updateしてたらこんなエラーがでて出来なかった。
The GPG keys listed for the "Zabbix Official Repository" repository are already installed but they are not correct for this package.
Failing package is: zabbix-agent-6.0.43-release1.el8.x86_64
Error: GPG check FAILED
原因はこんな感じでしょう。
・Zabbix 6.0 系で GPGキーが更新
・AlmaLinux 側で 古い GPG Key(A14FE591)を参照
・または 正しい GPG Key が未登録
・その結果、RPM署名検証に失敗して更新できない
解決してみた。
① 正しい Zabbix GPG Key を取得
# rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-B5333005
② GPG Key を RPM DB に登録
# rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-B5333005
③ GPG Key 登録確認
# rpm -qa gpg-pubkey* | grep b5333005
gpg-pubkey-b5333005-66308c87
④ Zabbix リポジトリ設定を確認・修正
こんな感じで全部書き換える
# vi /etc/yum.repos.d/zabbix.repo
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-B5333005
gpgcheck=1
⑤ dnf キャッシュを削除
dnf clean all
# rm -rf /var/cache/dnf
⑥ Zabbix Agent を更新
# dnf update zabbix-agent
AlmaLinux 8 - BaseOS 9.1 MB/s | 51 MB 00:05
AlmaLinux 8 - AppStream 7.8 MB/s | 23 MB 00:03
AlmaLinux 8 - Extras 18 kB/s | 14 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 6.5 MB/s | 14 MB 00:02
MariaDB Server 543 kB/s | 779 kB 00:01
MariaDB MaxScale 26 kB/s | 6.6 kB 00:00
MariaDB Tools 11 kB/s | 4.3 kB 00:00
nginx stable repo 47 kB/s | 94 kB 00:02
prometheus 410 B/s | 833 B 00:02
prometheus 6.0 kB/s | 3.9 kB 00:00
Importing GPG key 0x7457CCD1:
Userid : "https://packagecloud.io/prometheus-rpm/centos (https://packagecloud.io/docs#gpg_signing) "
Fingerprint: D7DF C575 AF4B 92C6 E62A D3C5 F721 6757 7457 CCD1
From : https://packagecloud.io/prometheus-rpm/release/gpgkey
Is this ok [y/N]: y
prometheus 12 kB/s | 3.0 kB 00:00
Importing GPG key 0x168A1EA1:
Userid : "prometheus-rpm "
Fingerprint: C7B7 CCCB BE77 86A4 9DF8 E28D 3A09 16E8 168A 1EA1
From : https://raw.githubusercontent.com/lest/prometheus-rpm/master/RPM-GPG-KEY-prometheus-rpm
Is this ok [y/N]: y
prometheus 41 kB/s | 108 kB 00:02
Remi's RPM repository for Enterprise Linux 8 - 502 B/s | 833 B 00:01
Remi's RPM repository for Enterprise Linux 8 - 3.0 MB/s | 3.1 kB 00:00
Importing GPG key 0x5F11735A:
Userid : "Remi's RPM repository "
Fingerprint: 6B38 FEA7 231F 87F5 2B9C A9D8 5550 9759 5F11 735A
From : /etc/pki/rpm-gpg/RPM-GPG-KEY-remi.el8
Is this ok [y/N]: y
Remi's RPM repository for Enterprise Linux 8 - 998 kB/s | 4.0 MB 00:04
Remi's Modular repository for Enterprise Linux 359 kB/s | 1.1 MB 00:03
Zabbix Official Repository - x86_64 380 kB/s | 654 kB 00:01
Zabbix Official Repository (non-supported) - x8 1.3 kB/s | 1.4 kB 00:01
Zabbix Official Repository (Agent2 Plugins) - x 1.5 kB/s | 1.7 kB 00:01
Dependencies resolved.
================================================================================
Package Architecture Version Repository Size
================================================================================
Upgrading:
zabbix-agent x86_64 6.0.43-release1.el8 zabbix 588 k
Transaction Summary
================================================================================
Upgrade 1 Package
Total download size: 588 k
Is this ok [y/N]: y
Downloading Packages:
zabbix-agent-6.0.43-release1.el8.x86_64.rpm 501 kB/s | 588 kB 00:01
--------------------------------------------------------------------------------
Total 499 kB/s | 588 kB 00:01
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Running scriptlet: zabbix-agent-6.0.43-release1.el8.x86_64 1/1
Running scriptlet: zabbix-agent-6.0.43-release1.el8.x86_64 1/2
Upgrading : zabbix-agent-6.0.43-release1.el8.x86_64 1/2
Running scriptlet: zabbix-agent-6.0.43-release1.el8.x86_64 1/2
Running scriptlet: zabbix-agent-6.0.42-release1.el8.x86_64 2/2
Cleanup : zabbix-agent-6.0.42-release1.el8.x86_64 2/2
Running scriptlet: zabbix-agent-6.0.42-release1.el8.x86_64 2/2
Running scriptlet: zabbix-agent-6.0.43-release1.el8.x86_64 2/2
Running scriptlet: zabbix-agent-6.0.42-release1.el8.x86_64 2/2
Verifying : zabbix-agent-6.0.43-release1.el8.x86_64 1/2
Verifying : zabbix-agent-6.0.42-release1.el8.x86_64 2/2
Upgraded:
zabbix-agent-6.0.43-release1.el8.x86_64
Complete!
update出来るようになりました。