback Plan

Remove the recently imported key if it was incorrect.

sudo rpm -e gpg-pubkey-

Prevention & Hardening

Audit key fingerprints and enforce trusted mirror endpoints only.

Related Errors & Cross-Refs

May overlap with metadata checksum mismatch and repository mirror drift.

Related tutorial: View the step-by-step tutorial for rhel-10.

View all rhel-10 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Red Hat guidance on RPM signing keys and secure software supply chain.