📖 ~1 min read
Table of contents
Symptom & Impact
Package installs are aborted with NOKEY or signature errors on CentOS Stream 10.
Environment & Reproduction
Hosts that recently rotated CentOS keys or were re-imaged without rpm trust DB.
cat /etc/os-release
uname -r
rpm -qa | grep
Root Cause Analysis
Missing or revoked GPG public key in /etc/pki/rpm-gpg/.
Quick Triage
Confirm package, network, SELinux and firewall state.
rpm -qa gpg-pubkey
dnf repolist
ls /etc/pki/rpm-gpg/
Step-by-Step Diagnosis
Drill into package/dnf-gpg state and recent journal entries to isolate the failure.
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
dnf -v install 2>&1 | tail

Solution – Primary Fix
Apply the standard remediation for package/dnf-gpg on CentOS Stream 10.
Still having issues? Our Managed IT Services team can diagnose and resolve this for you. Get in touch for a free consultation.
sudo rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
sudo dnf clean all
sudo dnf install

Solution – Alternative Approaches
Temporarily set gpgcheck=0 only for trusted internal mirrors.
Verification & Acceptance Criteria
Validate the fix with positive functional checks before closing.
rpm -qa gpg-pubkey --qf '%{NAME}-%{VERSION}n'
Rollback Plan
Revert to the previous known-good configuration if the fix regresses.
rpm -e gpg-pubkey-
rpm --import /old/key
Prevention & Hardening
Codify the fix in configuration management and add monitoring.
Automate patch management and compliance across your fleet with our DevOps services.
ansible -m rpm_key with key URL pinned.
Related Errors & Cross-Refs
Subscription content access and CRB repo signature issues.
Related tutorial: View the step-by-step tutorial for centos-stream-10.
View all centos-stream-10 tutorials on the Tutorials Hub →
Browse all common problems & solutions on the Tutorials Hub.
References & Further Reading
CentOS GPG key guide.
Need Expert Help?
If you cannot resolve this yourself, our team offers hands-on Server Management, Managed IT Services, and flexible Support Plans. Contact us today — we respond within one business day.